Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6f9af9-9afa-4d4a-a8cf-974c14130eaf/1/oquFrzoYDDIiOFCC0HRSzZxVS9w.roa
File: oquFrzoYDDIiOFCC0HRSzZxVS9w.roa (raw, json)
Hash identifier: VQs/UUMS7NTaqQYFPoDuVu0tCMjDdnXjjut33masJyo=
Subject key identifier: A2:AB:85:AF:3A:18:0C:32:22:38:50:82:D0:74:52:CD:9C:55:4B:DC
Certificate issuer: /CN=c784e2e1d8d136f51223a35b0bbeed01b477b425
Certificate serial: 01856D5D0491DBB97705DE8E4F392C3ABD99
Authority key identifier: C7:84:E2:E1:D8:D1:36:F5:12:23:A3:5B:0B:BE:ED:01:B4:77:B4:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4Ti4djRNvUSI6NbC77tAbR3tCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6f9af9-9afa-4d4a-a8cf-974c14130eaf/1/oquFrzoYDDIiOFCC0HRSzZxVS9w.roa
Signing time: Sun 01 Jan 2023 12:44:50 +0000
ROA not before: Sun 01 Jan 2023 12:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 185.232.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:04:91:db:b9:77:05:de:8e:4f:39:2c:3a:bd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c784e2e1d8d136f51223a35b0bbeed01b477b425
Validity
Not Before: Jan 1 12:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2ab85af3a180c3222385082d07452cd9c554bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4b:73:0a:59:79:0a:4c:66:61:06:7f:06:f6:
d7:1d:62:13:ed:c2:00:4a:f0:d1:58:1e:dc:f6:ed:
56:b1:ca:bd:92:5a:ec:26:28:b7:d2:f6:08:fb:53:
fc:44:bc:b5:f5:d1:e7:91:3c:0c:18:49:44:be:bb:
d3:05:d0:a7:20:ce:2a:59:7f:ed:1b:e3:2b:54:22:
30:84:bb:e5:e1:73:52:67:6b:fd:91:5e:c8:de:25:
5d:c3:ed:e0:45:de:36:b9:cf:2e:55:c1:50:0a:7c:
3c:dc:cd:ee:7f:63:3c:4d:82:52:14:80:cf:e8:37:
73:c5:dd:48:52:5a:0c:7c:0b:a3:8b:20:db:ee:82:
41:bb:9b:b6:93:ce:04:55:39:21:d5:af:7a:82:8f:
42:5b:3d:c3:b3:4c:3c:42:5c:14:12:3a:b9:39:b2:
9a:28:f6:75:43:35:aa:16:e3:e6:c9:94:a5:6c:ec:
85:2d:c3:c6:ea:43:56:3b:c7:d0:98:29:49:53:31:
0e:1b:37:aa:53:68:a7:15:71:61:77:e1:4d:d3:9b:
b5:92:83:2e:9f:42:cd:cf:0f:36:4c:df:43:df:7f:
ae:8d:94:40:28:3a:db:74:aa:f2:c3:4c:c4:c9:a2:
0a:3e:46:c6:ae:2b:c7:97:9a:3a:73:d5:5e:9b:af:
21:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AB:85:AF:3A:18:0C:32:22:38:50:82:D0:74:52:CD:9C:55:4B:DC
X509v3 Authority Key Identifier:
keyid:C7:84:E2:E1:D8:D1:36:F5:12:23:A3:5B:0B:BE:ED:01:B4:77:B4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4Ti4djRNvUSI6NbC77tAbR3tCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6f9af9-9afa-4d4a-a8cf-974c14130eaf/1/oquFrzoYDDIiOFCC0HRSzZxVS9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6f9af9-9afa-4d4a-a8cf-974c14130eaf/1/x4Ti4djRNvUSI6NbC77tAbR3tCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.117.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:c2:fb:50:35:76:da:59:4a:71:bd:de:df:eb:80:10:d0:af:
d0:be:0e:6a:79:c8:15:6f:92:26:65:fe:90:7d:af:fa:d3:2f:
ec:1d:70:4d:c9:f9:3d:6a:f8:3d:39:3e:af:d0:b1:df:34:36:
79:08:bc:5d:7a:34:9a:31:32:b5:39:0a:26:98:a2:e5:0b:d1:
4d:6c:82:68:e9:97:b8:4e:8f:27:47:e3:3c:c1:44:eb:dc:94:
71:43:b7:19:a0:02:00:73:4c:4a:4b:4c:00:7a:99:d4:4d:ea:
8b:e3:4f:69:34:ad:86:d7:1c:ed:19:d6:1f:f2:dc:ba:f7:b6:
cf:7f:3d:79:26:3c:77:84:21:e9:ef:e1:44:31:c2:db:75:5b:
a2:c4:36:20:05:0f:33:32:c6:6c:26:19:88:7c:97:36:31:5f:
b9:0c:88:55:ae:be:3a:be:ee:28:b5:a5:6a:4d:7c:cf:9e:95:
cd:a3:61:d7:30:bf:10:bd:03:8e:3b:d7:ab:55:63:e6:bd:1c:
b5:aa:e6:35:cc:85:79:f5:23:f0:b3:00:23:99:dd:a9:e4:ba:
89:5c:99:7f:19:8f:78:85:b4:64:76:26:a6:bf:30:67:65:e8:
01:9c:f2:28:a0:97:f9:29:59:7f:68:8c:d5:14:63:20:9a:0c:
20:aa:f3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:07 2024 by rpki-client on console-fra.rpki-client.org