Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/866243-4a17-4521-adbe-9fc5fea1f8ee/1/uyZMIt4cakJOygzBhYtUC5iKl3w.roa
File: uyZMIt4cakJOygzBhYtUC5iKl3w.roa (raw, json)
Hash identifier: 428x0DuobxHzB2c6K/QQVjUHAI1x1RiWtHi3b8q3lKc=
Subject key identifier: BB:26:4C:22:DE:1C:6A:42:4E:CA:0C:C1:85:8B:54:0B:98:8A:97:7C
Certificate issuer: /CN=a3156e1bb9e544a66e2164d15491e2e16f0078c5
Certificate serial: 0181F7527B898B80636138489E3A1C9A4DA4
Authority key identifier: A3:15:6E:1B:B9:E5:44:A6:6E:21:64:D1:54:91:E2:E1:6F:00:78:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxVuG7nlRKZuIWTRVJHi4W8AeMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/866243-4a17-4521-adbe-9fc5fea1f8ee/1/uyZMIt4cakJOygzBhYtUC5iKl3w.roa
Signing time: Wed 13 Jul 2022 11:29:46 +0000
ROA not before: Wed 13 Jul 2022 11:29:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41230
IP address blocks: 185.134.138.0/24 maxlen: 24
185.134.136.0/23 maxlen: 23
2a0e:2a40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:52:7b:89:8b:80:63:61:38:48:9e:3a:1c:9a:4d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3156e1bb9e544a66e2164d15491e2e16f0078c5
Validity
Not Before: Jul 13 11:29:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb264c22de1c6a424eca0cc1858b540b988a977c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:26:4d:d5:f1:bf:e6:2a:db:d6:f7:73:a3:
f5:80:d4:a1:7f:06:c8:94:d6:e1:7f:e9:2f:75:7b:
62:71:72:04:7f:e2:a1:68:53:dc:dd:88:ee:c6:33:
13:54:48:4b:ee:16:c1:18:76:0f:34:0e:ff:3d:a2:
95:9d:58:7b:9e:53:d2:8d:58:74:10:b3:66:fd:20:
3a:d6:17:e4:cb:d7:72:e3:03:b1:f8:a3:17:b5:5f:
6f:82:30:4e:ea:28:69:58:c0:89:de:ca:f2:79:0a:
12:a0:a4:00:56:4b:ef:b3:5c:0f:cb:9e:0c:c5:3b:
88:de:3f:e3:cf:48:90:78:ee:f4:32:23:ce:43:a5:
85:7f:c7:33:1a:c3:17:d1:76:63:96:9c:6e:2a:f9:
ec:c4:a2:31:36:9e:40:e2:d2:eb:4b:43:35:92:c2:
83:9f:74:39:b3:83:cf:3b:98:b9:64:56:f3:a7:49:
b6:c0:fe:92:6c:96:87:b5:5b:00:f2:91:e1:b0:83:
38:8b:42:39:ae:27:ce:6c:f3:a8:e5:de:b2:0c:c7:
1b:39:da:cf:06:47:04:1a:28:9d:8a:ea:5c:d5:7a:
aa:4a:de:e1:34:3e:7b:eb:4a:a5:3a:b8:59:b0:a4:
48:3b:39:6a:3f:68:ea:9d:8f:79:aa:ea:78:46:30:
85:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:26:4C:22:DE:1C:6A:42:4E:CA:0C:C1:85:8B:54:0B:98:8A:97:7C
X509v3 Authority Key Identifier:
keyid:A3:15:6E:1B:B9:E5:44:A6:6E:21:64:D1:54:91:E2:E1:6F:00:78:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxVuG7nlRKZuIWTRVJHi4W8AeMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/866243-4a17-4521-adbe-9fc5fea1f8ee/1/uyZMIt4cakJOygzBhYtUC5iKl3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/866243-4a17-4521-adbe-9fc5fea1f8ee/1/oxVuG7nlRKZuIWTRVJHi4W8AeMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.136.0-185.134.138.255
IPv6:
2a0e:2a40::/29
Signature Algorithm: sha256WithRSAEncryption
47:74:58:57:cc:ed:e7:97:2a:0c:db:e0:d6:3e:c6:a3:72:03:
e6:73:1c:83:4c:e1:08:6b:e7:fb:2b:7d:b2:81:13:c1:91:86:
d1:35:88:89:1b:fe:29:f7:99:04:45:43:a3:ad:fc:99:bf:45:
da:4c:79:56:b1:6e:8a:e0:33:f8:df:2e:e5:6c:46:6d:ce:32:
ef:e8:14:02:54:6d:75:39:9d:61:20:28:41:5d:dc:74:df:a5:
b6:ff:42:ad:18:da:31:45:cb:4d:f4:a9:a2:5e:ca:c0:1a:8e:
13:39:d6:be:35:1f:1d:e6:ef:be:26:eb:49:a8:65:f2:59:06:
33:19:14:64:5d:bb:7a:4a:d2:e9:6a:5f:04:59:0e:04:1f:82:
29:1e:7b:3c:e7:4d:39:c2:7f:45:b2:68:a8:4a:d8:06:99:55:
ff:16:d9:04:97:5f:2d:93:4d:56:b6:0d:f8:e9:ec:b2:e6:de:
96:50:92:75:37:95:42:9e:f8:6f:b1:bf:5b:70:63:f9:6f:2f:
a7:d4:1d:ee:c7:7d:9f:78:cd:13:a1:63:35:0c:fd:9e:a5:77:
0d:42:01:b6:1f:96:06:07:3a:ea:a8:f6:70:36:4d:83:43:e5:
ea:ea:b4:5d:ad:f7:67:ac:ce:2f:83:e3:4a:cc:9b:30:90:b4:
6e:3e:87:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:04 2024 by rpki-client on console-ams.rpki-client.org