Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3495b4-7b60-4a83-8c68-93c444668034/1/CS9PFc_OBl5oms1w1Peae7ixlIY.roa
File: CS9PFc_OBl5oms1w1Peae7ixlIY.roa (raw, json)
Hash identifier: j+jVklb/kCMqc4lye89lJEqh9/JIc98eeFNW1IhOO9I=
Subject key identifier: 09:2F:4F:15:CF:CE:06:5E:68:9A:CD:70:D4:F7:9A:7B:B8:B1:94:86
Certificate issuer: /CN=992be8d0a80d0665d8c6af41834665c88d6dfe76
Certificate serial: 01856E1D450D59CFBAFA3083FC539941EDB8
Authority key identifier: 99:2B:E8:D0:A8:0D:06:65:D8:C6:AF:41:83:46:65:C8:8D:6D:FE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSvo0KgNBmXYxq9Bg0ZlyI1t_nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3495b4-7b60-4a83-8c68-93c444668034/1/CS9PFc_OBl5oms1w1Peae7ixlIY.roa
Signing time: Sun 01 Jan 2023 16:14:50 +0000
ROA not before: Sun 01 Jan 2023 16:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212599
IP address blocks: 185.134.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:1d:45:0d:59:cf:ba:fa:30:83:fc:53:99:41:ed:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992be8d0a80d0665d8c6af41834665c88d6dfe76
Validity
Not Before: Jan 1 16:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=092f4f15cfce065e689acd70d4f79a7bb8b19486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1b:6b:78:94:b1:4b:9a:23:1c:8b:3a:f8:8a:
55:76:49:df:57:8e:e3:c9:03:1b:68:4e:bf:d2:16:
5f:19:2f:9c:8b:49:ec:6f:b8:9c:7f:bf:2a:45:91:
44:21:a3:b6:a9:84:cd:c3:e4:18:9f:5f:36:c2:ae:
28:7d:ee:8b:69:0c:57:ed:b7:d6:7d:26:d3:8c:f8:
1d:e6:de:67:6b:aa:0d:23:61:72:26:de:11:2b:f5:
53:38:51:ea:37:59:fd:bb:8f:29:21:d7:6c:1d:f9:
4f:c1:59:47:78:4c:a5:a5:71:4b:b0:23:53:84:28:
43:36:a7:3c:e8:be:8f:1c:53:66:c2:17:55:85:13:
3d:a7:46:39:9c:27:0c:36:96:c2:75:a7:ef:91:d9:
52:b7:dc:36:33:aa:d4:8a:68:9d:74:fd:d3:ea:80:
d2:37:a0:43:7a:25:c0:fa:18:2d:85:96:24:19:9a:
12:82:c1:5f:21:4c:2b:4b:df:4e:57:86:6f:05:79:
33:61:c2:0f:8a:2f:2f:a1:08:b6:90:b9:f5:f9:b2:
f1:74:4a:1c:8c:72:09:07:72:f4:64:d2:8c:a5:3b:
72:0b:84:2c:4f:d2:2f:f2:77:d1:ce:69:0c:3e:a2:
85:58:3c:43:c7:bf:5d:74:27:d2:94:c4:5f:32:a8:
2d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2F:4F:15:CF:CE:06:5E:68:9A:CD:70:D4:F7:9A:7B:B8:B1:94:86
X509v3 Authority Key Identifier:
keyid:99:2B:E8:D0:A8:0D:06:65:D8:C6:AF:41:83:46:65:C8:8D:6D:FE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSvo0KgNBmXYxq9Bg0ZlyI1t_nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3495b4-7b60-4a83-8c68-93c444668034/1/CS9PFc_OBl5oms1w1Peae7ixlIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3495b4-7b60-4a83-8c68-93c444668034/1/mSvo0KgNBmXYxq9Bg0ZlyI1t_nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.175.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:dd:a3:d0:83:ad:a1:0d:6e:00:23:2a:a9:4e:7c:ac:ef:72:
e1:a0:92:d2:e0:79:1e:57:58:3b:3a:2d:30:0d:8d:6a:d3:4a:
f7:38:2c:d9:e1:43:b2:0b:ec:ea:21:6d:b6:1b:31:54:86:c0:
8f:c7:65:d5:15:66:dd:77:df:17:42:5a:9d:cf:a9:1f:e7:78:
3f:b0:f3:75:cd:22:59:0e:f9:64:7e:0d:e5:a0:d7:a5:06:b0:
8d:e7:ab:ef:6a:b4:d0:73:91:ad:d8:59:d0:61:7d:07:a4:cd:
f9:05:42:9e:6d:00:1e:c5:75:e6:43:b8:5c:bc:09:62:b7:39:
4c:70:9e:34:67:a5:59:51:0a:ae:4d:6c:68:7d:a2:8f:26:95:
9f:20:4b:7b:ba:f6:db:62:01:58:de:9e:11:8f:db:14:bf:9a:
5b:57:6e:b5:6f:e4:d2:4c:98:d9:fc:44:88:8a:03:0d:c0:18:
ea:76:9f:79:b8:11:10:c9:7f:89:55:7d:b5:1c:0c:05:3c:8a:
ca:02:ff:6d:e4:6b:29:19:4e:ce:7b:e8:ff:9b:c6:73:c9:75:
b8:58:ea:b2:bd:41:a3:06:7d:2a:9c:95:ab:d6:40:ea:89:94:
e1:ab:82:43:7a:02:c2:eb:18:9e:91:7a:d8:4c:0f:35:8a:e1:
af:8f:9a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:21 2024 by rpki-client on console-ams.rpki-client.org