Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5b43b8-5cfa-4407-8b63-baa0a30e371f/1/0t9NsuttjBGzFm-eyaFHA2650ds.roa
File: 0t9NsuttjBGzFm-eyaFHA2650ds.roa (raw, json)
Hash identifier: APkqyr5SEJAUlBtmsRPCzAiJSP5HbTIzmB5dqwyvbdw=
Subject key identifier: D2:DF:4D:B2:EB:6D:8C:11:B3:16:6F:9E:C9:A1:47:03:6E:B9:D1:DB
Certificate issuer: /CN=dc432b427a84b541164a2fcb6c34b54fba79ec9a
Certificate serial: 01856C0108FC718D46DF611B9DAC02858B0A
Authority key identifier: DC:43:2B:42:7A:84:B5:41:16:4A:2F:CB:6C:34:B5:4F:BA:79:EC:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EMrQnqEtUEWSi_LbDS1T7p57Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5b43b8-5cfa-4407-8b63-baa0a30e371f/1/0t9NsuttjBGzFm-eyaFHA2650ds.roa
Signing time: Sun 01 Jan 2023 06:24:45 +0000
ROA not before: Sun 01 Jan 2023 06:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15879
IP address blocks: 185.138.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:08:fc:71:8d:46:df:61:1b:9d:ac:02:85:8b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc432b427a84b541164a2fcb6c34b54fba79ec9a
Validity
Not Before: Jan 1 06:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2df4db2eb6d8c11b3166f9ec9a147036eb9d1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:58:ef:a1:6f:a9:e0:a9:ea:14:09:11:b3:14:
ab:fb:8e:02:c7:3e:e8:84:cf:02:b2:c8:7f:a9:11:
19:2a:6f:f6:ad:6e:4a:f2:ef:6f:df:d1:fc:82:c8:
9b:d5:e6:c5:55:d8:e8:e6:3a:92:86:00:d8:da:e8:
10:64:29:77:25:ca:aa:65:9c:4f:cb:c9:1b:ef:0d:
4c:4b:b6:6d:23:1e:72:7f:32:93:c3:bf:28:e2:40:
ff:e2:a5:ff:52:f6:a6:67:95:d7:29:33:fc:0c:13:
1b:74:70:94:59:60:8a:d0:71:5c:82:14:4d:e2:ea:
be:8e:e6:63:d4:5e:17:b9:78:39:c3:75:25:f8:cd:
83:a7:54:4f:bc:e9:99:20:7a:01:c8:47:4d:81:71:
52:e9:ff:a2:e6:c8:25:c4:cd:18:9d:bc:a3:62:66:
39:dc:91:5f:24:fa:d6:45:c7:f0:4d:da:de:a0:17:
80:e6:46:1d:56:0d:69:44:f8:47:32:5b:6e:51:2e:
ed:bd:98:27:a8:6f:92:a6:5b:10:a2:71:d6:ed:f7:
9e:53:ef:f8:ab:23:7e:40:27:42:7c:f7:af:29:8f:
fb:65:13:e2:f8:f2:6f:da:b1:41:3a:7d:e1:fc:b4:
06:03:93:5f:ee:c1:85:0f:03:f9:3c:c4:0b:8e:8a:
49:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DF:4D:B2:EB:6D:8C:11:B3:16:6F:9E:C9:A1:47:03:6E:B9:D1:DB
X509v3 Authority Key Identifier:
keyid:DC:43:2B:42:7A:84:B5:41:16:4A:2F:CB:6C:34:B5:4F:BA:79:EC:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EMrQnqEtUEWSi_LbDS1T7p57Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5b43b8-5cfa-4407-8b63-baa0a30e371f/1/0t9NsuttjBGzFm-eyaFHA2650ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5b43b8-5cfa-4407-8b63-baa0a30e371f/1/3EMrQnqEtUEWSi_LbDS1T7p57Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.248.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:e8:b1:de:fb:33:9c:ef:64:67:22:36:cd:5c:d5:9d:14:bd:
07:1c:9c:5d:4b:f8:f2:91:6f:54:be:1e:8f:4a:db:7b:46:67:
97:78:b4:48:1f:25:44:4a:8d:ac:30:82:6f:54:dc:a1:d0:c6:
1b:71:b7:a6:4a:fc:33:ee:47:05:01:70:2b:a2:32:1e:7c:95:
2b:89:56:0d:cb:b8:a8:2c:e7:83:df:2c:c6:3d:a6:82:e6:91:
09:21:85:98:73:05:46:5f:12:02:41:bd:1b:0f:ca:8c:a6:c4:
a4:3f:48:bd:5b:74:c9:bd:0c:d6:88:df:4c:52:14:76:5a:66:
36:07:9a:34:de:51:d6:ac:7d:9c:7a:e9:5c:d3:0c:b4:8e:24:
29:a4:b1:59:69:cf:37:78:e0:cd:ca:96:90:d8:6f:c3:3f:25:
64:9d:b9:71:f1:02:67:65:a4:26:f2:ea:a4:51:6b:64:65:f5:
a4:65:10:24:3c:4d:4b:e1:f6:87:f8:52:69:48:02:ab:04:1d:
4a:cc:66:e4:4f:ae:19:19:c4:cb:3c:22:1b:c4:f1:0b:e6:eb:
db:ac:1c:07:45:60:18:94:e7:84:59:bd:69:07:5b:18:05:d5:
5f:cf:57:09:50:7a:f5:39:01:84:61:84:f5:44:46:ae:5e:87:
c1:2f:0d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 24 08:20:18 2023 by rpki-client on console-fra.rpki-client.org