Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/dc1dbc-090b-4df3-be56-41028edbf710/1/fZ1qug1wr0qOHMFCstKbWaBREmQ.roa
File: fZ1qug1wr0qOHMFCstKbWaBREmQ.roa (raw, json)
Hash identifier: 9OfpmLk/HtvlMgThHdbL+wJD8l73Gbq5vPYLlMungZc=
Subject key identifier: 7D:9D:6A:BA:0D:70:AF:4A:8E:1C:C1:42:B2:D2:9B:59:A0:51:12:64
Certificate issuer: /CN=26d98af410751d5ec7bd54f751572247ebe88399
Certificate serial: 0185714C2A04DE0E2B6ABA06741549773267
Authority key identifier: 26:D9:8A:F4:10:75:1D:5E:C7:BD:54:F7:51:57:22:47:EB:E8:83:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmK9BB1HV7HvVT3UVciR-vog5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/dc1dbc-090b-4df3-be56-41028edbf710/1/fZ1qug1wr0qOHMFCstKbWaBREmQ.roa
Signing time: Mon 02 Jan 2023 07:04:54 +0000
ROA not before: Mon 02 Jan 2023 07:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8849
IP address blocks: 185.230.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:2a:04:de:0e:2b:6a:ba:06:74:15:49:77:32:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d98af410751d5ec7bd54f751572247ebe88399
Validity
Not Before: Jan 2 07:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d9d6aba0d70af4a8e1cc142b2d29b59a0511264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ce:8d:18:6e:28:71:8c:66:9a:2c:62:18:fc:
60:79:c3:b9:ac:54:ec:08:84:17:0a:5d:81:8a:21:
52:45:84:e8:82:44:73:9f:e0:a7:11:3f:aa:7d:ae:
54:17:b9:f2:88:73:ac:f6:96:57:3a:e4:47:23:14:
f6:38:80:86:93:39:14:5e:c6:8b:07:3e:c7:e8:e6:
9e:1a:de:48:c6:c0:b2:5f:63:f1:37:6d:70:73:b5:
6e:2c:99:4a:68:1f:a5:85:ea:e1:c3:a5:f7:79:c9:
31:bc:91:cb:4d:76:59:d3:83:78:25:10:cb:66:94:
c3:6f:61:41:ef:7a:99:04:b5:0d:53:a8:57:52:db:
c5:e0:10:b0:61:aa:5f:09:8e:55:3c:a6:48:6b:17:
ba:4b:3d:3b:8e:9a:0d:fe:c8:f5:d5:36:50:28:71:
d2:a5:13:4a:a5:47:d1:94:1c:77:54:d9:6e:6a:51:
5e:84:81:71:ae:02:04:9f:4b:c1:34:8d:89:6a:7b:
7f:0c:e2:09:28:c2:78:d6:ee:cf:49:55:a7:05:49:
ca:45:36:fd:cf:43:ee:b6:fb:d2:16:a8:63:ef:4c:
0d:e8:58:b8:49:cf:c2:a7:ed:d1:7b:41:ee:db:e7:
21:88:ac:ab:7e:35:66:d8:e1:c6:43:49:61:c4:e0:
81:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9D:6A:BA:0D:70:AF:4A:8E:1C:C1:42:B2:D2:9B:59:A0:51:12:64
X509v3 Authority Key Identifier:
keyid:26:D9:8A:F4:10:75:1D:5E:C7:BD:54:F7:51:57:22:47:EB:E8:83:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmK9BB1HV7HvVT3UVciR-vog5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dc1dbc-090b-4df3-be56-41028edbf710/1/fZ1qug1wr0qOHMFCstKbWaBREmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dc1dbc-090b-4df3-be56-41028edbf710/1/JtmK9BB1HV7HvVT3UVciR-vog5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.245.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:a5:a7:b1:fe:0d:18:3f:fc:91:2e:eb:05:86:6b:c2:af:59:
83:81:72:7b:5b:ec:88:60:09:d6:8b:d3:a9:38:5b:2c:06:7c:
d1:20:2a:d4:3d:99:99:97:1e:55:02:d0:1d:0d:35:9c:6c:ac:
93:ea:7e:f4:5b:1e:04:c3:73:d0:ae:13:6f:99:27:8e:62:fe:
a3:33:e2:97:77:e0:bb:3b:36:ff:d0:24:a4:92:5a:08:46:87:
02:83:9d:68:29:e6:b8:89:a0:f8:65:30:5a:42:07:6b:b8:50:
a6:55:8c:9c:35:78:cd:5f:2c:e1:48:0e:bc:77:83:65:3b:13:
e0:16:45:81:4a:c3:cb:8d:a7:93:23:d4:bf:93:50:4e:ad:c9:
3f:59:06:aa:a8:cd:1e:e4:69:0f:65:7c:72:5d:d1:6d:2a:0e:
f7:e1:d5:f1:b1:05:4c:20:ce:b0:59:6d:43:ac:ad:30:db:ca:
9c:a3:9d:c0:2a:49:c2:ac:e5:74:eb:84:51:e8:ee:d3:14:e0:
a7:0f:cf:10:99:15:7d:24:2b:a1:d5:75:db:cf:fd:b4:40:3e:
b0:29:a0:2e:40:c2:7a:c8:0b:41:4a:0e:3e:e2:3a:c8:fb:b6:
78:c5:59:8a:10:86:0f:35:95:9c:e9:b8:e8:1f:9c:ca:61:75:
b8:79:cc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:21 2024 by rpki-client on console-ams.rpki-client.org