Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/RcyFVYz18Lxhy7LMZH045Qgr_OI.roa
File: RcyFVYz18Lxhy7LMZH045Qgr_OI.roa (raw, json)
Hash identifier: /+x4k8X5nA9pF/q3/Gzor362tzPjrZCYg6hF8h4r+Sc=
Subject key identifier: 45:CC:85:55:8C:F5:F0:BC:61:CB:B2:CC:64:7D:38:E5:08:2B:FC:E2
Certificate issuer: /CN=1974ba0b871fff7187d3fefe66c29fc703086d2d
Certificate serial: 018317A9BD7B05D575B2CDD2F839EE5CC3A4
Authority key identifier: 19:74:BA:0B:87:1F:FF:71:87:D3:FE:FE:66:C2:9F:C7:03:08:6D:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXS6C4cf_3GH0_7-ZsKfxwMIbS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/RcyFVYz18Lxhy7LMZH045Qgr_OI.roa
Signing time: Wed 07 Sep 2022 11:15:43 +0000
ROA not before: Wed 07 Sep 2022 11:15:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208121
IP address blocks: 185.231.142.0/24 maxlen: 24
185.231.143.0/24 maxlen: 24
185.231.140.0/24 maxlen: 24
185.231.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:17:a9:bd:7b:05:d5:75:b2:cd:d2:f8:39:ee:5c:c3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1974ba0b871fff7187d3fefe66c29fc703086d2d
Validity
Not Before: Sep 7 11:15:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45cc85558cf5f0bc61cbb2cc647d38e5082bfce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e8:b9:8e:3a:02:70:e6:36:f0:f2:1b:68:3d:
e5:80:af:61:4a:22:bf:66:4a:f1:86:06:54:d3:ff:
4b:89:4e:3b:2f:67:6a:99:cc:71:3b:22:9b:bf:df:
f1:e6:69:b4:e1:ad:44:4d:53:e9:99:f7:d8:48:56:
61:6b:dc:a7:04:3c:6d:3e:a3:ab:52:43:cd:2b:ab:
d6:df:9f:65:7c:3d:75:b6:41:2d:52:69:7b:d1:4d:
df:45:65:a7:da:2f:6a:a5:38:35:35:d6:97:e8:29:
c6:b8:50:f6:7e:62:40:0c:34:28:d3:b9:25:6f:71:
71:6e:2b:56:82:d2:38:30:4b:63:0a:69:7a:ec:e8:
ba:2d:70:27:ca:62:ce:5d:f1:28:4d:27:4c:f8:c1:
35:b4:03:ec:dd:50:17:4d:ce:f8:67:75:b2:40:54:
39:b0:3c:b0:3d:0c:c3:15:7f:a3:ff:cd:fe:22:fe:
29:17:4d:e9:f6:27:5c:bd:8b:3a:29:d0:3d:a9:38:
91:d7:79:ee:f0:52:18:be:6b:4d:e6:a4:9b:ad:f7:
d1:b8:66:8a:49:7d:20:37:88:ec:e9:2d:4f:28:80:
83:a6:6f:31:c5:1c:6f:85:85:2e:88:9c:98:97:70:
28:18:a3:8b:42:f1:db:b9:04:11:7b:ee:e4:7a:3a:
d6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CC:85:55:8C:F5:F0:BC:61:CB:B2:CC:64:7D:38:E5:08:2B:FC:E2
X509v3 Authority Key Identifier:
keyid:19:74:BA:0B:87:1F:FF:71:87:D3:FE:FE:66:C2:9F:C7:03:08:6D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXS6C4cf_3GH0_7-ZsKfxwMIbS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/RcyFVYz18Lxhy7LMZH045Qgr_OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/GXS6C4cf_3GH0_7-ZsKfxwMIbS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.140.0/22
Signature Algorithm: sha256WithRSAEncryption
58:78:fc:22:bb:d2:4e:77:87:4e:7a:59:7d:db:41:b3:3c:f9:
ac:7e:03:2b:04:73:d5:14:9c:27:c9:2e:34:ff:35:e9:80:c6:
50:ac:ac:31:31:8f:04:ca:34:07:25:93:03:ae:85:2f:83:d2:
5e:f1:19:af:09:4f:73:38:1b:6f:cd:8b:3a:42:41:af:3d:00:
0f:d0:18:22:8f:5a:7c:1a:0b:f7:12:1c:ef:e0:69:0b:f8:71:
20:bd:d1:a3:26:e8:7c:5b:8f:5b:45:6a:3d:6a:b3:1f:be:86:
fa:a5:98:d5:08:b6:0d:ba:69:cb:0f:1a:e4:a3:f7:aa:11:d9:
25:7e:f7:27:13:0b:09:61:6f:51:65:88:e3:34:a9:89:bc:bc:
a8:01:9f:f2:ed:d9:c5:ab:a1:50:4a:27:04:84:5f:99:32:33:
96:58:bf:8d:1d:26:84:92:22:aa:e6:84:37:68:26:29:53:47:
49:ad:02:db:35:f3:02:60:a5:7a:1f:31:b6:32:e3:d8:95:c6:
a1:41:63:0f:23:02:94:d8:de:3f:55:8c:18:34:25:be:f9:6e:
9f:0c:84:79:d0:e6:0f:97:f4:4e:f2:34:d7:ed:b4:6e:3a:85:
00:02:71:ed:2a:c6:7e:d8:28:b9:f5:52:73:16:80:18:b9:18:
c5:2a:1d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:42 2023 by rpki-client on console-ams.rpki-client.org