Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/r1lrbM9QmjvnijnZEUOe7Kv9VIw.roa
File: r1lrbM9QmjvnijnZEUOe7Kv9VIw.roa (raw, json)
Hash identifier: SuQvgna2t1VbZz4blURAZKfVNU9udyhLbV0yeXyTyJI=
Subject key identifier: AF:59:6B:6C:CF:50:9A:3B:E7:8A:39:D9:11:43:9E:EC:AB:FD:54:8C
Certificate issuer: /CN=1974ba0b871fff7187d3fefe66c29fc703086d2d
Certificate serial: 0184CD681341ED996C60F8696256E9A207D8
Authority key identifier: 19:74:BA:0B:87:1F:FF:71:87:D3:FE:FE:66:C2:9F:C7:03:08:6D:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXS6C4cf_3GH0_7-ZsKfxwMIbS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/r1lrbM9QmjvnijnZEUOe7Kv9VIw.roa
Signing time: Thu 01 Dec 2022 11:17:40 +0000
ROA not before: Thu 01 Dec 2022 11:17:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208121
IP address blocks: 185.231.142.0/24 maxlen: 24
185.231.140.0/24 maxlen: 24
185.231.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cd:68:13:41:ed:99:6c:60:f8:69:62:56:e9:a2:07:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1974ba0b871fff7187d3fefe66c29fc703086d2d
Validity
Not Before: Dec 1 11:17:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af596b6ccf509a3be78a39d911439eecabfd548c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b7:ea:81:96:a4:4c:b5:3a:21:c5:c0:fd:ee:
55:a2:28:6d:d4:a2:2a:df:24:eb:b5:a2:d6:ad:93:
49:94:f2:5d:b5:00:8f:98:5d:49:35:f7:bc:79:16:
b5:78:b9:44:d5:f2:3c:5f:17:1d:5e:9a:ef:a3:d4:
0d:44:ba:33:f5:c8:33:8c:ea:2b:c1:6b:41:0c:f9:
da:20:5a:02:ba:a6:0f:72:d7:ee:94:b7:92:7e:a5:
2b:9a:68:4b:9f:e8:41:14:e0:73:be:41:0a:95:85:
14:aa:26:41:7c:26:4e:81:bb:02:96:aa:e7:41:0e:
36:0c:e9:5c:d8:da:fc:44:84:41:45:58:e4:1a:18:
d1:51:b4:fd:43:90:8d:6e:e5:0f:82:a4:14:6c:63:
77:ac:3b:8e:c3:05:68:7d:b4:72:cd:1f:bf:cc:f0:
11:4e:b0:9b:06:d0:d9:be:68:88:46:9f:9f:c4:7b:
06:e0:9d:0b:4b:79:f0:fa:07:98:da:31:c2:dd:88:
c6:7a:44:2b:84:07:b7:9c:8f:99:88:85:ca:93:61:
83:7e:e4:42:42:6b:fe:a3:6c:eb:6b:81:fd:cc:a4:
36:8a:04:c2:a0:57:47:07:31:7e:f5:3e:b3:0a:94:
5d:fc:34:af:ab:b9:06:ca:1e:ea:3f:a5:8a:ab:8e:
b0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:59:6B:6C:CF:50:9A:3B:E7:8A:39:D9:11:43:9E:EC:AB:FD:54:8C
X509v3 Authority Key Identifier:
keyid:19:74:BA:0B:87:1F:FF:71:87:D3:FE:FE:66:C2:9F:C7:03:08:6D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXS6C4cf_3GH0_7-ZsKfxwMIbS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/r1lrbM9QmjvnijnZEUOe7Kv9VIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/GXS6C4cf_3GH0_7-ZsKfxwMIbS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.140.0-185.231.142.255
Signature Algorithm: sha256WithRSAEncryption
00:49:a5:56:9b:6b:c1:a0:d2:96:53:43:ff:3b:cf:9f:d6:83:
21:21:cc:5d:51:f8:8d:09:6f:cf:56:66:73:a2:3d:12:bc:e2:
01:cc:8d:44:85:36:f6:7d:94:64:2f:1b:27:dd:f4:9a:5d:ff:
d3:d8:15:62:3e:7d:bd:64:b5:9f:04:ce:a2:46:99:55:17:02:
e7:87:51:92:25:c8:88:5b:55:09:e9:2a:40:37:7f:60:54:4d:
31:6a:c6:28:72:22:0a:ad:fd:eb:5c:55:fd:4d:87:21:e4:1a:
0c:4d:5f:57:b9:d4:21:86:48:48:0f:65:b4:52:ab:31:98:4c:
91:eb:d5:b6:26:e8:72:5c:08:ef:73:db:6f:31:6e:02:92:7c:
26:72:32:0f:b3:09:14:de:fe:b9:fe:90:70:c0:92:28:bd:97:
a4:85:5f:32:bb:15:69:9d:af:18:36:eb:c5:8b:53:af:fc:7c:
b1:e4:85:16:f1:06:ec:75:1a:ab:88:e0:d6:55:05:06:f6:0d:
93:f4:97:52:f8:1c:86:6b:60:9b:55:a2:4f:46:fb:43:1c:a1:
fd:22:70:65:f3:fc:bd:1a:ce:8c:97:0e:88:43:7b:8e:a7:9e:
5d:87:d5:5e:c6:41:28:e4:4b:d8:cb:0a:88:ef:d2:66:0d:b6:
4a:0b:a2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:42 2023 by rpki-client on console-ams.rpki-client.org