Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/82558d-8e36-48db-b5cc-bd918df2deb6/1/jYAQchg6Lh-pmq8R35FfAIBjSPs.roa
File: jYAQchg6Lh-pmq8R35FfAIBjSPs.roa (raw, json)
Hash identifier: f9PxkzpARIZU6tMU18wuIarjNc37QjQDQAqFtchxdGs=
Subject key identifier: 8D:80:10:72:18:3A:2E:1F:A9:9A:AF:11:DF:91:5F:00:80:63:48:FB
Certificate issuer: /CN=6046cdd10a7489f3aef12199d24f01a9d9a9d533
Certificate serial: 09F038BC
Authority key identifier: 60:46:CD:D1:0A:74:89:F3:AE:F1:21:99:D2:4F:01:A9:D9:A9:D5:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEbN0Qp0ifOu8SGZ0k8Bqdmp1TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/82558d-8e36-48db-b5cc-bd918df2deb6/1/jYAQchg6Lh-pmq8R35FfAIBjSPs.roa
Signing time: Sat 01 Jan 2022 08:03:54 +0000
ROA not before: Sat 01 Jan 2022 08:03:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29262
IP address blocks: 185.141.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166738108 (0x9f038bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6046cdd10a7489f3aef12199d24f01a9d9a9d533
Validity
Not Before: Jan 1 08:03:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d801072183a2e1fa99aaf11df915f00806348fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c3:4d:c9:2c:5c:17:16:64:4e:11:de:a8:fd:
5e:13:b5:57:48:dc:bb:da:26:f9:c1:df:02:9f:28:
dc:5b:7c:ad:d1:38:11:c8:9c:4c:9f:64:d1:ee:50:
ed:ec:43:5c:05:da:0d:5e:df:74:f4:e7:65:1b:00:
39:96:97:ec:9a:d7:f3:d2:d1:b9:a4:7b:03:52:29:
4e:29:8f:ea:c6:88:3d:75:b4:25:85:a0:c9:fb:92:
7e:7f:53:bf:da:07:a5:61:38:c5:f7:a0:91:22:a9:
ae:26:93:1a:27:a5:bb:e2:02:24:68:62:37:4c:1f:
6e:d8:57:6b:60:51:9a:37:b2:17:9d:0b:ee:11:d6:
08:50:cd:dc:c9:2f:fe:69:d0:36:48:78:50:d0:0d:
25:07:93:53:1e:28:d7:24:9b:f0:9c:44:ac:5b:a9:
5a:5c:0b:8c:38:93:54:af:0d:7f:55:c4:5f:43:ae:
24:59:4f:8c:78:e9:d4:2c:81:fb:68:9d:6c:1e:d6:
05:eb:28:8d:18:e6:f1:76:03:cf:3c:a4:c0:0b:01:
ab:db:fb:12:3f:46:1e:3c:ee:3d:1d:c3:bb:83:4c:
fc:e8:c6:a5:cd:3a:60:d4:4e:0b:6b:75:83:61:b4:
5a:37:d0:ce:14:7c:28:72:d0:56:e1:4d:12:e8:49:
49:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:80:10:72:18:3A:2E:1F:A9:9A:AF:11:DF:91:5F:00:80:63:48:FB
X509v3 Authority Key Identifier:
keyid:60:46:CD:D1:0A:74:89:F3:AE:F1:21:99:D2:4F:01:A9:D9:A9:D5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEbN0Qp0ifOu8SGZ0k8Bqdmp1TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/82558d-8e36-48db-b5cc-bd918df2deb6/1/jYAQchg6Lh-pmq8R35FfAIBjSPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/82558d-8e36-48db-b5cc-bd918df2deb6/1/YEbN0Qp0ifOu8SGZ0k8Bqdmp1TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.32.0/24
Signature Algorithm: sha256WithRSAEncryption
27:7e:30:fb:2e:e7:ba:05:f9:2a:4a:fe:e4:d3:12:1c:a9:2e:
e5:71:a4:3c:d7:8b:de:ea:f1:e3:ea:d0:d0:03:08:d3:e9:c3:
b5:a9:0d:2e:36:64:c8:b2:6c:b1:b8:6d:f3:26:f4:c0:d4:74:
71:cf:61:2a:55:df:9f:2b:30:65:7b:06:d1:d6:1d:14:e3:fb:
6a:7c:35:ed:e5:16:be:e4:d2:2b:07:a9:b2:1f:4d:1e:21:91:
2f:1f:43:7c:52:20:6f:70:72:bf:0b:c4:45:4f:38:44:27:5d:
14:25:b7:56:2b:d5:d6:92:dd:50:7e:88:34:49:11:d0:4d:0f:
8d:c5:b7:e2:ed:b4:49:ca:b3:29:1a:24:26:5b:5e:60:e4:a0:
3e:69:51:75:23:bf:61:97:09:4a:58:87:18:41:12:c1:0e:f5:
52:52:65:2d:bd:f1:b3:dc:86:55:64:e7:80:59:29:79:cd:fd:
01:ee:22:58:f9:df:a0:08:08:81:ec:a8:cb:38:b5:8a:63:87:
67:ca:15:4f:f5:3b:60:5f:b6:b0:7b:a6:5d:ad:c8:c7:30:aa:
9b:ef:c6:68:35:d9:9f:37:49:8d:d3:e3:29:8f:8a:de:17:24:
ab:25:a0:38:49:fd:0f:76:85:5f:23:23:ed:ff:40:63:39:88:
90:c7:0c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:02 2023 by rpki-client on console-fra.rpki-client.org