Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/c1bf-1awPS3x60axf4CJODIj9u4.roa
File: c1bf-1awPS3x60axf4CJODIj9u4.roa (raw, json)
Hash identifier: Pw/4aW1wxz4XVmntIU9mAGfBCt7i0oCtGm1T4MXw02c=
Subject key identifier: 73:56:DF:FB:56:B0:3D:2D:F1:EB:46:B1:7F:80:89:38:32:23:F6:EE
Certificate issuer: /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial: 01856DD4091603D75A79D7C17A7A3C1BDE14
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/c1bf-1awPS3x60axf4CJODIj9u4.roa
Signing time: Sun 01 Jan 2023 14:54:50 +0000
ROA not before: Sun 01 Jan 2023 14:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34012
IP address blocks: 162.248.199.0/24 maxlen: 24
162.251.33.0/24 maxlen: 24
2a01:40e0:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:09:16:03:d7:5a:79:d7:c1:7a:7a:3c:1b:de:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Validity
Not Before: Jan 1 14:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7356dffb56b03d2df1eb46b17f8089383223f6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ed:bc:de:cd:58:70:26:77:f7:14:07:61:06:
41:e4:f9:3b:45:04:88:93:66:9b:60:21:46:d7:97:
b3:a7:0f:9a:28:c5:07:ae:f9:03:88:a6:51:1b:41:
08:a3:c2:78:d6:f7:c5:1f:c6:15:91:76:f9:db:a0:
69:74:81:ca:b9:8e:ad:d8:00:02:e0:86:65:6f:a1:
ef:69:df:43:a2:75:12:77:73:e4:49:11:01:92:ce:
6f:3e:c7:59:bb:96:a7:88:74:b6:53:27:36:4b:6d:
ad:4e:35:1e:19:f3:98:56:bf:ea:94:21:d4:d3:59:
a0:0d:ae:9b:f4:6e:57:85:dc:cf:73:34:e2:49:88:
02:83:6b:6f:3b:87:ae:d8:9a:d5:b9:5d:80:37:17:
b8:4d:7a:74:52:5e:48:4e:b6:60:c7:ff:c9:9e:b4:
da:73:73:f3:9a:b9:61:eb:ce:a6:e7:51:82:b7:cf:
96:10:3b:d0:01:19:3c:01:e6:8e:3b:3e:43:b5:f2:
3c:46:06:25:31:4f:0f:6a:b3:1e:ba:10:14:0d:07:
0b:7b:fc:03:0d:f8:fb:27:db:4f:4e:a8:13:05:5c:
85:d3:65:0b:cf:29:aa:29:a4:e8:d9:30:39:f2:34:
59:3b:c8:36:eb:01:76:00:5f:a8:f8:7e:c1:76:bc:
bc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:56:DF:FB:56:B0:3D:2D:F1:EB:46:B1:7F:80:89:38:32:23:F6:EE
X509v3 Authority Key Identifier:
keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/c1bf-1awPS3x60axf4CJODIj9u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.248.199.0/24
162.251.33.0/24
IPv6:
2a01:40e0:2::/48
Signature Algorithm: sha256WithRSAEncryption
79:c2:75:9c:40:88:e3:5c:86:87:a4:ba:b8:9c:8a:76:83:25:
1f:3a:af:6c:ea:e1:b9:7c:d2:39:bc:84:2c:71:43:85:67:43:
0e:20:b3:75:18:81:1d:44:e2:64:8b:5a:c4:05:1a:2d:b8:e0:
0e:5c:15:67:97:1f:a9:44:9c:91:59:46:a2:d9:3d:a2:6c:bf:
2e:4d:1a:77:50:fc:4a:cd:b8:51:20:f0:70:52:97:68:79:5b:
c9:73:c7:85:62:77:eb:49:40:78:a3:8c:af:4b:90:aa:e6:d8:
7e:ba:98:e1:5d:db:53:6d:78:e9:98:03:84:74:55:8a:70:52:
e5:51:3d:90:85:f6:6b:19:90:46:16:f4:f0:f6:b1:55:00:07:
c5:8d:46:16:e7:4b:95:75:72:a3:2e:58:f2:53:6e:db:81:46:
93:e4:fb:fe:de:fb:fe:ad:89:77:79:c6:5c:40:a0:ef:1a:51:
85:a8:90:62:c6:45:ea:2f:c9:7b:71:90:b8:3c:7c:d1:c3:9c:
de:0f:ea:dd:76:98:53:08:83:4a:35:97:03:b0:e7:e2:12:0e:
40:df:56:c8:9b:aa:c7:a2:8a:b7:ff:3c:ab:aa:29:19:f6:1a:
eb:20:c0:f7:2c:62:f6:52:15:82:93:97:0b:41:7f:49:19:76:
0b:99:ca:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:57 2024 by rpki-client on console-ams.rpki-client.org