Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/Tget-0g-wxD0v-i2Bft95s28dls.roa
File: Tget-0g-wxD0v-i2Bft95s28dls.roa (raw, json)
Hash identifier: yi2OK+xt8A7xd4lSEFWspsEh9Lzz/2NCBam07KKnky0=
Subject key identifier: 4E:07:AD:FB:48:3E:C3:10:F4:BF:E8:B6:05:FB:7D:E6:CD:BC:76:5B
Certificate issuer: /CN=fb58566d156e997a34b16fc9c07c207b7e73fb53
Certificate serial: 0185718C44362122C5C6D45B15E98E6F3BDF
Authority key identifier: FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1hWbRVumXo0sW_JwHwge35z-1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/Tget-0g-wxD0v-i2Bft95s28dls.roa
Signing time: Mon 02 Jan 2023 08:14:56 +0000
ROA not before: Mon 02 Jan 2023 08:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.138.232.0/23 maxlen: 24
185.138.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:44:36:21:22:c5:c6:d4:5b:15:e9:8e:6f:3b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb58566d156e997a34b16fc9c07c207b7e73fb53
Validity
Not Before: Jan 2 08:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e07adfb483ec310f4bfe8b605fb7de6cdbc765b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:40:a9:22:1f:a8:86:3c:3c:50:a0:32:fd:31:
b0:1e:a2:c2:67:6c:67:a5:ca:d9:e9:63:cc:a2:bf:
a4:11:7b:5b:eb:23:a5:bf:72:dc:2d:7b:56:e9:6b:
f6:48:19:b2:56:a9:70:b3:95:5d:34:a9:5c:21:bd:
b3:ad:d4:82:14:b8:f0:70:77:d1:6a:34:5a:12:7c:
d5:94:6c:a6:c5:3a:d4:a1:75:fc:98:42:a4:c7:45:
b7:d2:7d:4e:f7:a1:03:01:74:75:93:01:c1:c9:73:
48:de:de:a8:54:f7:7a:45:2c:b1:b9:4f:f8:67:5a:
38:95:58:bc:9f:9d:b8:c4:ee:fb:45:15:47:8a:a9:
3b:b4:e6:6e:f6:57:9e:49:f5:6f:81:cb:1c:80:59:
67:2a:31:e9:2f:53:7f:75:23:5e:e8:09:de:25:af:
bd:50:e5:85:48:2c:ac:bd:a8:63:81:2f:16:8e:cc:
44:6c:86:40:36:5a:7d:84:b5:be:d9:99:4c:f7:54:
f3:48:ca:a4:dc:00:4e:53:d0:32:86:30:b2:2a:2a:
9e:c0:46:83:7a:88:9c:6b:c7:14:54:78:09:af:f5:
c6:1f:06:bc:0f:b5:4f:7f:20:8a:40:c6:46:49:83:
bf:26:72:df:10:71:16:cc:fe:8e:98:b5:5c:9d:87:
96:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:07:AD:FB:48:3E:C3:10:F4:BF:E8:B6:05:FB:7D:E6:CD:BC:76:5B
X509v3 Authority Key Identifier:
keyid:FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1hWbRVumXo0sW_JwHwge35z-1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/Tget-0g-wxD0v-i2Bft95s28dls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/1-1hWbRVumXo0sW_JwHwge35z-1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.232.0/22
Signature Algorithm: sha256WithRSAEncryption
21:46:64:0f:88:f4:a7:93:d6:1b:4f:06:11:4e:ad:16:a1:67:
23:48:e0:e2:33:73:4f:a3:8e:10:ae:90:84:a8:a9:70:87:03:
95:ca:19:47:df:f5:0a:16:a4:86:a5:ae:ed:2c:89:6c:37:7b:
a6:87:79:5a:17:67:5e:08:d7:12:ae:c2:eb:d3:8a:4f:f3:05:
7d:90:14:00:1e:31:15:3c:a3:7f:db:37:09:92:6e:8e:01:46:
9f:b0:fb:48:73:41:45:49:d9:c7:8e:ec:8e:94:29:d2:1e:bf:
d6:34:ea:8c:94:e2:bb:73:2f:3d:c7:91:84:30:f1:ed:bc:4a:
14:87:f9:15:0d:02:fa:30:53:c2:98:5f:ff:3b:52:2b:35:31:
88:2c:1b:72:c1:8d:77:31:2f:5a:7a:42:64:ad:3d:ec:9e:0a:
4b:60:64:3f:f7:e4:46:a6:11:c7:ed:c2:2d:b4:5f:23:85:bc:
ae:4f:6d:48:41:84:2a:46:5a:83:cb:ca:1d:ad:94:1b:b5:e1:
bf:a5:66:32:c3:3e:ad:0f:0c:5d:8a:6a:31:d8:d3:bd:36:e5:
70:f6:40:7a:d9:87:bf:17:fb:48:65:cc:99:66:25:6a:44:83:
d4:b3:f6:d3:96:3d:35:66:01:b3:6c:4c:b6:ef:ad:1a:1f:d5:
81:31:e8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:30 2023 by rpki-client on console-fra.rpki-client.org