Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/_mIiV95G0yPrE-bFSZ1PtD6-qLM.roa
File: _mIiV95G0yPrE-bFSZ1PtD6-qLM.roa (raw, json)
Hash identifier: lMPj04kw4yUldfhcYoZ1KSkSIrVucmsA2K3SINimack=
Subject key identifier: FE:62:22:57:DE:46:D3:23:EB:13:E6:C5:49:9D:4F:B4:3E:BE:A8:B3
Certificate issuer: /CN=fb58566d156e997a34b16fc9c07c207b7e73fb53
Certificate serial: 038E7DA3
Authority key identifier: FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1hWbRVumXo0sW_JwHwge35z-1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/_mIiV95G0yPrE-bFSZ1PtD6-qLM.roa
Signing time: Sat 01 Jan 2022 11:04:43 +0000
ROA not before: Sat 01 Jan 2022 11:04:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 185.138.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59669923 (0x38e7da3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb58566d156e997a34b16fc9c07c207b7e73fb53
Validity
Not Before: Jan 1 11:04:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe622257de46d323eb13e6c5499d4fb43ebea8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0a:ee:43:5b:f5:b2:25:45:29:70:61:23:62:
b7:65:e8:38:cb:e2:7e:a1:54:3d:16:6a:3e:ef:d2:
f5:cc:b0:e5:58:33:b9:e3:e7:79:ee:be:ec:7d:58:
54:4d:40:f7:c4:67:97:dd:6c:a3:ec:1e:0c:2b:b5:
2b:45:4c:48:c1:8e:ba:c3:14:94:66:55:8d:67:06:
40:6e:68:31:aa:9f:4f:90:36:ad:4f:50:b7:f0:1d:
86:6e:d1:d2:ee:81:cb:04:a5:4b:c5:14:fa:5c:9a:
12:79:f4:40:dc:59:39:c6:91:d6:64:a0:54:b6:52:
88:ab:7f:88:9f:c8:39:82:59:d0:7d:2d:e8:1a:36:
90:c1:f4:60:88:34:d2:47:11:42:bd:ff:ea:6e:03:
c7:1d:05:d0:e9:31:30:60:4e:22:fd:20:92:25:da:
7b:7e:e5:0c:ad:76:53:70:98:af:9f:f1:54:63:22:
09:5d:34:27:1d:d8:f6:93:7c:ae:70:f0:00:bc:2f:
d4:a8:86:44:cd:93:ce:3e:68:63:ff:98:06:da:5b:
e0:af:19:8f:99:cf:6f:89:75:8f:bb:6b:5c:fe:a1:
c6:63:e2:6a:12:d1:1b:34:68:a3:2d:b9:66:af:0e:
a5:b5:d9:89:01:a8:fb:4e:7d:b4:1d:79:3d:ff:fa:
0f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:62:22:57:DE:46:D3:23:EB:13:E6:C5:49:9D:4F:B4:3E:BE:A8:B3
X509v3 Authority Key Identifier:
keyid:FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1hWbRVumXo0sW_JwHwge35z-1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/_mIiV95G0yPrE-bFSZ1PtD6-qLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/1-1hWbRVumXo0sW_JwHwge35z-1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.235.0/24
Signature Algorithm: sha256WithRSAEncryption
02:a0:81:04:cd:9b:d5:63:e3:fc:7d:4b:9c:e1:f6:c0:fb:27:
95:6a:0f:b2:25:75:6b:fd:78:5a:c8:bd:09:cb:47:d3:0b:4a:
e5:cc:4b:db:38:39:ee:bb:6f:d6:be:f0:58:6b:ae:43:0e:27:
fe:cd:75:e5:ba:4b:e7:f5:48:96:ed:90:db:ce:97:2c:47:57:
88:b4:c8:50:9f:8f:43:37:8d:b9:40:01:1e:80:89:5e:c6:e6:
d8:96:ed:d3:ff:2d:63:12:f2:e6:e5:68:78:dd:73:1e:01:0f:
8e:a0:dd:15:30:72:4b:d9:0b:5d:ff:f2:5f:36:d4:b0:63:28:
ec:fe:9c:bf:4a:1b:5a:6c:14:ce:c0:7c:95:a7:c2:20:b5:ab:
3a:17:2f:bd:dd:90:88:98:db:29:c5:dd:53:97:41:6f:32:2b:
56:06:52:a6:fa:a0:f5:a2:a0:d8:f0:b5:81:65:a5:a6:71:ae:
86:58:c4:af:8f:e7:e2:eb:37:a6:5e:9d:d6:00:e9:fb:bb:9e:
c9:e4:7d:95:3b:ca:73:34:16:f5:f6:00:4b:8a:fb:32:87:4a:
87:b0:c1:05:62:eb:ce:e2:5d:b9:3c:dd:fc:6f:7e:c7:c4:29:
a4:be:8c:48:9b:eb:15:9c:4e:59:1c:5e:a4:e8:16:f2:15:9e:
f5:15:a9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:30 2023 by rpki-client on console-fra.rpki-client.org