Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/x8iQhlz54b7XeyG181yJ3SIW6Hk.roa
File: x8iQhlz54b7XeyG181yJ3SIW6Hk.roa (raw, json)
Hash identifier: VpUzNEq6+AXulwhZ1gsI1ankAM6o7IQhpust/er6rSA=
Subject key identifier: C7:C8:90:86:5C:F9:E1:BE:D7:7B:21:B5:F3:5C:89:DD:22:16:E8:79
Certificate issuer: /CN=fb58566d156e997a34b16fc9c07c207b7e73fb53
Certificate serial: 0185718C447F71A4FF1A8F6B80F6DDDA5361
Authority key identifier: FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1hWbRVumXo0sW_JwHwge35z-1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/x8iQhlz54b7XeyG181yJ3SIW6Hk.roa
Signing time: Mon 02 Jan 2023 08:14:56 +0000
ROA not before: Mon 02 Jan 2023 08:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400040
IP address blocks: 185.138.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:44:7f:71:a4:ff:1a:8f:6b:80:f6:dd:da:53:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb58566d156e997a34b16fc9c07c207b7e73fb53
Validity
Not Before: Jan 2 08:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7c890865cf9e1bed77b21b5f35c89dd2216e879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:82:83:b9:3c:ea:cc:e1:48:9f:72:40:5c:86:
f3:5f:5b:55:09:58:42:33:29:54:91:dc:28:12:ca:
d3:6a:89:7a:f7:ec:d1:b0:90:34:a7:6d:b8:ca:04:
19:69:72:87:56:2c:bc:79:70:6c:1e:eb:6d:fd:47:
49:2b:09:58:3f:d8:3b:f0:0a:4f:6f:2d:7d:b7:41:
fb:9e:2a:1a:c7:38:a5:ad:cf:46:bb:6a:03:10:cc:
ec:00:0c:3a:dd:4d:bc:aa:a7:94:26:2d:a2:73:64:
82:fe:2a:2c:52:02:c2:a6:95:22:2d:ab:7e:30:e4:
23:15:07:f4:c2:73:76:5b:1d:a2:1e:06:72:85:9d:
0c:2c:21:e0:0c:ef:69:54:99:69:5b:44:ba:2b:78:
6c:4b:71:99:3f:5e:45:61:4a:20:87:c2:21:37:62:
0a:0c:3a:17:df:3a:8b:22:63:76:98:46:c7:bb:da:
0f:26:c0:cf:e0:40:6b:32:fa:ef:c1:8e:8a:20:24:
96:0c:01:8c:0e:bc:7f:86:82:05:39:03:93:b7:a3:
bf:07:3b:d7:24:6e:fc:cf:14:ce:22:e4:12:4d:89:
96:b9:1a:d5:b3:27:40:59:3e:0a:61:e4:ff:58:c5:
74:0c:7f:21:bf:d7:39:7c:fe:37:fe:00:86:38:4f:
f4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C8:90:86:5C:F9:E1:BE:D7:7B:21:B5:F3:5C:89:DD:22:16:E8:79
X509v3 Authority Key Identifier:
keyid:FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1hWbRVumXo0sW_JwHwge35z-1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/x8iQhlz54b7XeyG181yJ3SIW6Hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/1-1hWbRVumXo0sW_JwHwge35z-1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.232.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:d6:b0:7b:65:2f:1c:ae:73:bd:25:e7:8b:4d:6f:0f:29:5d:
38:54:3a:a4:d3:dc:99:51:fe:57:50:b0:3e:42:d3:03:92:27:
8e:fb:ea:86:b9:e5:f5:84:6d:19:9c:13:96:27:46:eb:ee:1c:
92:e3:e7:95:39:42:d9:cb:2a:21:41:e0:bf:fb:7d:bd:f5:25:
f9:fa:0c:bf:51:49:cc:d9:b3:1b:eb:bd:33:b3:07:db:02:af:
f2:19:f1:82:ad:6e:45:26:ad:1a:16:19:12:3e:e3:85:10:5d:
7b:3a:9e:9b:ee:22:19:89:da:80:4a:19:3c:e0:5f:ad:87:fd:
5a:2a:09:a4:35:1f:72:da:b3:b9:44:93:67:9b:21:25:3d:97:
3f:09:42:41:0f:87:a0:3f:5f:a1:15:f0:21:60:14:88:10:02:
8a:e3:ae:15:f6:8a:98:53:dd:79:6e:4f:68:0a:62:23:ff:12:
5a:2b:ba:07:90:48:ae:86:96:09:5f:e4:e6:de:f1:7f:64:45:
0f:9e:2b:d9:ec:d4:bb:60:a6:5c:8b:9b:64:5d:ae:21:0f:23:
53:8b:f9:76:35:de:fb:f4:7f:34:48:6d:97:7c:10:47:91:02:
89:88:d4:5c:b6:7b:99:09:07:28:a0:72:b1:05:32:9e:c9:04:
98:d7:14:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:10 2023 by rpki-client on console-ams.rpki-client.org