Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/4378ac-4905-4d7c-b8de-ed1496df69a8/1/PAB5GdBmaPJehPxQ3rMMITAhxZg.roa
File: PAB5GdBmaPJehPxQ3rMMITAhxZg.roa (raw, json)
Hash identifier: S6DKW2NuJL7JvJKGkLI9BbJlXQEjeV5jOnWlOvtmM3Y=
Subject key identifier: 3C:00:79:19:D0:66:68:F2:5E:84:FC:50:DE:B3:0C:21:30:21:C5:98
Certificate issuer: /CN=0ec0bbde13c36582b79481cdb1882ff0260b0fed
Certificate serial: 0C9A00F0
Authority key identifier: 0E:C0:BB:DE:13:C3:65:82:B7:94:81:CD:B1:88:2F:F0:26:0B:0F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsC73hPDZYK3lIHNsYgv8CYLD-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/4378ac-4905-4d7c-b8de-ed1496df69a8/1/PAB5GdBmaPJehPxQ3rMMITAhxZg.roa
Signing time: Sat 01 Jan 2022 02:58:24 +0000
ROA not before: Sat 01 Jan 2022 02:58:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29182
IP address blocks: 185.246.64.0/23 maxlen: 23
185.246.66.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211419376 (0xc9a00f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ec0bbde13c36582b79481cdb1882ff0260b0fed
Validity
Not Before: Jan 1 02:58:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c007919d06668f25e84fc50deb30c213021c598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:6a:ef:d2:34:5d:0b:57:b3:ca:6d:5f:71:
d3:15:2a:16:10:06:eb:8e:ec:9d:4e:d8:28:2f:fe:
2a:0c:70:a1:fc:6b:bb:6f:93:70:35:52:f7:b0:40:
57:30:22:e4:1a:e2:d0:e3:a2:45:62:3b:5e:ca:ec:
67:cd:6c:57:c4:f0:b2:ae:52:1a:70:8e:68:01:b0:
1c:60:57:19:a9:a1:2c:59:3d:2b:04:ae:df:fd:0d:
04:49:4f:4a:67:04:ed:60:39:78:b4:b1:e5:60:70:
c8:7b:e7:31:54:7f:a5:5b:48:9e:b5:54:59:8e:f4:
de:0f:51:a9:0f:b6:ac:ed:ba:7e:c4:cf:ed:2f:10:
6b:f5:8a:be:d3:99:83:d3:3b:cd:3c:fe:f9:bc:d1:
19:ac:73:64:e0:be:31:69:11:ae:3b:14:d8:ac:ed:
a0:05:f0:34:36:08:19:ca:8e:ce:6e:f0:66:93:f6:
cb:ef:e3:3a:74:52:c7:5d:cf:19:2f:d5:ab:d3:84:
41:83:9a:f0:e2:59:ea:d3:eb:73:65:dc:8c:4a:57:
71:e2:a4:d3:74:03:26:c2:1e:fc:c9:48:31:e8:07:
a2:15:cc:4b:04:49:e5:3f:14:0f:db:19:77:3d:da:
0a:5e:97:da:49:6f:37:93:33:5f:ad:13:db:13:bf:
fd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:00:79:19:D0:66:68:F2:5E:84:FC:50:DE:B3:0C:21:30:21:C5:98
X509v3 Authority Key Identifier:
keyid:0E:C0:BB:DE:13:C3:65:82:B7:94:81:CD:B1:88:2F:F0:26:0B:0F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsC73hPDZYK3lIHNsYgv8CYLD-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4378ac-4905-4d7c-b8de-ed1496df69a8/1/PAB5GdBmaPJehPxQ3rMMITAhxZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4378ac-4905-4d7c-b8de-ed1496df69a8/1/DsC73hPDZYK3lIHNsYgv8CYLD-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.64.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:fc:5f:f1:33:27:5f:00:ff:24:04:53:1c:8d:68:ee:7a:45:
f1:46:32:6a:f6:e8:f2:cb:5f:7b:35:18:37:25:03:c3:df:9b:
e9:d6:f9:b0:d6:38:22:21:05:3a:8d:27:1b:ab:66:e9:3c:aa:
31:5c:1a:10:fc:cf:d7:50:31:30:b7:a6:da:cb:3e:70:e6:19:
b1:02:cd:b9:5b:7c:7d:3c:62:50:29:4b:44:a5:d5:47:ce:8d:
79:ad:49:be:fb:e2:6a:84:a3:87:7f:50:5f:a8:b8:b3:a8:ac:
19:93:f7:15:a5:70:99:a8:78:ed:d8:b9:31:68:7c:1d:8d:e5:
65:ae:31:ac:74:45:ca:63:aa:74:ee:14:1a:9b:95:f9:a7:b8:
e9:cd:a4:bb:02:bf:a9:bb:35:30:c6:6b:88:e7:b3:d9:a9:f4:
88:41:a4:4e:db:48:b8:b9:c7:b8:15:57:51:fa:49:6f:e4:e6:
f4:fd:6c:67:6d:31:c6:b6:a0:cc:a0:3e:f6:96:16:d2:52:df:
70:c2:8b:2c:cc:8e:aa:82:32:c0:d1:ba:c8:08:6e:59:61:97:
07:11:8e:43:24:a1:79:ab:e5:52:c0:80:86:85:6c:dc:36:72:
38:a3:c0:13:00:88:db:b9:5b:68:b7:26:68:f5:60:e2:51:a6:
01:dc:60:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:43 2024 by rpki-client on console-fra.rpki-client.org