Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/1f3614-0c26-47dc-a815-5ff25a8c90a9/1/8ku5KdkaV7Ost0dWDm_mgA7w7P0.roa
File: 8ku5KdkaV7Ost0dWDm_mgA7w7P0.roa (raw, json)
Hash identifier: H7oQBxj1Bx0nIyxbPAjtF9XazkuiKqGioSl1zyo4szQ=
Subject key identifier: F2:4B:B9:29:D9:1A:57:B3:AC:B7:47:56:0E:6F:E6:80:0E:F0:EC:FD
Certificate issuer: /CN=9955eaf7caee4846f2bcff7c7dac718b77adf68c
Certificate serial: 018CC7941A0002C37A0D36DBA4264780726A
Authority key identifier: 99:55:EA:F7:CA:EE:48:46:F2:BC:FF:7C:7D:AC:71:8B:77:AD:F6:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVXq98ruSEbyvP98faxxi3et9ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/1f3614-0c26-47dc-a815-5ff25a8c90a9/1/8ku5KdkaV7Ost0dWDm_mgA7w7P0.roa
Signing time: Tue 02 Jan 2024 00:30:21 +0000
ROA not before: Tue 02 Jan 2024 00:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205959
IP address blocks: 185.151.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:1a:00:02:c3:7a:0d:36:db:a4:26:47:80:72:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9955eaf7caee4846f2bcff7c7dac718b77adf68c
Validity
Not Before: Jan 2 00:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f24bb929d91a57b3acb747560e6fe6800ef0ecfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:53:74:47:70:3d:f7:27:d1:07:7a:84:f2:
3f:5a:d7:25:34:fd:b1:09:92:9c:89:34:a4:e0:03:
c4:62:66:5b:5f:1e:6f:d0:cf:e9:4e:2d:5a:ec:58:
0e:26:60:f4:16:3b:eb:6e:6a:0b:2f:a6:56:cb:e4:
7f:5c:c5:42:22:55:1d:10:ba:a0:0c:db:41:3f:11:
7e:b3:a6:ab:8f:fc:cf:52:fb:bf:77:96:db:16:cd:
29:59:57:73:46:f7:6d:99:38:c6:16:dc:59:ea:7c:
7a:0e:d1:2c:19:34:98:0c:29:dd:3a:63:47:4b:ee:
8a:91:3c:e2:37:bc:6e:d9:36:90:17:69:95:c9:c4:
ff:15:a1:82:3c:80:5b:99:25:0e:0f:c4:fc:37:99:
14:29:cf:72:11:00:e3:35:bc:c0:48:96:36:93:0d:
6a:86:d9:4e:89:7c:9a:a3:fb:9b:38:dc:bf:79:44:
c0:99:94:5c:c3:57:2f:74:a7:f1:45:51:e2:6d:67:
f2:0d:0e:61:61:1f:3c:dc:cf:2c:a7:b3:35:26:ca:
05:d2:ec:6f:f9:6e:ec:83:27:c1:c5:31:ad:e2:92:
63:00:27:05:e2:bb:18:cd:d2:18:c2:ef:a5:71:c0:
42:6e:e2:29:eb:32:9d:64:d5:aa:54:f2:98:cb:b8:
ac:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4B:B9:29:D9:1A:57:B3:AC:B7:47:56:0E:6F:E6:80:0E:F0:EC:FD
X509v3 Authority Key Identifier:
keyid:99:55:EA:F7:CA:EE:48:46:F2:BC:FF:7C:7D:AC:71:8B:77:AD:F6:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVXq98ruSEbyvP98faxxi3et9ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1f3614-0c26-47dc-a815-5ff25a8c90a9/1/8ku5KdkaV7Ost0dWDm_mgA7w7P0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1f3614-0c26-47dc-a815-5ff25a8c90a9/1/mVXq98ruSEbyvP98faxxi3et9ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.164.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:cc:35:54:5e:4b:bd:22:77:f2:1c:ac:2f:84:f7:71:a8:d1:
69:e0:49:90:40:36:ab:97:11:d9:35:4b:81:90:fe:41:fe:90:
7a:97:2d:29:e0:16:70:30:de:1e:e1:0d:a5:1d:09:8f:f0:69:
4e:3d:d9:e6:01:6a:89:39:ac:6e:e7:08:85:fc:ee:42:06:4e:
d7:e3:a4:8e:bf:e4:d3:85:e5:b4:7e:80:7d:e3:d3:e0:38:f8:
dd:d4:73:fa:38:e5:6b:47:22:cb:b7:3c:ec:12:7d:9b:3e:38:
5a:ca:33:8e:9a:3e:6d:f7:89:9e:fe:f4:fe:24:e1:dd:7f:93:
45:59:c6:51:16:1e:2f:c4:0d:c0:b4:ae:93:9d:eb:6f:84:fb:
af:cd:61:39:02:61:25:4d:c3:7c:36:f5:2c:e9:03:10:50:39:
cf:21:90:fc:fd:8e:a5:3a:27:bc:2b:9f:b5:9c:22:f2:90:77:
6c:9a:ac:b8:d4:8d:a9:b5:10:a6:80:0e:81:92:fd:c4:ef:25:
33:4c:00:44:7d:82:25:0a:7a:2e:5f:c3:73:fa:1b:c1:b0:a7:
b1:e0:6d:d7:8f:76:25:63:9c:47:a7:e7:04:2e:8f:8a:ff:cf:
88:9a:51:f1:85:db:19:8c:5d:eb:a1:39:a8:94:de:d2:e4:9c:
30:26:20:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:48 2024 by rpki-client on console-fra.rpki-client.org