Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/081be5-22fa-4b0b-af5d-0bedb52856b8/1/wKECgAjElHd7vQj3a7312xHOm64.roa
File: wKECgAjElHd7vQj3a7312xHOm64.roa (raw, json)
Hash identifier: Psf3OIgo4wxC9PwZtI0SUxznWEzDrJdx6/pBFEbwjns=
Subject key identifier: C0:A1:02:80:08:C4:94:77:7B:BD:08:F7:6B:BD:F5:DB:11:CE:9B:AE
Certificate issuer: /CN=65da12eedf7cd0e0a6afb72786c4c852e0205245
Certificate serial: 01856D7878B01D70F5FD912DEF56890ABA95
Authority key identifier: 65:DA:12:EE:DF:7C:D0:E0:A6:AF:B7:27:86:C4:C8:52:E0:20:52:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdoS7t980OCmr7cnhsTIUuAgUkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/081be5-22fa-4b0b-af5d-0bedb52856b8/1/wKECgAjElHd7vQj3a7312xHOm64.roa
Signing time: Sun 01 Jan 2023 13:14:49 +0000
ROA not before: Sun 01 Jan 2023 13:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30742
IP address blocks: 185.139.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:78:b0:1d:70:f5:fd:91:2d:ef:56:89:0a:ba:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65da12eedf7cd0e0a6afb72786c4c852e0205245
Validity
Not Before: Jan 1 13:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0a1028008c494777bbd08f76bbdf5db11ce9bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:70:7f:13:a9:ea:4d:4d:fb:dd:86:8d:30:8f:
34:5f:cf:b9:07:17:09:e8:24:0f:7b:46:1a:ca:ab:
cd:80:87:13:bd:2d:17:df:c2:f1:7d:40:ae:b0:3c:
0c:98:1b:fa:28:24:80:38:f1:be:c1:19:37:95:8b:
8d:95:72:0f:67:3d:9e:a1:35:00:ee:fc:d4:a2:55:
94:9d:fb:0a:d9:6b:59:84:69:fc:bc:f0:3a:b5:bf:
e0:a0:38:b7:0d:59:83:48:d5:11:70:fb:4c:75:f6:
27:b9:a8:32:d4:15:47:52:8b:de:9d:bf:52:30:8c:
1c:8c:c5:39:e1:29:14:2b:49:0f:3a:77:73:b0:ab:
38:e2:0c:b9:73:06:b4:70:6c:49:46:e0:b6:82:82:
56:8b:58:20:10:d2:bd:5a:d5:ad:36:d9:a7:66:86:
7e:9a:48:2c:23:79:88:9e:7c:1d:2b:da:6e:8c:2d:
fb:fe:46:84:8f:88:e5:60:61:d4:0e:96:ec:2c:76:
74:f7:fd:36:5e:78:1a:c2:cc:f1:ec:57:7d:76:10:
7f:f1:8d:39:73:76:80:e9:89:2f:ab:fb:5f:6d:4c:
09:22:50:e2:7b:b8:f1:0a:9e:60:3b:6c:4b:16:29:
75:bf:d9:50:e7:01:0c:02:ae:61:58:ee:14:52:59:
00:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A1:02:80:08:C4:94:77:7B:BD:08:F7:6B:BD:F5:DB:11:CE:9B:AE
X509v3 Authority Key Identifier:
keyid:65:DA:12:EE:DF:7C:D0:E0:A6:AF:B7:27:86:C4:C8:52:E0:20:52:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdoS7t980OCmr7cnhsTIUuAgUkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/081be5-22fa-4b0b-af5d-0bedb52856b8/1/wKECgAjElHd7vQj3a7312xHOm64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/081be5-22fa-4b0b-af5d-0bedb52856b8/1/ZdoS7t980OCmr7cnhsTIUuAgUkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.112.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:84:a2:f0:88:b6:72:fa:02:0e:1e:2e:24:68:04:67:be:4e:
f2:98:cb:34:d9:a5:a0:40:1e:46:2c:d5:0e:15:ae:6d:fa:01:
b2:ed:be:39:10:ca:a0:f4:0b:88:18:d0:0c:bb:58:c6:53:ad:
ef:70:f3:4f:d8:f1:77:25:bd:1e:48:ce:49:19:1f:0f:a3:51:
0d:9a:d9:5d:01:8a:06:08:66:c3:47:16:28:4b:97:b1:2e:c1:
13:ac:59:7e:86:4e:76:81:74:88:e2:f7:53:d3:9e:40:92:73:
4d:37:6a:31:5a:cb:79:57:77:51:35:a3:4d:4c:e0:98:90:f0:
8f:5d:f7:48:3c:7f:a7:7a:60:32:b6:68:87:32:30:d9:17:0b:
c8:63:bd:77:65:e1:83:63:75:9d:be:63:2b:56:1e:f0:22:2c:
37:38:92:79:bd:fc:09:a9:94:fb:69:ac:52:3f:37:44:fc:a0:
ca:b9:13:e3:fe:a8:df:f2:63:c1:e1:01:01:a2:3d:00:95:e5:
df:7c:af:ca:1d:3a:46:df:04:fa:cc:a7:66:c9:d5:54:6d:43:
f5:b6:6a:79:e9:83:2e:dc:e2:8a:e3:5d:f3:4a:66:cc:68:52:
98:88:0a:00:17:aa:94:36:d8:66:da:cd:7d:e7:68:19:80:7c:
35:d5:27:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:56 2024 by rpki-client on console-fra.rpki-client.org