Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8e09fe-a5c0-497d-a5bb-c277b4cf7c67/1/spMZ9ObxIx9stNrItgSXja9Swa0.roa
File: spMZ9ObxIx9stNrItgSXja9Swa0.roa (raw, json)
Hash identifier: i0QaebnybvR3gbltX6FBReLsLURJVmhi9/rOt8NHhIQ=
Subject key identifier: B2:93:19:F4:E6:F1:23:1F:6C:B4:DA:C8:B6:04:97:8D:AF:52:C1:AD
Certificate issuer: /CN=45248dc088485d78dcf81ada9a18d5ff9d2f906c
Certificate serial: 01862C1DC6D41BFBE7ED2A37CDE918B5C6B5
Authority key identifier: 45:24:8D:C0:88:48:5D:78:DC:F8:1A:DA:9A:18:D5:FF:9D:2F:90:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSSNwIhIXXjc-BramhjV_50vkGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8e09fe-a5c0-497d-a5bb-c277b4cf7c67/1/spMZ9ObxIx9stNrItgSXja9Swa0.roa
Signing time: Tue 07 Feb 2023 13:43:14 +0000
ROA not before: Tue 07 Feb 2023 13:43:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12859
IP address blocks: 185.188.140.0/22 maxlen: 24
185.121.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2c:1d:c6:d4:1b:fb:e7:ed:2a:37:cd:e9:18:b5:c6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45248dc088485d78dcf81ada9a18d5ff9d2f906c
Validity
Not Before: Feb 7 13:43:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b29319f4e6f1231f6cb4dac8b604978daf52c1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:18:54:a5:87:d0:16:02:e0:d0:07:de:a0:ce:
02:27:51:80:66:e2:86:57:5e:9b:be:76:50:c4:97:
7b:c4:8d:70:f1:7e:8d:fa:fe:60:15:d9:7f:27:37:
f7:07:be:4f:1e:39:72:02:73:12:e4:1f:f2:6e:7a:
b5:77:1e:92:2e:fa:1c:17:70:cf:23:78:b0:a2:28:
65:25:56:7a:8f:f4:27:df:68:90:49:9d:92:5f:07:
6e:06:dd:0e:dd:9a:d9:b5:66:33:09:60:d6:d7:b5:
9b:f4:48:66:f6:4e:87:25:5a:40:b5:50:06:c2:a4:
e2:52:50:3b:86:ed:7f:d4:b9:5e:c2:c7:d3:49:23:
87:f4:c6:8d:ac:5a:1e:3d:6a:68:74:92:cb:b3:e1:
82:96:1b:b2:3a:4f:89:74:bf:5a:d0:8a:6d:00:83:
b2:79:06:62:97:dd:71:42:b8:9d:1c:b5:c1:2d:28:
c9:dc:0b:38:86:49:51:b4:23:f6:55:36:19:95:28:
2e:86:52:0c:27:e2:ab:7a:07:1b:55:e7:13:b3:67:
51:1b:67:aa:8f:79:b0:79:b7:8e:64:26:6f:39:b3:
ca:55:fd:41:81:1a:97:6e:fc:4d:f7:aa:da:0f:f5:
38:e7:2d:fd:65:06:0e:ea:8a:c3:e8:e3:d8:b8:e7:
79:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:93:19:F4:E6:F1:23:1F:6C:B4:DA:C8:B6:04:97:8D:AF:52:C1:AD
X509v3 Authority Key Identifier:
keyid:45:24:8D:C0:88:48:5D:78:DC:F8:1A:DA:9A:18:D5:FF:9D:2F:90:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSSNwIhIXXjc-BramhjV_50vkGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8e09fe-a5c0-497d-a5bb-c277b4cf7c67/1/spMZ9ObxIx9stNrItgSXja9Swa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8e09fe-a5c0-497d-a5bb-c277b4cf7c67/1/RSSNwIhIXXjc-BramhjV_50vkGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.224.0/22
185.188.140.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:e7:23:76:ce:2e:51:23:b6:be:f4:7e:77:06:81:df:bb:84:
1d:a8:cb:ff:3b:ac:fa:dd:1f:b8:ee:4b:72:e3:d9:5f:5f:f1:
9e:c8:db:35:8a:0c:2c:46:b2:8f:68:cf:32:01:30:1a:ce:13:
c2:f8:05:1e:94:62:db:76:b5:1f:fa:80:0b:8b:3c:cc:fc:01:
95:d0:d3:c8:27:95:0c:bd:d3:72:c8:f3:35:e6:ba:97:21:98:
68:f2:5b:8a:d7:e6:2b:ea:35:29:e2:9c:8b:87:ff:58:a2:7b:
1a:26:f8:13:47:88:46:91:d0:e8:12:d2:b8:38:f5:4b:f0:ca:
66:8b:4e:3b:f6:42:78:bf:1d:69:8d:9c:19:de:2f:74:aa:9f:
0e:6c:a1:47:27:1a:0c:08:cc:a1:7b:47:67:19:15:6e:81:85:
08:ae:d3:73:31:d1:3d:64:c1:6a:b1:62:79:cc:ca:38:58:dd:
9c:d4:e1:8e:c1:63:77:d6:ed:73:ec:8b:26:6a:f3:29:67:7c:
96:6d:a9:97:7f:39:c5:11:69:c7:64:8a:f2:ba:ca:1f:e1:40:
01:44:0a:2c:00:c9:4b:3b:13:d8:34:7d:84:64:1c:48:20:73:
84:6c:be:0f:5c:70:8d:2e:ec:3e:61:65:5f:01:45:8a:91:c9:
ab:15:93:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:49 2024 by rpki-client on console-ams.rpki-client.org