Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/a67609-38c9-44c7-840b-dd90afdaf5c7/1/wQX2wjUZQxv4rH1m18AU-x66mI4.roa
File: wQX2wjUZQxv4rH1m18AU-x66mI4.roa (raw, json)
Hash identifier: /VfoZ1hsJm76xeFl7Zf9I2/7botwk/7xlUBFwYGa0A0=
Subject key identifier: C1:05:F6:C2:35:19:43:1B:F8:AC:7D:66:D7:C0:14:FB:1E:BA:98:8E
Certificate issuer: /CN=9c1927417d461755aefac39978a58be1d322d0c0
Certificate serial: 0A669718
Authority key identifier: 9C:19:27:41:7D:46:17:55:AE:FA:C3:99:78:A5:8B:E1:D3:22:D0:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBknQX1GF1Wu-sOZeKWL4dMi0MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/a67609-38c9-44c7-840b-dd90afdaf5c7/1/wQX2wjUZQxv4rH1m18AU-x66mI4.roa
Signing time: Wed 02 Mar 2022 23:31:46 +0000
ROA not before: Wed 02 Mar 2022 23:31:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12345
IP address blocks: 185.23.202.0/23 maxlen: 24
185.251.46.0/23 maxlen: 24
185.247.228.0/24 maxlen: 24
185.247.229.0/24 maxlen: 24
185.251.250.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174495512 (0xa669718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1927417d461755aefac39978a58be1d322d0c0
Validity
Not Before: Mar 2 23:31:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c105f6c23519431bf8ac7d66d7c014fb1eba988e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c6:43:16:ae:ee:8e:f7:2f:42:cf:ab:75:ec:
c5:b8:ff:12:f6:aa:f1:25:93:65:af:6e:75:ae:19:
0f:ee:03:37:93:bc:cf:8c:7c:c1:62:c9:ee:a8:c4:
95:bf:3d:b7:e0:5f:02:ca:67:d5:ec:c2:d6:23:c5:
2b:c2:fa:b7:54:24:99:a2:6f:58:ad:49:e2:03:a8:
08:fa:56:a5:ba:d7:cb:9e:47:08:b3:06:9c:c4:6e:
b0:27:6d:45:34:c3:09:34:cb:0d:60:81:38:7b:e5:
d6:c6:04:34:aa:01:b7:fd:26:d9:39:0e:3c:dc:58:
24:82:75:a5:73:d7:7e:21:f6:55:d4:ce:4f:f4:02:
f4:a9:5a:75:ec:5e:9c:e6:a6:c5:57:8a:c8:16:79:
7e:e5:91:c3:80:64:b3:8f:2c:86:79:5e:25:2d:2d:
4c:22:ca:48:44:6c:b6:5f:c3:bd:1e:8e:0f:0e:4f:
d5:23:4b:5c:b3:79:2b:c7:3f:d4:2c:34:63:98:74:
49:b2:bf:0e:58:1f:18:e8:0a:1a:5c:58:69:a9:77:
63:6d:cc:1b:10:20:8e:0e:b8:98:3e:45:94:1b:e4:
b8:0f:7e:8d:19:7f:2f:80:d7:c3:36:35:25:6f:4c:
d2:f7:67:e7:79:7a:46:34:be:34:79:a8:64:70:7d:
3b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:05:F6:C2:35:19:43:1B:F8:AC:7D:66:D7:C0:14:FB:1E:BA:98:8E
X509v3 Authority Key Identifier:
keyid:9C:19:27:41:7D:46:17:55:AE:FA:C3:99:78:A5:8B:E1:D3:22:D0:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBknQX1GF1Wu-sOZeKWL4dMi0MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a67609-38c9-44c7-840b-dd90afdaf5c7/1/wQX2wjUZQxv4rH1m18AU-x66mI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a67609-38c9-44c7-840b-dd90afdaf5c7/1/nBknQX1GF1Wu-sOZeKWL4dMi0MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.202.0/23
185.247.228.0/23
185.251.46.0/23
185.251.250.0/23
Signature Algorithm: sha256WithRSAEncryption
31:06:3a:30:eb:f6:6d:a1:11:a6:27:4d:64:26:b7:10:d4:49:
79:4e:30:dd:8b:7b:48:c5:06:64:d3:f8:60:bc:da:0c:ee:d9:
17:47:0d:1c:ac:44:68:ca:1c:63:90:79:c0:7a:31:7b:ca:31:
a1:be:a6:64:86:a0:f2:fd:a6:f9:a0:8d:9d:e2:78:4e:e1:30:
04:59:b9:8e:fc:91:3e:33:e2:8e:cb:71:48:19:de:c1:ff:56:
0a:e3:97:c9:ea:1f:88:44:9d:08:88:b9:bc:cb:2d:e1:cc:d6:
f7:4c:da:60:70:0c:3d:fb:8c:48:df:c6:03:0c:79:6b:32:51:
86:75:90:b5:fd:0d:dc:83:12:75:11:47:95:1e:8b:b7:49:52:
f4:3c:9d:7f:26:0a:06:c7:7e:04:8b:30:67:85:d1:05:45:f6:
6f:52:d1:8a:ed:7c:94:3a:b2:7e:01:3b:ec:b4:d4:2f:95:04:
4c:3c:2f:ec:47:3f:fd:b5:94:14:29:68:a8:8b:5b:c9:be:77:
97:29:9c:74:fa:45:3d:72:25:61:a4:9c:b8:96:33:fd:31:ab:
84:dd:7b:99:3e:f1:1a:da:3d:e1:fc:ad:ae:44:4c:3e:6c:b1:
2d:4f:d5:02:7c:12:ce:79:e0:a3:58:fb:1b:8f:04:42:b8:83:
c8:7e:0f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:41 2024 by rpki-client on console-ams.rpki-client.org