Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/8wpWph76r8SJPf3S4C-xfrDvcsY.roa
File: 8wpWph76r8SJPf3S4C-xfrDvcsY.roa (raw, json)
Hash identifier: uUiL+OunPhxN1dZtMtunejmO4yHl3t5iCz2/VPwHt5c=
Subject key identifier: F3:0A:56:A6:1E:FA:AF:C4:89:3D:FD:D2:E0:2F:B1:7E:B0:EF:72:C6
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 0184C22254526056E79E97608615CEEEB937
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/8wpWph76r8SJPf3S4C-xfrDvcsY.roa
Signing time: Tue 29 Nov 2022 06:45:40 +0000
ROA not before: Tue 29 Nov 2022 06:45:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 185.229.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c2:22:54:52:60:56:e7:9e:97:60:86:15:ce:ee:b9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Nov 29 06:45:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f30a56a61efaafc4893dfdd2e02fb17eb0ef72c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:74:60:6f:cf:6d:39:88:37:fe:00:4c:91:
3b:15:84:5f:22:7a:dd:a3:0e:ed:22:16:d5:48:ae:
2b:9f:8c:81:24:c4:30:65:ba:02:76:1a:03:e4:35:
db:e8:75:a9:bb:eb:56:62:8e:5e:6b:20:55:92:01:
1e:a7:e9:7a:f6:6d:b6:3b:b4:51:03:6c:78:a3:9b:
4c:ef:39:90:43:50:ba:80:3d:67:94:d3:fa:a0:58:
db:33:08:aa:2f:73:88:0d:b3:76:2c:74:a3:b3:3b:
4d:97:83:ef:81:bf:74:75:fe:aa:e2:18:41:3c:c3:
b4:0c:fc:21:99:07:9b:22:8e:c1:e0:4e:5f:92:09:
76:0d:b5:40:5a:e5:a7:61:4b:1c:0d:cb:95:da:af:
4a:7c:b6:92:57:12:01:73:3f:63:94:c2:f2:82:da:
b6:bd:0f:74:ad:36:bb:d9:ee:48:cb:9f:71:16:12:
22:15:1a:12:9f:3b:43:86:78:74:9e:a6:3c:67:f2:
70:f8:7d:62:e0:31:ae:09:e7:9c:37:f9:fa:50:59:
67:72:9e:d2:31:4f:51:af:b2:1d:52:b7:df:99:f7:
8d:46:12:d7:12:dc:10:55:92:4d:47:24:0e:19:10:
0a:9b:30:db:a9:cc:31:9b:ca:07:01:d3:5b:b8:65:
6f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0A:56:A6:1E:FA:AF:C4:89:3D:FD:D2:E0:2F:B1:7E:B0:EF:72:C6
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/8wpWph76r8SJPf3S4C-xfrDvcsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.203.0/24
Signature Algorithm: sha256WithRSAEncryption
06:2a:59:8f:90:bf:a3:49:b6:67:41:3b:da:04:fd:a0:dc:23:
dc:d9:3b:1d:00:04:33:fc:3f:b2:e2:93:1c:a1:7a:49:e5:8a:
3a:87:14:ce:0b:69:87:18:32:dc:2d:cc:20:6e:fd:be:28:54:
ce:c4:ed:73:41:a5:d8:34:41:45:55:68:7f:c9:40:66:ef:3c:
7f:8d:d5:94:c0:05:bf:ff:a8:51:70:25:c5:fe:c1:35:23:75:
0a:f9:73:ad:1f:a5:e9:25:1c:07:02:5f:31:dc:61:fd:98:d8:
c2:31:03:8b:22:fa:7f:bb:c8:21:33:6e:74:b4:20:c4:b0:a7:
45:d6:32:b5:71:9d:fe:48:31:04:bc:93:c6:25:50:21:f9:05:
66:09:46:e7:70:69:f4:57:b8:72:5a:41:a6:6c:f6:8f:d7:21:
b4:57:e6:b2:81:a7:fc:cc:fd:ab:21:16:10:3b:4c:38:a1:25:
59:c2:68:90:a8:3e:3b:0a:ff:41:b2:25:5a:ab:25:4c:55:3d:
58:59:16:17:95:3a:ba:74:e2:e0:9c:86:e2:33:58:17:c3:d5:
9c:1d:87:75:0b:e2:f1:65:88:d3:7c:b7:ed:4d:b0:8e:54:a9:
79:f1:c2:43:e4:d2:5b:45:f4:1c:29:e6:cb:59:a7:57:16:fc:
00:7d:2a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:46 2024 by rpki-client on console-ams.rpki-client.org