Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/N78Ro8-visdHBS4b7BJxXnS8yIM.roa
File: N78Ro8-visdHBS4b7BJxXnS8yIM.roa (raw, json)
Hash identifier: +sViETmrIpctBhI3Uy0cO4Yc46LgVtS23PcBUlP1EwM=
Subject key identifier: 37:BF:11:A3:CF:AF:8A:C7:47:05:2E:1B:EC:12:71:5E:74:BC:C8:83
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 01856ABDCC9D5251E51AB4B91E6A3B2F5A15
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/N78Ro8-visdHBS4b7BJxXnS8yIM.roa
Signing time: Sun 01 Jan 2023 00:31:41 +0000
ROA not before: Sun 01 Jan 2023 00:31:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 185.111.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:bd:cc:9d:52:51:e5:1a:b4:b9:1e:6a:3b:2f:5a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Jan 1 00:31:41 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37bf11a3cfaf8ac747052e1bec12715e74bcc883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5f:05:05:5b:6b:8f:73:7e:65:7b:f0:42:84:
79:93:1e:36:f7:2b:d1:7b:7a:82:08:d9:2a:7e:9d:
d9:38:21:a2:02:70:d7:2c:d1:1c:15:84:ab:9d:02:
e2:64:77:9e:65:06:81:bd:9d:d7:be:12:4d:5f:d1:
72:6f:b7:35:31:bc:ab:a2:fa:25:8e:58:43:38:99:
c9:33:d8:cb:2e:a4:29:0c:26:33:30:a6:89:67:59:
85:e7:18:8b:2b:b3:03:f4:e7:e0:32:5c:0b:84:98:
9c:2c:c8:fc:e6:59:7f:77:95:ae:8e:47:55:32:77:
da:b9:72:a6:98:7f:dd:23:4a:23:a9:7f:f4:00:c2:
3c:ec:6a:b8:c1:9a:79:42:ca:45:27:39:a5:c9:ae:
db:c2:92:ba:c5:ac:da:ff:49:09:68:71:2f:87:01:
57:f8:ef:4d:9c:a7:a8:6b:f0:f2:ed:52:31:9b:26:
e2:c3:52:c7:ad:1f:5e:ed:e1:a4:75:10:10:8c:fb:
ee:59:fd:0f:cd:ca:24:9b:a3:94:32:79:b3:d5:0e:
fb:5c:dc:73:2e:3b:9e:24:69:9c:b0:83:44:2c:02:
56:ae:5d:c1:f0:43:ec:d9:7a:9a:66:a1:19:48:53:
af:e4:0b:9d:c5:00:2b:d3:5a:8c:11:92:37:c5:74:
34:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BF:11:A3:CF:AF:8A:C7:47:05:2E:1B:EC:12:71:5E:74:BC:C8:83
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/N78Ro8-visdHBS4b7BJxXnS8yIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.188.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:dd:ae:f5:5c:68:81:2d:43:59:dc:5b:f5:a9:56:08:09:5c:
04:cc:16:1b:d1:2c:f4:9b:f1:29:85:c6:6a:a0:d9:aa:ba:3c:
37:03:cb:63:37:5f:d0:1a:00:e4:0b:a3:83:02:f0:f9:a2:f3:
47:fa:51:0a:e3:23:d6:12:45:a6:34:7d:55:8b:a0:1e:18:da:
bf:fb:6e:4c:7a:83:fd:85:68:71:38:9b:33:54:1f:04:ac:35:
7b:0a:d0:b4:90:42:5d:c9:a5:ff:0f:b3:12:c8:d6:69:ba:2d:
3a:9f:3b:a0:a6:4b:49:14:d6:db:43:1a:81:6f:39:d2:34:ff:
5b:56:92:34:42:80:55:db:54:5f:77:b6:64:51:d8:42:b5:e1:
c7:f1:27:f2:9f:cc:df:00:ec:2b:46:36:fb:f8:5e:1e:35:e4:
d3:c7:70:dc:68:8f:2c:91:fe:29:be:01:a7:c7:a9:85:ca:ea:
55:f5:3d:ca:32:4d:b4:68:46:ba:4b:63:58:b2:26:27:0d:f8:
5f:3c:49:43:7f:74:e0:ac:1f:98:28:65:3e:4f:e7:02:7e:3b:
0d:20:b1:44:2e:f8:67:22:40:eb:c4:e7:52:4c:90:0c:d1:14:
16:7b:d5:c0:d9:e1:0f:45:8c:a1:14:9f:fc:25:9a:a0:3b:41:
29:04:c0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:20 2024 by rpki-client on console-fra.rpki-client.org