Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/p1uLmMAO65PLhw91gcAPrbBgO6c.roa
File: p1uLmMAO65PLhw91gcAPrbBgO6c.roa (raw, json)
Hash identifier: 26TDqq7O3BhXbYK6tZtehRxsFCIexJ52TsKUp5Z8MM4=
Subject key identifier: A7:5B:8B:98:C0:0E:EB:93:CB:87:0F:75:81:C0:0F:AD:B0:60:3B:A7
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 040C4802
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/p1uLmMAO65PLhw91gcAPrbBgO6c.roa
Signing time: Wed 30 Mar 2022 17:50:33 +0000
ROA not before: Wed 30 Mar 2022 17:50:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.229.202.0/24 maxlen: 24
185.130.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67913730 (0x40c4802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Mar 30 17:50:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a75b8b98c00eeb93cb870f7581c00fadb0603ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:02:72:19:d8:d9:19:08:5a:4a:3c:06:3f:
38:b5:58:37:a8:81:6e:fe:ef:3f:d6:a0:fa:83:0f:
28:de:d3:f6:07:e8:6b:b1:ad:49:93:0b:02:7d:8c:
07:69:a2:77:fd:15:49:06:53:c6:55:f5:2a:ba:68:
fd:8a:19:3f:19:99:76:35:44:02:04:b9:e2:0c:55:
d5:d4:95:0e:6a:ed:35:da:21:fb:94:4b:cc:69:50:
2d:39:1a:9b:8d:3a:8e:ce:76:8b:af:e5:67:48:d8:
9a:38:65:1b:11:39:c7:ea:a2:b6:81:4f:e8:43:e1:
8b:ca:c3:ff:99:2f:f7:15:e4:a7:eb:8a:8b:3e:81:
6f:6b:d5:4a:10:a1:bb:3b:88:62:e0:55:ae:ff:76:
35:32:3d:03:f1:8d:89:38:00:90:b5:d9:cf:8d:ff:
64:1e:78:b3:b9:94:60:3a:fe:22:99:d3:89:fc:14:
5a:41:1e:db:cd:d7:b2:34:38:2f:98:d2:ea:a7:b9:
13:3d:69:f0:70:97:4f:5a:c6:92:68:b9:ed:72:8d:
76:a2:6d:be:28:54:cb:12:75:b7:3d:65:d9:26:c9:
2e:1a:b1:59:c3:26:eb:d5:a0:0e:31:cb:5c:8b:0e:
e8:e3:d3:d9:b8:4d:77:2b:77:ce:e0:5b:08:92:95:
db:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5B:8B:98:C0:0E:EB:93:CB:87:0F:75:81:C0:0F:AD:B0:60:3B:A7
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/p1uLmMAO65PLhw91gcAPrbBgO6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.60.0/22
185.229.202.0/24
Signature Algorithm: sha256WithRSAEncryption
60:e4:79:63:4f:10:0e:59:06:2d:f8:1e:44:86:ae:3f:f4:0b:
20:23:de:d1:37:b0:30:fb:88:82:17:ac:92:a6:c5:7e:62:cd:
cb:36:ae:43:e7:79:ef:06:82:04:54:85:0c:21:27:86:64:43:
3d:86:0c:4f:f5:40:0b:b1:4f:cb:9b:88:6b:f5:c2:e1:c1:2b:
94:65:2f:4a:2c:32:ec:63:b4:84:c0:2e:78:1a:3c:76:69:f3:
0c:56:cb:6e:4a:e7:33:e6:35:30:85:27:65:4b:0a:00:01:ca:
b8:d1:a8:3c:ae:33:cb:22:c7:6c:52:2a:ea:7d:40:09:3b:1d:
06:62:e5:22:ec:4b:d4:66:0e:b3:0a:bb:cb:49:5c:54:00:bf:
e0:49:4c:ce:91:05:79:74:50:a0:f8:d7:81:e6:ad:c1:f7:02:
28:e7:77:5f:35:4a:fb:a7:3c:d2:0b:38:4c:05:d7:22:08:4a:
55:7a:76:36:95:8d:7a:2a:6a:08:72:54:c8:02:ba:3d:00:31:
d6:49:99:d5:11:77:f1:f7:4d:5c:46:98:29:a6:68:24:f8:5f:
b7:49:24:97:9d:ac:54:53:f0:d0:4c:f0:8f:cd:7e:4e:e1:ce:
f8:a9:23:62:1a:ce:19:07:93:b1:02:db:92:68:49:b8:27:36:
62:66:0a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:20 2024 by rpki-client on console-fra.rpki-client.org