Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/cDTD5sRAtZAoFs47OwHwOMvrizI.roa
File: cDTD5sRAtZAoFs47OwHwOMvrizI.roa (raw, json)
Hash identifier: 8XvFOR18OL3g4R487nZFoalwI0lcWaiQS9/Vwq3WqNo=
Subject key identifier: 70:34:C3:E6:C4:40:B5:90:28:16:CE:3B:3B:01:F0:38:CB:EB:8B:32
Certificate issuer: /CN=dd82de4f1304339fde527ba06033ca9e511171bd
Certificate serial: 018893EB4F3FE0B51D5B0BB326C1C8AF8E0D
Authority key identifier: DD:82:DE:4F:13:04:33:9F:DE:52:7B:A0:60:33:CA:9E:51:11:71:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YLeTxMEM5_eUnugYDPKnlERcb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/cDTD5sRAtZAoFs47OwHwOMvrizI.roa
Signing time: Wed 07 Jun 2023 03:34:11 +0000
ROA not before: Wed 07 Jun 2023 03:34:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47376
IP address blocks: 185.86.183.0/24 maxlen: 24
185.86.182.0/24 maxlen: 24
185.86.182.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:93:eb:4f:3f:e0:b5:1d:5b:0b:b3:26:c1:c8:af:8e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd82de4f1304339fde527ba06033ca9e511171bd
Validity
Not Before: Jun 7 03:34:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7034c3e6c440b5902816ce3b3b01f038cbeb8b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cd:29:64:a0:fb:69:5e:0f:fb:b9:38:99:9d:
58:6d:f4:a0:8c:32:9c:37:68:3e:6c:ce:7f:97:25:
b1:7b:11:f6:1d:5c:a7:2a:b3:98:2e:3b:11:47:58:
d3:03:16:ce:37:25:73:c8:81:53:ae:c3:6c:0e:a2:
1f:35:63:61:ba:37:23:c8:25:a8:35:ca:53:03:b1:
8b:4b:23:1a:25:59:9b:65:ec:d8:ac:3d:7d:91:94:
44:ce:5b:4b:5a:70:a9:c4:4d:6f:2a:97:96:25:07:
73:85:a5:85:72:7e:be:13:10:38:23:ef:d2:de:40:
43:aa:e8:89:3a:79:d5:92:62:f0:a9:8d:72:2b:37:
c4:dd:2e:1b:69:b9:8f:6f:f0:1e:c3:d4:90:ea:20:
41:00:78:81:a7:33:a4:6c:fe:ba:07:92:6d:ce:98:
27:d5:12:59:c1:d5:c9:a2:a4:02:1c:1f:6f:29:f0:
4d:28:e2:f8:54:29:05:0f:a2:b1:e8:a9:67:1e:0c:
a7:d6:60:9f:82:d3:cf:d7:11:00:ec:81:25:61:e2:
9f:25:67:ec:92:69:5b:9f:36:ef:b0:ea:fd:ad:7d:
60:ea:8a:30:b4:5a:d8:87:40:d1:93:f0:b4:95:3f:
66:2b:c6:2c:ed:e2:81:a8:54:67:89:49:10:85:17:
94:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:34:C3:E6:C4:40:B5:90:28:16:CE:3B:3B:01:F0:38:CB:EB:8B:32
X509v3 Authority Key Identifier:
keyid:DD:82:DE:4F:13:04:33:9F:DE:52:7B:A0:60:33:CA:9E:51:11:71:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YLeTxMEM5_eUnugYDPKnlERcb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/cDTD5sRAtZAoFs47OwHwOMvrizI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/3YLeTxMEM5_eUnugYDPKnlERcb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.182.0/23
Signature Algorithm: sha256WithRSAEncryption
66:a3:9c:5a:32:00:90:5b:f3:1f:b0:81:e5:3b:84:f0:fb:57:
59:11:bd:58:82:86:24:a1:22:c3:00:3c:53:9d:22:e5:81:ce:
be:57:a2:8c:7e:6a:9e:46:e3:ac:4d:6d:de:7e:cd:d6:2c:c0:
5f:9d:a2:16:44:ca:71:18:b5:ec:44:b9:4a:9b:6d:14:ab:60:
df:85:36:77:d4:b1:7f:0d:93:47:ab:ca:79:21:ac:17:34:bb:
12:02:b0:3b:a9:0e:b8:d7:9c:bd:79:a1:a0:d0:5a:11:3e:ce:
fe:93:fb:6b:27:76:e2:6d:a8:19:67:c4:91:5d:c3:e0:8e:72:
62:26:47:62:5b:bb:72:c5:e2:f6:fd:cb:a2:2d:a3:f5:1f:fe:
a4:7c:8c:8c:f2:f6:d1:12:01:9c:e6:15:d6:f2:0d:3b:8c:ec:
52:9f:17:ed:06:b9:74:2a:8e:43:b7:bb:41:c0:8d:02:61:4e:
53:03:24:d3:e9:35:13:8b:fb:7b:48:62:9a:25:f9:1a:ce:cd:
28:5f:51:61:b2:9d:a4:f0:37:67:06:a9:72:74:4b:29:c1:7f:
64:5e:fb:aa:96:06:a6:6e:d4:d2:05:0f:48:99:ef:a9:a5:5c:
57:4d:5d:43:19:c4:88:73:e3:bd:9d:8d:07:84:5a:00:5e:47:
0f:e8:6a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 15:07:33 2023 by rpki-client on console-ams.rpki-client.org