Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/f03765-ba17-40d7-8194-47ceef07e19a/1/hrA267Bydrfs1n_Vm1bJBjGm-eU.roa
File: hrA267Bydrfs1n_Vm1bJBjGm-eU.roa (raw, json)
Hash identifier: 3uOma3xovWiJkh8M3LtukDcUJgk9fm+NYWeVTn+Bh5Y=
Subject key identifier: 86:B0:36:EB:B0:72:76:B7:EC:D6:7F:D5:9B:56:C9:06:31:A6:F9:E5
Certificate issuer: /CN=a576094c03e0dbcfbfa11bf7148ab16a00673ef9
Certificate serial: 01856F5DD65357B5CBCCF4A46FDEE15C1DFC
Authority key identifier: A5:76:09:4C:03:E0:DB:CF:BF:A1:1B:F7:14:8A:B1:6A:00:67:3E:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXYJTAPg28-_oRv3FIqxagBnPvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/f03765-ba17-40d7-8194-47ceef07e19a/1/hrA267Bydrfs1n_Vm1bJBjGm-eU.roa
Signing time: Sun 01 Jan 2023 22:04:58 +0000
ROA not before: Sun 01 Jan 2023 22:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.86.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:d6:53:57:b5:cb:cc:f4:a4:6f:de:e1:5c:1d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576094c03e0dbcfbfa11bf7148ab16a00673ef9
Validity
Not Before: Jan 1 22:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86b036ebb07276b7ecd67fd59b56c90631a6f9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ad:d4:bb:9f:f1:fe:41:ef:d8:58:ef:15:72:
9d:c5:48:c3:26:3e:e3:cd:b4:4a:ae:4b:46:a5:be:
39:96:bb:f7:cd:11:ac:5f:cf:f8:87:46:4f:b7:09:
d1:de:25:a2:a5:07:dc:de:f9:fe:d0:e1:ba:91:b1:
b7:c3:8f:a6:e0:be:23:1e:87:7c:d0:98:e3:97:1d:
19:62:93:01:82:7e:c3:e4:04:34:b1:6a:9d:d3:24:
e9:15:85:53:3b:0c:ae:c3:09:95:65:00:b4:19:c7:
c0:a1:2f:99:9c:ae:7b:f8:bf:09:48:09:fd:2b:d7:
0f:fe:62:90:48:59:1c:98:56:dd:73:e0:51:18:89:
be:50:2f:16:b6:ab:af:b8:a1:84:bb:d9:7e:21:c5:
c7:48:63:b0:da:71:71:1f:40:9c:1b:46:09:14:e8:
b4:59:2a:31:24:dc:0f:33:b0:49:61:f7:e0:aa:63:
09:19:13:e8:47:6b:1e:c5:b1:24:4b:77:43:f3:ca:
4f:c9:69:d8:1e:77:84:3f:f1:2e:01:27:f0:06:4f:
5a:43:f4:5d:4e:b7:85:f3:45:a5:62:55:6e:0a:f2:
17:8a:2d:21:c7:59:a2:86:ca:62:8c:da:bd:72:c3:
f1:41:54:18:6f:bb:b9:37:db:ee:7c:a2:23:92:38:
38:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B0:36:EB:B0:72:76:B7:EC:D6:7F:D5:9B:56:C9:06:31:A6:F9:E5
X509v3 Authority Key Identifier:
keyid:A5:76:09:4C:03:E0:DB:CF:BF:A1:1B:F7:14:8A:B1:6A:00:67:3E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXYJTAPg28-_oRv3FIqxagBnPvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f03765-ba17-40d7-8194-47ceef07e19a/1/hrA267Bydrfs1n_Vm1bJBjGm-eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f03765-ba17-40d7-8194-47ceef07e19a/1/pXYJTAPg28-_oRv3FIqxagBnPvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.46.0/24
Signature Algorithm: sha256WithRSAEncryption
61:b5:e1:38:9b:13:18:59:fd:0a:38:06:e3:94:7c:8f:5c:e7:
37:77:5e:3e:3c:59:f9:4d:2e:f5:f6:00:f5:6b:fd:28:d7:eb:
de:fc:93:89:6b:f1:ff:e5:9a:f5:e9:bf:9c:5f:5b:90:16:aa:
e9:81:35:3c:c8:ca:7c:33:39:0f:cf:db:1b:86:fe:31:73:e7:
46:4f:39:0e:0e:17:0f:7b:cd:b5:29:c2:8e:58:d2:93:35:2c:
68:a2:c8:5a:cf:01:a4:95:75:e5:fe:59:4c:e6:a2:38:8b:85:
b1:e7:cd:5f:a4:ae:3f:76:37:de:d3:2a:de:20:1d:e9:e5:e0:
e3:4c:12:7c:e9:31:d5:a9:e1:3f:1d:a5:86:a7:d4:42:9c:50:
ec:a2:32:b6:b6:1b:d1:0e:85:c7:49:bb:b0:e1:9e:6d:ea:68:
aa:cf:b2:34:5c:3e:57:cc:a1:d3:bb:0f:66:37:74:12:eb:0f:
b1:f1:35:af:6e:fa:d3:36:9e:03:bb:98:53:23:e0:10:b4:2e:
c2:8d:24:6a:54:e2:1a:81:ec:8e:a5:d1:c6:aa:e7:70:5a:09:
78:b0:ad:11:38:32:fe:19:22:fc:db:87:9f:9a:2f:ec:19:3c:
1d:c8:f6:f7:19:14:2a:20:8b:85:34:68:da:13:88:09:a3:47:
d0:24:e5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:18 2024 by rpki-client on console-ams.rpki-client.org