Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d0f6f5-a9a1-4ed9-a4c3-fd2e04bb01e7/1/xWtLcOIWhLbtgAiL0IX994i688U.roa
File: xWtLcOIWhLbtgAiL0IX994i688U.roa (raw, json)
Hash identifier: 4d/+RDDuJPvsYxfQ23H480oAy4aqC9LhIJyyvXQz2us=
Subject key identifier: C5:6B:4B:70:E2:16:84:B6:ED:80:08:8B:D0:85:FD:F7:88:BA:F3:C5
Certificate issuer: /CN=f1ad914f8b68a56ef5f68e799f56ddcdaeee0bcc
Certificate serial: 018418C70281546925F13B08CD6B00CD534B
Authority key identifier: F1:AD:91:4F:8B:68:A5:6E:F5:F6:8E:79:9F:56:DD:CD:AE:EE:0B:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a2RT4topW719o55n1bdza7uC8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d0f6f5-a9a1-4ed9-a4c3-fd2e04bb01e7/1/xWtLcOIWhLbtgAiL0IX994i688U.roa
Signing time: Thu 27 Oct 2022 09:30:06 +0000
ROA not before: Thu 27 Oct 2022 09:30:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205836
IP address blocks: 185.85.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:18:c7:02:81:54:69:25:f1:3b:08:cd:6b:00:cd:53:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1ad914f8b68a56ef5f68e799f56ddcdaeee0bcc
Validity
Not Before: Oct 27 09:30:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c56b4b70e21684b6ed80088bd085fdf788baf3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:8a:aa:39:af:27:a0:81:d4:ec:a7:f3:04:
3d:77:b0:a9:48:0d:e4:e2:09:82:f9:3b:a7:bf:ca:
ec:60:b1:f4:eb:9b:14:82:e6:c7:9d:e8:4c:82:8e:
65:12:27:58:ef:42:14:1f:2e:ed:87:e6:8b:4b:dc:
36:3e:08:88:3a:6f:f2:c7:de:c6:d2:dc:d1:62:34:
24:ea:81:d5:30:d6:15:90:0f:a4:81:8c:ad:2b:62:
41:ce:0c:c6:1a:e9:6e:23:7f:d7:df:70:ba:c3:e9:
b5:35:ad:b3:c0:99:27:e3:78:77:46:33:ed:95:de:
e5:b1:bb:fc:fd:2d:78:e8:bb:fc:e0:8b:9c:a2:46:
96:75:69:82:47:95:d8:c0:e4:5d:9b:bf:5e:3c:2d:
14:20:4f:a8:2e:2d:87:a3:91:4c:c3:8c:22:c7:32:
31:e2:c2:30:54:d6:8c:9b:d9:4b:f9:b3:8d:2b:ac:
aa:b8:ff:e9:16:9e:a9:6c:ef:28:3e:e8:a7:26:2b:
7c:fd:90:cc:90:43:b9:68:b2:3d:df:a9:4b:02:11:
ca:62:f3:07:24:e8:ca:d1:5f:e6:93:f0:10:ed:6a:
f4:2a:a2:c8:ae:a6:d1:9c:a3:c5:4f:02:11:63:18:
d9:db:d9:0b:07:40:4b:45:ec:94:ca:6c:ed:62:60:
99:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6B:4B:70:E2:16:84:B6:ED:80:08:8B:D0:85:FD:F7:88:BA:F3:C5
X509v3 Authority Key Identifier:
keyid:F1:AD:91:4F:8B:68:A5:6E:F5:F6:8E:79:9F:56:DD:CD:AE:EE:0B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a2RT4topW719o55n1bdza7uC8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d0f6f5-a9a1-4ed9-a4c3-fd2e04bb01e7/1/xWtLcOIWhLbtgAiL0IX994i688U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d0f6f5-a9a1-4ed9-a4c3-fd2e04bb01e7/1/8a2RT4topW719o55n1bdza7uC8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.254.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:79:27:6b:95:94:09:92:7c:c4:74:fe:27:80:49:64:b6:8c:
34:3a:56:ad:27:03:18:73:cb:7b:91:3a:60:32:1b:17:18:2a:
2a:d1:f2:e5:6f:56:5c:1f:15:90:a4:fd:29:6b:57:d3:b4:03:
8c:3c:78:30:9f:a8:15:a4:b1:2a:9d:48:d8:51:71:a6:61:b7:
eb:30:a5:9c:38:28:d7:ec:66:ff:11:0c:79:e2:31:16:58:66:
c0:4f:57:55:b8:af:b2:31:16:27:bf:1e:75:1d:b9:8b:6c:47:
e6:50:b9:ff:67:01:f9:e9:cf:05:40:8d:24:f9:99:7b:8f:59:
57:27:8f:f5:7e:ce:d0:d3:2a:74:8b:4a:77:3e:c8:50:67:f7:
20:9b:e8:db:74:b8:98:97:11:2a:10:c6:b8:29:52:0d:5d:8a:
9e:4b:80:a3:e4:9e:e6:71:27:87:c5:e7:65:7f:94:81:05:39:
bb:f7:f0:87:cf:a9:f1:22:6f:94:c6:97:c9:9e:b3:2c:de:fa:
12:e4:d1:69:53:2d:bd:d1:3c:97:a5:b5:f5:61:a7:68:e8:51:
34:37:c8:01:e8:d9:7a:f5:3b:d8:40:3d:3c:88:ae:04:b9:fa:
8c:90:79:24:39:a6:a1:1d:12:89:2e:20:5f:d5:a5:c4:ac:b8:
de:14:93:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-fra.rpki-client.org