Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/de17f9-4230-424a-b212-b642e91ff1a2/1/z6bXe1znwNEWnaJv6A0kT_CnnU0.roa
File: z6bXe1znwNEWnaJv6A0kT_CnnU0.roa (raw, json)
Hash identifier: shzMZgd8bsAbKNWvXAz4Wq+BCES6AvINqgBCbGkG7Kc=
Subject key identifier: CF:A6:D7:7B:5C:E7:C0:D1:16:9D:A2:6F:E8:0D:24:4F:F0:A7:9D:4D
Certificate issuer: /CN=c03ad5cabfeac4a44d3346d1f4ace6ef481a95a4
Certificate serial: 018BF2E786C29B4323F665117D50DF86C8EA
Authority key identifier: C0:3A:D5:CA:BF:EA:C4:A4:4D:33:46:D1:F4:AC:E6:EF:48:1A:95:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDrVyr_qxKRNM0bR9Kzm70galaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/de17f9-4230-424a-b212-b642e91ff1a2/1/z6bXe1znwNEWnaJv6A0kT_CnnU0.roa
Signing time: Tue 21 Nov 2023 17:22:21 +0000
ROA not before: Tue 21 Nov 2023 17:22:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34177
IP address blocks: 185.4.44.0/22 maxlen: 22
194.213.124.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f2:e7:86:c2:9b:43:23:f6:65:11:7d:50:df:86:c8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c03ad5cabfeac4a44d3346d1f4ace6ef481a95a4
Validity
Not Before: Nov 21 17:22:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfa6d77b5ce7c0d1169da26fe80d244ff0a79d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:1e:77:79:a8:08:bc:e0:98:2b:a3:99:d2:
db:43:0f:a2:3b:96:0d:6c:45:93:52:43:11:32:bd:
18:6a:34:27:87:b5:cb:18:0c:c8:c0:30:1d:25:52:
7d:75:40:ec:a1:92:c1:e4:54:64:fc:11:bb:86:d3:
f8:4f:0d:45:a2:e5:61:b2:02:67:2e:2a:98:6c:f3:
72:6e:4e:a2:a5:64:f7:9b:6a:15:4d:47:46:ec:2d:
64:a2:47:fd:2d:f9:6d:41:65:71:4d:ba:44:bf:79:
9b:a7:93:4b:ca:93:27:66:a6:2b:8f:fb:8f:ba:de:
99:ef:17:15:94:42:78:a7:da:a0:0c:5b:e0:23:01:
f2:7f:e3:5a:2f:e2:61:84:ab:df:76:62:5b:4a:6f:
b0:13:12:fd:f4:fe:d2:56:f0:40:b4:e6:bb:91:e0:
1a:9a:80:40:ae:57:90:83:65:f5:20:2b:03:e8:f7:
d0:02:db:e4:e4:5d:d6:79:f2:f6:56:c6:13:64:6c:
6b:f6:31:be:d0:e9:d9:b8:e8:9a:ce:ae:93:fd:a6:
d8:61:d4:65:10:f5:2d:b4:21:24:fc:c2:fb:5f:62:
ab:db:75:3d:ff:07:98:b3:41:e1:57:3c:75:83:67:
5d:d4:13:52:34:19:96:70:52:61:99:d8:b1:7f:45:
ac:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A6:D7:7B:5C:E7:C0:D1:16:9D:A2:6F:E8:0D:24:4F:F0:A7:9D:4D
X509v3 Authority Key Identifier:
keyid:C0:3A:D5:CA:BF:EA:C4:A4:4D:33:46:D1:F4:AC:E6:EF:48:1A:95:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDrVyr_qxKRNM0bR9Kzm70galaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/de17f9-4230-424a-b212-b642e91ff1a2/1/z6bXe1znwNEWnaJv6A0kT_CnnU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/de17f9-4230-424a-b212-b642e91ff1a2/1/wDrVyr_qxKRNM0bR9Kzm70galaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.44.0/22
194.213.124.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:ab:79:5a:a0:59:d7:cb:5c:a9:56:c7:eb:1f:cb:8d:7d:ba:
7f:6d:21:0c:ad:c5:89:86:ad:c1:19:e1:e0:c1:e5:9b:04:f7:
fa:8d:a3:ca:0b:7c:f3:09:12:0f:13:18:e6:88:13:55:ac:31:
48:a0:06:fe:42:a2:30:c6:21:05:9f:a2:fb:04:cf:ed:d5:d3:
48:59:ba:e4:3a:f6:58:24:7b:1e:c6:12:3e:56:ea:d4:f1:07:
5a:9f:a7:20:65:d8:b8:7d:2b:de:da:68:a7:a2:40:44:65:db:
6a:10:16:c2:ea:e7:31:d0:e7:62:b0:8c:f9:c3:cf:26:fe:d4:
f3:1c:d0:da:50:40:e9:8d:4a:d0:c9:d5:fe:a4:a3:cd:32:4b:
d6:bb:9c:f3:09:8e:88:80:aa:38:30:0e:de:4b:b0:dc:69:77:
30:12:ca:57:34:44:d4:f8:2c:9c:59:af:88:2e:23:96:50:1b:
7a:c5:3b:49:5f:e5:be:1b:9e:a6:07:28:89:9d:bc:2a:b4:aa:
40:ba:43:d6:4f:bd:f9:08:2f:f3:87:b1:72:a1:8e:af:7d:78:
c2:ce:df:0d:49:92:7d:95:c6:f8:e2:c6:f3:11:e5:78:37:a3:
f2:8c:40:65:58:75:a6:72:aa:04:e8:38:8d:d2:66:a5:05:06:
76:75:7b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:39 2024 by rpki-client on console-ams.rpki-client.org