Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f568cf-d3ac-4e99-aeac-010c781ecd77/1/4JMmWYJmvJYVFrtJNRANTwEsYSQ.roa
File: 4JMmWYJmvJYVFrtJNRANTwEsYSQ.roa (raw, json)
Hash identifier: Jc1okhfIlYaH2Xi+p1d34BC/7r+UPoCAV/lh4C1XFnM=
Subject key identifier: E0:93:26:59:82:66:BC:96:15:16:BB:49:35:10:0D:4F:01:2C:61:24
Certificate issuer: /CN=39ed4b063e3773b822de16e9b7323eb195cd7062
Certificate serial: 018CC64B76E27F00DB4618C2484F7C6D5609
Authority key identifier: 39:ED:4B:06:3E:37:73:B8:22:DE:16:E9:B7:32:3E:B1:95:CD:70:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe1LBj43c7gi3hbptzI-sZXNcGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f568cf-d3ac-4e99-aeac-010c781ecd77/1/4JMmWYJmvJYVFrtJNRANTwEsYSQ.roa
Signing time: Mon 01 Jan 2024 18:31:23 +0000
ROA not before: Mon 01 Jan 2024 18:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210667
IP address blocks: 185.228.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:76:e2:7f:00:db:46:18:c2:48:4f:7c:6d:56:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ed4b063e3773b822de16e9b7323eb195cd7062
Validity
Not Before: Jan 1 18:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e09326598266bc961516bb4935100d4f012c6124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:81:8c:fd:3d:d0:09:15:9b:31:cb:73:1e:fe:
71:10:45:80:b3:bd:3d:82:ae:e7:68:29:17:05:20:
5e:a9:a8:6e:e0:ec:9a:d4:e1:9c:05:ea:16:38:e7:
b5:2d:af:73:21:84:05:20:54:b2:87:17:10:17:02:
11:07:2c:09:68:42:a7:42:1b:b8:09:11:2b:c0:7e:
61:a2:e4:42:b5:f9:21:8b:8e:2f:bf:a8:b1:cc:c2:
76:19:b7:08:04:13:94:e9:b4:2d:86:4b:53:7f:c5:
bf:29:87:ea:73:e5:fa:88:0b:d2:1f:b2:c9:d2:da:
b1:c2:f6:69:31:16:18:e4:a2:89:73:d3:5a:45:ec:
92:70:dc:98:d7:dc:fc:cc:0a:9f:09:e3:1c:bb:23:
d5:a3:be:9f:68:d2:e4:4e:e2:46:9b:6b:35:5b:c2:
fe:08:23:03:01:54:61:45:8f:a2:41:d9:d4:d0:ed:
eb:97:7d:28:74:23:e2:8e:64:35:17:03:58:77:f6:
9a:e6:6b:34:0f:75:75:f8:5d:a9:5b:c8:ea:60:a9:
2c:8b:ee:f5:5a:31:f4:49:68:2c:d7:6c:22:81:12:
f0:93:cd:4d:fd:30:bb:e8:b6:d5:8b:fe:29:25:d4:
df:c7:58:7c:71:75:af:db:fe:c1:cb:aa:dc:29:7e:
b9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:93:26:59:82:66:BC:96:15:16:BB:49:35:10:0D:4F:01:2C:61:24
X509v3 Authority Key Identifier:
keyid:39:ED:4B:06:3E:37:73:B8:22:DE:16:E9:B7:32:3E:B1:95:CD:70:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe1LBj43c7gi3hbptzI-sZXNcGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f568cf-d3ac-4e99-aeac-010c781ecd77/1/4JMmWYJmvJYVFrtJNRANTwEsYSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f568cf-d3ac-4e99-aeac-010c781ecd77/1/Oe1LBj43c7gi3hbptzI-sZXNcGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.59.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:55:34:4d:2f:5c:06:12:81:87:82:75:bb:7f:3b:9e:f0:e0:
3c:a9:7d:a5:b3:71:a4:7b:88:65:d1:2a:f4:71:dc:90:a9:c1:
ab:8c:21:2a:d3:82:8d:77:54:cb:31:d6:7b:82:bf:a6:78:2d:
10:4c:c9:b9:32:ea:ff:ef:63:af:50:a7:26:89:4c:cb:13:54:
62:65:17:27:b6:55:c7:9c:e8:36:14:98:20:39:48:68:3f:7a:
09:a7:ab:2b:1d:79:8a:29:76:be:47:21:6a:af:9e:93:bc:7e:
82:a2:48:06:f6:1b:71:23:47:c9:53:28:a1:f6:d2:33:2c:8c:
40:9b:b1:67:76:fb:bf:f4:1a:55:c5:ea:dc:77:7c:50:67:d0:
76:e9:e2:73:cd:69:40:a8:65:14:6a:53:c7:d2:c9:c8:bd:30:
1f:ef:90:c8:d2:2d:99:84:f6:04:9e:b8:28:9c:26:39:b1:3e:
5c:db:41:30:7f:fb:86:3f:3a:ec:52:23:60:97:9b:0f:2b:c2:
75:ae:8f:bb:d0:bf:c3:5c:9f:79:6d:71:d9:b7:89:92:b3:25:
4c:17:a3:79:21:da:47:b7:fa:3f:3a:fd:84:09:85:54:53:ae:
f9:c1:b1:83:be:6e:c2:0d:c4:e6:33:70:bc:60:bb:6c:55:19:
ce:0e:9e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 12:20:56 2024 by rpki-client on console-fra.rpki-client.org