Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/136e5a-ba1a-4ae3-a4c8-59e2fd4e380f/1/Ss_Qgk4eDSs1aiQs5L9K_wG47oQ.roa
File: Ss_Qgk4eDSs1aiQs5L9K_wG47oQ.roa (raw, json)
Hash identifier: H45lLT30ha/IWOnyZvWUiWwPHg9VfnmqHygHvWH+FWY=
Subject key identifier: 4A:CF:D0:82:4E:1E:0D:2B:35:6A:24:2C:E4:BF:4A:FF:01:B8:EE:84
Certificate issuer: /CN=674d89c8e9be52d956fc5b88a98a72be0699fdfd
Certificate serial: 0182B1180370DC125DD0F875B766C2839B70
Authority key identifier: 67:4D:89:C8:E9:BE:52:D9:56:FC:5B:88:A9:8A:72:BE:06:99:FD:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z02JyOm-UtlW_FuIqYpyvgaZ_f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/136e5a-ba1a-4ae3-a4c8-59e2fd4e380f/1/Ss_Qgk4eDSs1aiQs5L9K_wG47oQ.roa
Signing time: Thu 18 Aug 2022 13:15:17 +0000
ROA not before: Thu 18 Aug 2022 13:15:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57523
IP address blocks: 185.11.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b1:18:03:70:dc:12:5d:d0:f8:75:b7:66:c2:83:9b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674d89c8e9be52d956fc5b88a98a72be0699fdfd
Validity
Not Before: Aug 18 13:15:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4acfd0824e1e0d2b356a242ce4bf4aff01b8ee84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a0:35:8b:02:6b:ad:8f:33:4f:a0:da:20:c7:
d3:6b:0f:00:e7:c4:30:c2:a0:ac:95:f4:44:c6:76:
45:38:f2:2d:ec:6a:d1:57:86:a3:60:5f:b4:c1:f3:
a9:a3:36:88:88:75:76:e6:e8:6a:3d:d0:50:e3:68:
5c:1c:d4:4d:1f:e5:8c:0e:98:b1:66:2e:e8:69:ca:
87:11:ad:2b:8e:01:82:9b:ff:91:15:6f:db:95:ea:
7e:f7:25:2b:ac:56:a8:76:a0:8f:00:4e:12:ce:84:
23:ce:71:0e:84:9b:c7:3d:30:0b:64:6c:f6:1c:06:
76:5d:ba:36:3c:0c:b7:a3:b1:07:a5:2c:11:0f:3b:
9f:e4:97:74:ce:0e:80:e8:81:5a:3d:c1:c6:98:ee:
2f:cf:e4:15:45:79:2f:68:c7:09:ee:07:a4:56:a3:
ad:ed:26:eb:57:35:48:6f:64:97:93:49:58:1e:af:
b4:2c:14:30:e4:f5:a5:24:2e:3f:b1:90:e0:6c:01:
60:3d:fe:25:f3:3f:f4:f1:05:e6:e0:72:97:a5:73:
c9:9f:f6:d3:9d:14:76:bd:ad:50:d1:2d:c9:48:77:
ca:45:de:0b:f8:66:67:1d:b9:26:3d:61:69:10:3a:
81:fe:d8:93:1e:3a:50:75:0e:af:23:4c:b3:4e:c7:
74:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CF:D0:82:4E:1E:0D:2B:35:6A:24:2C:E4:BF:4A:FF:01:B8:EE:84
X509v3 Authority Key Identifier:
keyid:67:4D:89:C8:E9:BE:52:D9:56:FC:5B:88:A9:8A:72:BE:06:99:FD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z02JyOm-UtlW_FuIqYpyvgaZ_f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/136e5a-ba1a-4ae3-a4c8-59e2fd4e380f/1/Ss_Qgk4eDSs1aiQs5L9K_wG47oQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/136e5a-ba1a-4ae3-a4c8-59e2fd4e380f/1/Z02JyOm-UtlW_FuIqYpyvgaZ_f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.61.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:72:41:18:e7:ed:00:02:17:25:86:17:a0:a7:e8:07:f4:35:
ec:92:9e:98:16:52:c6:6d:30:65:d7:90:74:b1:8c:f5:c8:b3:
b9:f4:b4:1a:64:25:e7:eb:97:dd:7e:e0:3d:53:9a:cc:5e:5d:
fc:24:49:65:64:20:bb:97:fe:50:a8:91:c1:1e:24:1c:04:6e:
fc:27:7e:7d:55:f7:3c:95:81:02:a6:90:62:08:92:66:d5:51:
70:ed:65:2b:b9:55:34:3f:15:45:6f:9d:29:38:1d:99:2d:61:
3e:c6:43:b6:0b:0f:08:b6:2e:80:18:7a:52:a5:c1:ab:ce:81:
75:7e:c9:04:8c:59:87:06:dd:b6:ea:33:25:21:1c:7b:f4:95:
b3:b6:d9:c4:d4:9a:f2:58:31:2e:30:cf:70:b7:d1:67:d5:c6:
11:8d:b9:9e:86:09:46:f7:ed:f6:9e:f6:31:33:72:74:60:07:
01:a5:1a:87:9a:62:9c:3a:43:b5:b2:8c:d6:d7:b5:4f:f2:1a:
17:2a:4f:2d:74:45:88:7b:c0:3f:d3:c4:e9:f2:92:13:e8:61:
0d:81:db:24:3f:ff:75:86:54:79:91:a9:86:65:3d:ad:6e:59:
fd:43:4d:e3:27:51:d9:fb:93:ed:d6:dc:33:1b:2e:fe:fb:fd:
f4:dd:67:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:34 2024 by rpki-client on console-fra.rpki-client.org