Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/136e5a-ba1a-4ae3-a4c8-59e2fd4e380f/1/kjo1rqTKzxbjakhKMKHVW2eFIAE.roa
File: kjo1rqTKzxbjakhKMKHVW2eFIAE.roa (raw, json)
Hash identifier: asVsOJSUV4RjJHhmW6AQbjdEYDaP+iB6+ll0InTxPN0=
Subject key identifier: 92:3A:35:AE:A4:CA:CF:16:E3:6A:48:4A:30:A1:D5:5B:67:85:20:01
Certificate issuer: /CN=674d89c8e9be52d956fc5b88a98a72be0699fdfd
Certificate serial: 01856F023C52EBD82D4D41234F176DCA837A
Authority key identifier: 67:4D:89:C8:E9:BE:52:D9:56:FC:5B:88:A9:8A:72:BE:06:99:FD:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z02JyOm-UtlW_FuIqYpyvgaZ_f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/136e5a-ba1a-4ae3-a4c8-59e2fd4e380f/1/kjo1rqTKzxbjakhKMKHVW2eFIAE.roa
Signing time: Sun 01 Jan 2023 20:24:55 +0000
ROA not before: Sun 01 Jan 2023 20:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57523
IP address blocks: 185.11.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:3c:52:eb:d8:2d:4d:41:23:4f:17:6d:ca:83:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674d89c8e9be52d956fc5b88a98a72be0699fdfd
Validity
Not Before: Jan 1 20:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=923a35aea4cacf16e36a484a30a1d55b67852001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:43:4f:4d:04:01:62:f4:d8:d5:c9:1b:98:
95:ef:f1:9e:e8:64:0d:78:b8:23:6d:cc:78:02:63:
be:39:14:93:82:4b:e3:3e:2f:99:f2:ee:56:14:28:
5c:0e:64:ec:3a:c0:b0:80:86:b7:23:7d:fc:79:48:
ba:cc:e0:38:b1:de:56:dd:68:94:0e:e6:65:19:7e:
34:c7:6f:67:f8:d4:e7:65:2e:0e:a6:7c:98:3c:41:
95:7d:83:a1:3f:e4:4d:34:0f:8a:95:3d:38:69:34:
17:08:4a:38:40:62:55:4a:e8:2f:52:c2:2c:f2:4e:
6b:b6:c6:58:0d:1c:90:57:03:a5:3a:7e:bf:69:78:
26:5f:1a:93:10:e4:9d:54:ea:e2:d8:27:39:30:23:
cb:8f:25:5a:d9:e6:a5:e3:80:bc:08:37:48:db:25:
58:37:0b:47:3f:b5:01:39:bd:5c:7f:96:bc:79:b3:
82:2e:8e:df:ac:77:10:3c:11:0d:87:93:c9:8b:17:
6a:c0:97:c0:32:b0:63:7d:4f:1b:6a:c2:cf:ac:5e:
4a:83:70:e2:22:82:43:ff:d0:9a:b3:41:0e:86:30:
3b:38:a3:d8:c4:69:67:1e:0b:dc:a7:ba:e3:57:37:
0f:51:a2:fb:42:26:24:46:c9:cd:ef:17:55:fb:aa:
97:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3A:35:AE:A4:CA:CF:16:E3:6A:48:4A:30:A1:D5:5B:67:85:20:01
X509v3 Authority Key Identifier:
keyid:67:4D:89:C8:E9:BE:52:D9:56:FC:5B:88:A9:8A:72:BE:06:99:FD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z02JyOm-UtlW_FuIqYpyvgaZ_f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/136e5a-ba1a-4ae3-a4c8-59e2fd4e380f/1/kjo1rqTKzxbjakhKMKHVW2eFIAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/136e5a-ba1a-4ae3-a4c8-59e2fd4e380f/1/Z02JyOm-UtlW_FuIqYpyvgaZ_f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.61.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:e3:61:87:f8:6e:48:9f:50:8e:b5:9f:27:5f:34:d7:4a:b5:
21:b6:b9:ed:9e:c4:21:c3:e2:7c:cc:88:16:f3:1c:4b:4e:9d:
43:ca:61:7c:64:47:45:1f:45:4f:3d:e9:c7:fa:75:bf:de:38:
79:3e:5e:63:8b:6f:fa:46:87:e1:7c:f2:fd:a0:7f:51:a7:b6:
84:fe:ac:7a:fe:ea:57:31:99:4e:bb:ac:f0:26:f7:78:1d:b9:
ae:c2:c8:4d:15:43:ba:9f:39:5b:7e:8a:ef:f2:10:a0:07:93:
6b:f3:33:4d:70:a6:c5:63:b7:a1:b3:9b:7b:6c:42:76:9d:41:
97:a2:52:bc:47:51:d7:d6:0c:04:26:3c:66:99:0a:e1:ae:3c:
be:1f:10:a5:e6:f6:ce:67:5b:20:b4:ee:c6:0b:7e:0c:8c:8a:
f9:16:3b:79:e8:d7:f1:e2:27:23:5f:36:17:6c:91:8a:45:d8:
8c:ca:cd:96:89:94:53:50:a9:8b:2d:90:18:8c:06:52:68:ed:
c7:af:8c:f9:ec:eb:26:20:11:6a:22:a5:26:38:ca:85:c7:1d:
c6:a9:8a:a3:a3:02:bb:d2:73:da:f7:4e:27:4f:23:0f:ca:7c:
90:05:93:84:ca:2d:34:63:c0:de:ae:a5:d4:62:8b:80:67:11:
79:f8:b0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:55 2024 by rpki-client on console-ams.rpki-client.org