Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/8bP6P8FeehqzJD_jft97yEb_HsY.roa
File: 8bP6P8FeehqzJD_jft97yEb_HsY.roa (raw, json)
Hash identifier: nQqu8YMjBowrhXZH6nVdc2Z85fW9vLCz/C8xUTgQiv0=
Subject key identifier: F1:B3:FA:3F:C1:5E:7A:1A:B3:24:3F:E3:7E:DF:7B:C8:46:FF:1E:C6
Certificate issuer: /CN=601d9cd2e30c3ea2ba586cd81f3eb26a1a000f56
Certificate serial: 4A5B12
Authority key identifier: 60:1D:9C:D2:E3:0C:3E:A2:BA:58:6C:D8:1F:3E:B2:6A:1A:00:0F:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB2c0uMMPqK6WGzYHz6yahoAD1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/8bP6P8FeehqzJD_jft97yEb_HsY.roa
Signing time: Fri 18 Feb 2022 16:18:24 +0000
ROA not before: Fri 18 Feb 2022 16:18:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.176.93.0/24 maxlen: 24
185.229.220.0/24 maxlen: 24
185.216.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4872978 (0x4a5b12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601d9cd2e30c3ea2ba586cd81f3eb26a1a000f56
Validity
Not Before: Feb 18 16:18:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1b3fa3fc15e7a1ab3243fe37edf7bc846ff1ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ab:03:4c:f8:d2:dc:6e:3d:97:54:f4:eb:86:
c5:6d:91:ff:a4:63:71:29:df:45:8e:dc:bb:32:19:
58:b4:66:71:46:4c:03:ae:19:ac:6d:33:40:13:ba:
94:8e:15:45:57:92:78:89:38:bf:05:c4:a3:1d:49:
06:5a:e5:6b:ac:b4:45:5e:d7:69:2e:4c:bc:87:d1:
15:76:01:f1:be:de:9c:20:96:a7:c4:07:af:1e:43:
6a:b6:43:fb:e3:93:5d:b6:3c:e8:01:70:87:38:0b:
35:86:7e:1b:3e:77:b5:f8:06:f9:ef:42:71:4c:c5:
53:78:00:15:74:13:dd:37:e6:64:3b:24:a8:d7:8c:
02:31:d7:94:2f:3b:96:de:ff:eb:ea:55:1c:27:54:
ca:6b:51:5c:89:b3:ff:4f:ce:25:c6:bd:79:bf:a8:
1c:f5:d6:02:d4:0d:1f:f7:14:d7:1b:b2:bf:69:4e:
6e:43:02:ec:f2:d3:07:c5:b4:ea:45:ac:da:cb:9c:
cb:0d:a2:3f:46:b7:28:9b:03:50:d9:f1:6a:e8:f9:
13:33:cd:fe:ee:9f:eb:20:76:f7:c9:2d:41:fe:31:
2c:50:9f:8f:8e:98:3d:1d:c7:97:a6:34:44:12:eb:
c7:49:44:68:b4:95:46:09:29:1c:cb:a8:d2:41:f0:
17:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B3:FA:3F:C1:5E:7A:1A:B3:24:3F:E3:7E:DF:7B:C8:46:FF:1E:C6
X509v3 Authority Key Identifier:
keyid:60:1D:9C:D2:E3:0C:3E:A2:BA:58:6C:D8:1F:3E:B2:6A:1A:00:0F:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB2c0uMMPqK6WGzYHz6yahoAD1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/8bP6P8FeehqzJD_jft97yEb_HsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/YB2c0uMMPqK6WGzYHz6yahoAD1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.93.0/24
185.216.105.0/24
185.229.220.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:ec:29:6f:26:0b:4b:ff:76:bb:67:d7:da:bd:5e:31:2e:2e:
65:c6:85:d8:fb:bd:33:79:67:38:a4:37:38:4f:39:1e:77:09:
b1:68:44:aa:b1:3b:d5:3f:dc:82:ac:c5:bf:7f:50:6f:20:06:
0e:a7:37:0c:36:84:41:46:aa:fa:89:44:01:e9:34:01:1f:de:
a6:59:9b:cb:d4:c9:a5:d0:c8:00:46:6e:dd:56:62:64:f1:0c:
f6:43:b6:3f:37:6b:31:8f:09:14:d8:a2:0e:c1:d1:58:5e:bb:
5f:fc:bd:2e:06:a5:12:60:45:f5:fa:a9:90:97:a8:29:b7:e4:
68:80:68:85:4c:24:2d:e5:6d:e5:28:6b:3e:07:56:fa:9d:d3:
78:4a:69:a9:c5:c2:d2:12:7a:30:b8:7a:68:33:80:a5:9b:54:
3d:e3:7d:7c:78:0b:cd:6d:9d:15:34:42:90:d3:3b:9f:7f:c2:
54:7b:68:18:bf:37:5b:97:40:72:31:63:cc:9d:c8:23:5a:62:
d2:f1:75:0e:18:48:4e:db:68:c7:14:86:39:92:14:0a:58:cc:
9d:2f:27:ae:c0:5d:ab:04:4e:77:5d:e6:48:17:b1:af:ff:27:
ce:22:6e:3f:1c:41:c9:bd:e1:6c:8f:0a:34:77:4d:02:ba:d4:
20:2f:01:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:44 2024 by rpki-client on console-ams.rpki-client.org