Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/IkO-s014DxXOGYAAkXcrXWG3dLI.roa
File: IkO-s014DxXOGYAAkXcrXWG3dLI.roa (raw, json)
Hash identifier: U5nFGxb0sm0IOR/BbXoF2pmgRDu3OIUOc5sqXxQfk5I=
Subject key identifier: 22:43:BE:B3:4D:78:0F:15:CE:19:80:00:91:77:2B:5D:61:B7:74:B2
Certificate issuer: /CN=601d9cd2e30c3ea2ba586cd81f3eb26a1a000f56
Certificate serial: 418008
Authority key identifier: 60:1D:9C:D2:E3:0C:3E:A2:BA:58:6C:D8:1F:3E:B2:6A:1A:00:0F:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB2c0uMMPqK6WGzYHz6yahoAD1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/IkO-s014DxXOGYAAkXcrXWG3dLI.roa
Signing time: Tue 15 Feb 2022 15:16:44 +0000
ROA not before: Tue 15 Feb 2022 15:16:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 5.181.183.0/24 maxlen: 24
185.176.93.0/24 maxlen: 24
185.229.220.0/24 maxlen: 24
185.216.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4292616 (0x418008)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601d9cd2e30c3ea2ba586cd81f3eb26a1a000f56
Validity
Not Before: Feb 15 15:16:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2243beb34d780f15ce19800091772b5d61b774b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:41:5e:4a:e8:60:d1:36:43:06:58:ae:09:ad:
51:6b:77:70:39:2c:2a:b4:6a:e2:40:ed:c9:45:ef:
50:74:df:9d:db:32:a7:60:f7:93:bb:af:d7:7d:2d:
bc:73:dd:14:e1:66:cd:be:0a:c9:89:f4:ef:58:b2:
05:17:cf:f1:cb:86:a4:22:02:cd:ec:d3:6f:0a:14:
a0:05:67:6f:0d:07:7c:f4:18:2c:af:b6:eb:c6:37:
50:9f:99:f2:75:da:83:95:6e:5d:30:30:b0:90:60:
dd:a1:c5:24:9c:bc:81:80:d9:74:cb:32:c4:5a:92:
ab:11:70:b0:67:e6:7a:4d:52:f2:6e:de:3d:d7:3c:
3f:de:48:40:0b:c5:0e:ca:fe:ff:e1:93:41:f5:d0:
65:71:6a:b5:fe:84:19:e6:b1:da:da:ab:3b:af:e9:
3f:6f:a5:5a:44:79:43:e3:f7:74:4d:c8:55:58:6a:
0a:eb:b0:9c:06:96:95:9e:b2:00:c3:3c:27:18:13:
40:dd:ac:17:44:1d:e9:38:9f:25:bd:aa:13:fa:2f:
db:99:91:ca:d9:e7:cd:e7:d5:75:85:3f:0a:1f:3a:
24:e2:e8:c9:de:4e:b9:4c:d5:b4:01:52:82:c5:72:
e2:5c:a5:2c:9e:ea:4a:ff:c5:3b:f8:8b:13:c9:4f:
b2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:43:BE:B3:4D:78:0F:15:CE:19:80:00:91:77:2B:5D:61:B7:74:B2
X509v3 Authority Key Identifier:
keyid:60:1D:9C:D2:E3:0C:3E:A2:BA:58:6C:D8:1F:3E:B2:6A:1A:00:0F:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB2c0uMMPqK6WGzYHz6yahoAD1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/IkO-s014DxXOGYAAkXcrXWG3dLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/YB2c0uMMPqK6WGzYHz6yahoAD1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.183.0/24
185.176.93.0/24
185.216.105.0/24
185.229.220.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:9d:b8:5e:e3:31:ac:ba:8c:f5:56:30:57:c0:cf:30:df:d1:
73:ae:ac:ad:d9:78:c1:a4:15:ae:d8:2e:64:33:ea:6b:39:df:
54:cb:ca:f8:86:a7:86:27:ec:b7:f3:e4:9b:bf:b5:e6:22:da:
a0:f8:c5:ae:d7:7d:85:e8:11:64:95:72:22:37:97:56:26:9d:
77:ea:00:61:a1:33:70:c9:6e:f2:90:32:07:1b:e3:6c:34:9e:
32:8c:c1:30:3c:4f:c4:be:32:01:eb:ca:0d:da:36:51:72:79:
70:c2:bb:06:af:b6:60:57:3c:84:7c:cf:6d:89:e0:ea:94:8a:
95:78:58:f8:7b:17:41:ca:12:ba:0b:33:54:8c:4d:08:90:10:
73:c1:9a:6b:ef:29:0b:9b:01:aa:4c:19:05:e9:3e:e1:59:60:
0f:50:3f:89:5b:87:6e:cc:26:e6:52:e4:07:06:de:76:53:9a:
ae:39:2c:89:44:b1:62:f2:d4:63:c5:8b:c7:75:6b:0a:cf:f5:
5b:7c:15:aa:db:81:e6:df:8d:c2:ff:26:d2:71:29:8b:12:e6:
28:1f:09:4e:d3:1b:67:f6:86:d3:ec:66:70:ab:d2:4e:2c:d5:
35:cb:d0:21:76:c9:44:69:68:12:b5:14:ab:3e:72:66:60:1c:
1b:37:ac:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:24 2023 by rpki-client on console-fra.rpki-client.org