Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/7764b5-23ab-45aa-87c7-421dbbde6e17/1/OqbobNbnk6h9uWMwRYwCpSnhEjM.roa
File: OqbobNbnk6h9uWMwRYwCpSnhEjM.roa (raw, json)
Hash identifier: 5wCkhp2/KUygPJ2iiuHUBOn+m3OYqIuwGCxnz3HhqhU=
Subject key identifier: 3A:A6:E8:6C:D6:E7:93:A8:7D:B9:63:30:45:8C:02:A5:29:E1:12:33
Certificate issuer: /CN=2d504ac7968f7c5982bc9505932dc14e960b1044
Certificate serial: 094E8438
Authority key identifier: 2D:50:4A:C7:96:8F:7C:59:82:BC:95:05:93:2D:C1:4E:96:0B:10:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVBKx5aPfFmCvJUFky3BTpYLEEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/7764b5-23ab-45aa-87c7-421dbbde6e17/1/OqbobNbnk6h9uWMwRYwCpSnhEjM.roa
Signing time: Mon 14 Mar 2022 09:13:28 +0000
ROA not before: Mon 14 Mar 2022 09:13:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.131.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156140600 (0x94e8438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d504ac7968f7c5982bc9505932dc14e960b1044
Validity
Not Before: Mar 14 09:13:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3aa6e86cd6e793a87db96330458c02a529e11233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:d7:06:af:c6:29:1c:a0:8e:c7:cb:4f:5a:
e6:c5:7c:c1:cb:68:59:aa:2f:6c:be:6f:63:7e:89:
9b:40:8a:a5:b3:03:0e:7c:1b:a0:2b:99:96:9e:c1:
48:ef:ca:00:e3:0b:c0:b5:56:14:73:5f:fb:af:c7:
73:78:d0:95:24:85:2c:1a:45:d5:81:0a:f2:46:78:
d3:d2:23:1e:e1:1b:b7:77:50:d7:b4:fa:1b:00:9e:
84:69:ca:8d:23:ef:06:3f:11:90:b3:21:f8:e1:4b:
a4:63:b6:da:1e:c7:4a:f0:2c:41:c3:c5:c7:3d:92:
29:ac:b5:16:6d:60:bc:88:10:28:19:7a:36:00:47:
41:c6:06:ae:67:f7:52:96:42:b2:9f:89:dc:c2:da:
94:5d:60:bf:69:2a:34:3f:69:d1:39:8c:8f:4a:62:
81:6b:96:a0:b2:ef:0a:79:94:7c:c9:91:a0:99:64:
53:11:c9:0b:fc:78:f5:9c:f6:8a:e4:39:a3:f5:d4:
2c:08:2e:a1:e3:d6:73:61:22:54:e1:62:67:78:a9:
e8:28:6c:50:1d:af:73:b6:68:07:a8:62:5a:fb:f1:
f4:0f:94:36:e5:e5:2c:41:b0:61:ed:f6:5c:e1:5c:
1a:cc:c9:e2:9c:af:26:bd:ca:30:54:46:7b:59:08:
1c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A6:E8:6C:D6:E7:93:A8:7D:B9:63:30:45:8C:02:A5:29:E1:12:33
X509v3 Authority Key Identifier:
keyid:2D:50:4A:C7:96:8F:7C:59:82:BC:95:05:93:2D:C1:4E:96:0B:10:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVBKx5aPfFmCvJUFky3BTpYLEEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7764b5-23ab-45aa-87c7-421dbbde6e17/1/OqbobNbnk6h9uWMwRYwCpSnhEjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7764b5-23ab-45aa-87c7-421dbbde6e17/1/LVBKx5aPfFmCvJUFky3BTpYLEEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.12.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:29:d0:21:86:97:2f:cc:aa:f1:21:e8:7a:fd:2a:dd:0c:cc:
58:f6:c7:f2:78:1f:4d:16:d0:66:5a:a4:7f:b1:1d:5e:cb:a9:
38:17:8c:28:a8:70:da:08:0f:85:4b:86:d4:65:34:df:2c:12:
1e:21:f4:cd:32:ae:f5:2d:04:a0:52:28:09:04:c2:03:e0:85:
89:c1:ad:a4:2d:ce:fe:28:73:91:39:2f:5e:bd:4a:3c:ce:a2:
cf:43:f2:64:77:c6:63:e1:09:b3:41:18:64:d2:52:c4:ac:87:
fb:62:f5:b4:d8:0a:d7:01:a9:51:86:d9:c9:e6:e4:e4:fa:7b:
5f:c9:ac:ca:b9:44:f8:34:dd:a9:05:a2:65:f0:80:b8:b6:c2:
99:57:67:18:ec:a0:e5:b8:21:39:25:89:40:4a:47:c2:33:f5:
46:dc:e1:96:7f:ba:da:bb:d4:f8:37:b7:10:2b:5f:61:e2:76:
1d:ea:c4:30:ac:90:5a:29:d9:b7:53:ad:b3:98:5b:c2:09:48:
8d:d8:ff:69:c0:3a:81:a7:08:0a:df:43:e7:62:d2:c1:72:0e:
f2:ff:7e:c0:f5:62:88:c8:93:e2:f4:74:74:28:62:8b:7c:7a:
f0:9e:bb:b1:49:57:00:48:f5:7b:d6:5d:d8:90:11:a6:1a:9e:
bf:c6:b0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:25 2023 by rpki-client on console-fra.rpki-client.org