Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/bc4027-6d47-4275-816a-478648bf7010/1/xRzq8bVLIzGcWE3erunOFipC8rA.roa
File: xRzq8bVLIzGcWE3erunOFipC8rA.roa (raw, json)
Hash identifier: IJjMa5nJI/ZS5LDDGq8wjq5ruOxmgmr+XiJhwP8aoto=
Subject key identifier: C5:1C:EA:F1:B5:4B:23:31:9C:58:4D:DE:AE:E9:CE:16:2A:42:F2:B0
Certificate issuer: /CN=c0a40ef08447b1e28445e4414523c51957298c2d
Certificate serial: 01857079B230C0943AC4055C8F2C47CE9C71
Authority key identifier: C0:A4:0E:F0:84:47:B1:E2:84:45:E4:41:45:23:C5:19:57:29:8C:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKQO8IRHseKEReRBRSPFGVcpjC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/bc4027-6d47-4275-816a-478648bf7010/1/xRzq8bVLIzGcWE3erunOFipC8rA.roa
Signing time: Mon 02 Jan 2023 03:15:01 +0000
ROA not before: Mon 02 Jan 2023 03:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212855
IP address blocks: 185.36.229.0/24 maxlen: 24
2a07:cd40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:b2:30:c0:94:3a:c4:05:5c:8f:2c:47:ce:9c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a40ef08447b1e28445e4414523c51957298c2d
Validity
Not Before: Jan 2 03:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c51ceaf1b54b23319c584ddeaee9ce162a42f2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5e:88:cd:a1:c9:76:40:19:3e:e6:7e:92:27:
45:00:fd:0d:ff:2a:c8:2f:07:2a:74:30:e8:26:ab:
74:ce:3d:16:d7:a1:42:a5:e3:f9:ca:51:fa:ed:ed:
57:8a:a5:24:5b:7a:e5:18:ab:61:16:ab:04:60:60:
79:ea:8f:ad:7c:d6:c6:0f:8c:e6:13:3f:0b:1f:8a:
76:62:9a:21:d2:69:f5:f3:dd:2b:07:fb:67:17:f8:
35:97:98:93:dd:22:ab:c7:92:6c:d2:6e:a5:28:89:
cf:2a:bc:38:a3:44:74:f2:f4:30:6d:85:10:ca:7e:
f6:92:6b:7c:d5:18:11:36:4d:a6:ab:a7:fd:ee:8b:
62:0a:43:c1:94:ff:2f:ff:fa:bd:4a:1c:bb:a7:98:
e5:de:4d:cd:3d:d4:f6:52:6f:17:77:26:ca:a9:21:
1e:35:5e:72:87:ac:85:2a:b5:a0:e7:9d:d1:d9:90:
e2:dd:0b:07:ea:f8:49:39:4e:91:c6:c1:9b:96:3b:
71:26:33:02:8b:81:eb:2d:14:3a:a3:56:8f:08:c1:
98:1a:67:49:8d:82:97:c7:e0:5e:fd:a5:eb:10:2d:
81:b4:e0:c4:95:c8:2b:44:da:3c:86:86:b7:38:5b:
41:8c:8a:28:11:34:aa:85:ff:91:f7:8d:5e:2e:b7:
bc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1C:EA:F1:B5:4B:23:31:9C:58:4D:DE:AE:E9:CE:16:2A:42:F2:B0
X509v3 Authority Key Identifier:
keyid:C0:A4:0E:F0:84:47:B1:E2:84:45:E4:41:45:23:C5:19:57:29:8C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKQO8IRHseKEReRBRSPFGVcpjC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bc4027-6d47-4275-816a-478648bf7010/1/xRzq8bVLIzGcWE3erunOFipC8rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bc4027-6d47-4275-816a-478648bf7010/1/wKQO8IRHseKEReRBRSPFGVcpjC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.229.0/24
IPv6:
2a07:cd40::/29
Signature Algorithm: sha256WithRSAEncryption
c2:a4:04:ca:c9:06:5f:67:9f:3e:38:15:b3:43:44:66:db:4b:
22:f9:c8:25:d3:fa:80:32:5b:fe:22:fb:49:16:07:36:f2:91:
7e:76:5c:53:c1:fb:df:2b:0d:f5:e9:7e:f0:aa:cb:69:2b:87:
6e:2f:38:55:5b:e2:49:31:2a:6f:92:64:3a:2c:3e:a9:d9:d7:
8e:37:37:15:0f:6c:7a:c0:ea:4d:29:16:f5:eb:72:01:89:7f:
e0:c6:60:ee:b2:40:7a:b2:5a:0a:41:38:0c:52:fd:55:7f:4a:
ef:00:cd:6d:60:38:5d:22:d1:3d:0f:b9:09:82:e3:d7:88:f4:
31:0e:f2:4c:b4:c7:6c:fb:8d:eb:b3:45:ef:ec:a8:06:cb:89:
00:27:7a:b5:8e:23:95:8f:8d:f6:c9:40:3f:3f:e2:27:0d:19:
f1:fc:3e:b2:20:31:6d:59:e3:b3:c3:12:5c:92:ac:ef:8a:ce:
41:aa:c7:ce:d7:c6:c3:77:4c:25:1c:08:1b:9a:48:44:85:b6:
ab:54:c1:ac:1c:11:0d:e2:9e:ba:ed:bf:ef:7b:eb:fd:c0:91:
28:03:84:bc:c9:ba:ea:f0:4b:8d:5b:96:37:b7:10:8f:3a:3f:
bd:f3:3f:56:fe:3b:8d:d9:83:dd:58:99:d1:3b:53:54:b3:41:
56:e6:23:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:17 2024 by rpki-client on console-fra.rpki-client.org