Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a22199-ccd5-4308-9eda-5fa0c7c96acf/1/4xwUtQOH2bKQaZpfR4f0LsZk_GU.roa
File: 4xwUtQOH2bKQaZpfR4f0LsZk_GU.roa (raw, json)
Hash identifier: JYSORjzAT7M3Fnap5xeFqZhWiuRoQEvJjqZ+DhkbjLI=
Subject key identifier: E3:1C:14:B5:03:87:D9:B2:90:69:9A:5F:47:87:F4:2E:C6:64:FC:65
Certificate issuer: /CN=f3e3179a8a21762ca9dc3ffa4c2d84b839f0fb38
Certificate serial: 084AF62C
Authority key identifier: F3:E3:17:9A:8A:21:76:2C:A9:DC:3F:FA:4C:2D:84:B8:39:F0:FB:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-MXmoohdiyp3D_6TC2EuDnw-zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/a22199-ccd5-4308-9eda-5fa0c7c96acf/1/4xwUtQOH2bKQaZpfR4f0LsZk_GU.roa
Signing time: Sat 01 Jan 2022 11:58:27 +0000
ROA not before: Sat 01 Jan 2022 11:58:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12735
IP address blocks: 185.250.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139130412 (0x84af62c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e3179a8a21762ca9dc3ffa4c2d84b839f0fb38
Validity
Not Before: Jan 1 11:58:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e31c14b50387d9b290699a5f4787f42ec664fc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:f8:30:a6:29:68:9c:8a:b2:1d:c3:35:1b:
79:76:57:0a:5c:fd:c4:65:d9:f1:a5:dd:ef:3e:28:
98:31:15:3f:8f:e0:76:0f:ce:65:3b:a4:2d:7f:f1:
f2:d2:c3:05:ac:f0:e2:e6:4c:40:8c:99:9d:64:db:
bf:14:ea:dd:a5:5d:41:f8:03:75:f8:34:a3:9f:c6:
d1:d4:32:79:e5:59:31:ee:e8:ca:b6:33:17:5c:d1:
8f:ed:a6:86:24:28:b1:28:e2:59:04:4b:54:94:ca:
e5:e2:22:e9:6f:41:4f:c4:22:8f:ae:65:22:0f:72:
4c:7c:8e:3c:dd:c6:ea:ee:cb:25:7d:54:54:d4:47:
5f:e1:b7:2a:1f:fd:59:fb:f7:6f:89:ad:28:8f:0a:
0d:ce:99:8b:f3:fb:e6:55:f2:63:45:d6:de:22:f9:
e3:0d:19:41:c1:e5:69:0b:23:d7:cc:f3:3c:77:28:
7c:3e:d5:9f:c7:04:57:fd:13:cd:87:75:b5:2b:42:
92:ab:85:47:af:d3:70:92:9c:70:30:89:17:8f:83:
09:71:f9:53:08:53:6b:74:d5:0f:a6:65:6b:04:3c:
69:2d:ee:7e:c4:e7:0e:d5:64:54:99:cc:e1:c2:78:
59:ae:31:9d:04:7e:fa:d2:78:6d:0f:77:58:4a:6a:
c4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1C:14:B5:03:87:D9:B2:90:69:9A:5F:47:87:F4:2E:C6:64:FC:65
X509v3 Authority Key Identifier:
keyid:F3:E3:17:9A:8A:21:76:2C:A9:DC:3F:FA:4C:2D:84:B8:39:F0:FB:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-MXmoohdiyp3D_6TC2EuDnw-zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a22199-ccd5-4308-9eda-5fa0c7c96acf/1/4xwUtQOH2bKQaZpfR4f0LsZk_GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a22199-ccd5-4308-9eda-5fa0c7c96acf/1/8-MXmoohdiyp3D_6TC2EuDnw-zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.242.0/24
Signature Algorithm: sha256WithRSAEncryption
63:a4:82:7a:0d:1f:33:bf:34:40:57:83:9f:11:c9:32:4b:70:
95:29:0b:41:40:0a:6e:dd:6d:2e:21:33:74:13:b9:ef:ae:65:
37:55:cd:9e:83:f8:dc:84:60:18:26:0f:2d:19:32:83:e2:b6:
07:89:1c:ca:17:b7:6d:24:53:f1:94:42:55:35:72:a6:18:cf:
78:90:5e:e5:f3:2e:77:bf:76:42:40:f0:e7:13:a6:89:bf:d1:
a4:9b:3d:f1:2b:df:e9:43:1a:c4:fe:0f:a9:9e:42:be:ae:13:
5e:68:62:06:84:1d:0f:c3:71:d1:62:7f:29:39:6d:3d:ce:3e:
ca:2f:3e:92:ef:0b:bc:0d:0f:f8:6c:7e:c8:41:8d:4e:48:20:
aa:6d:6b:26:58:40:8d:06:3c:e4:12:01:a3:36:15:d0:98:0b:
e1:b5:0d:3c:3f:4c:e6:d3:89:7b:d2:48:3f:02:58:5b:cc:3d:
c5:3f:a6:78:80:52:9e:fd:8f:08:46:a8:8c:12:0d:3d:98:11:
92:74:b8:b5:39:60:f0:34:e6:cc:fd:4d:be:00:84:f9:14:d0:
33:7c:a1:48:58:c4:6b:0f:92:26:8b:a3:b0:b5:a8:c4:3f:67:
69:eb:db:08:4d:97:8e:78:dc:91:f1:48:c5:9c:12:1a:f0:bc:
10:a2:60:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:36 2024 by rpki-client on console-fra.rpki-client.org