Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/IPdhta8-SeDR-Qa0tyDqOmS64i4.roa
File: IPdhta8-SeDR-Qa0tyDqOmS64i4.roa (raw, json)
Hash identifier: Fy1d+v/ah9mj63ESv1YwpPHrVT47IS3NL/GplA8hXq4=
Subject key identifier: 20:F7:61:B5:AF:3E:49:E0:D1:F9:06:B4:B7:20:EA:3A:64:BA:E2:2E
Certificate issuer: /CN=5a0779e65d0ba10ddb25b4829bd725ce6cabe182
Certificate serial: 028F90
Authority key identifier: 5A:07:79:E6:5D:0B:A1:0D:DB:25:B4:82:9B:D7:25:CE:6C:AB:E1:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wgd55l0LoQ3bJbSCm9clzmyr4YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/IPdhta8-SeDR-Qa0tyDqOmS64i4.roa
Signing time: Thu 03 Feb 2022 16:44:54 +0000
ROA not before: Thu 03 Feb 2022 16:44:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 185.112.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167824 (0x28f90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0779e65d0ba10ddb25b4829bd725ce6cabe182
Validity
Not Before: Feb 3 16:44:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20f761b5af3e49e0d1f906b4b720ea3a64bae22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:43:39:7a:50:40:66:1f:a3:37:c0:94:e0:61:
37:f0:d5:89:e1:e8:12:c4:fe:0b:cc:0f:69:f6:a5:
27:44:8b:92:93:86:ba:1f:2b:ef:2f:b6:40:5e:60:
71:05:06:a6:76:f1:24:a1:c6:df:5e:46:47:3d:2c:
27:36:86:cc:69:85:eb:0a:ee:23:fe:16:b5:d5:40:
84:c8:52:f1:94:21:12:0f:45:c8:d1:c8:86:ce:7f:
be:01:d5:f8:bc:bb:22:e0:2a:be:fe:7c:14:52:01:
b0:b8:69:02:62:81:29:82:50:a1:00:88:d4:c4:6e:
9b:df:27:da:fe:3f:f8:03:80:81:08:cd:2e:3a:df:
da:9e:ca:87:97:23:86:58:59:58:53:cf:3c:ca:8e:
48:df:6f:ed:cd:db:25:f4:c3:7d:87:c4:ec:e1:54:
6f:eb:6b:db:f1:08:56:ae:4b:8a:02:54:13:e4:68:
98:25:3f:0f:0f:a2:fa:99:19:9e:6f:55:d8:2e:85:
57:1f:d0:65:21:e3:44:60:63:37:37:3e:5f:4f:24:
a6:07:e7:2b:47:15:30:d8:69:44:69:0f:3e:51:c2:
6a:18:be:89:ea:63:6d:32:0e:84:98:1e:77:47:29:
48:d8:c6:98:71:0c:51:7b:90:4c:8c:29:17:8d:1f:
62:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F7:61:B5:AF:3E:49:E0:D1:F9:06:B4:B7:20:EA:3A:64:BA:E2:2E
X509v3 Authority Key Identifier:
keyid:5A:07:79:E6:5D:0B:A1:0D:DB:25:B4:82:9B:D7:25:CE:6C:AB:E1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wgd55l0LoQ3bJbSCm9clzmyr4YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/IPdhta8-SeDR-Qa0tyDqOmS64i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/Wgd55l0LoQ3bJbSCm9clzmyr4YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.249.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:93:18:c0:4b:e2:e0:01:1a:a7:67:da:fa:ef:70:20:8c:c1:
e1:0e:f2:62:df:ff:e1:84:62:7a:d6:40:c4:26:f3:92:27:cf:
9c:47:9e:20:c0:b6:62:e5:3a:3b:7f:83:b6:e7:39:fd:86:68:
f3:02:c0:a4:1f:9d:22:b0:ef:55:f2:9d:55:24:61:ac:2e:b9:
4c:17:c7:5c:4d:a3:5b:63:0b:f1:c7:c5:37:06:0a:f2:37:d9:
00:51:72:9f:d5:e4:44:e4:a2:5b:db:94:59:11:fa:24:8e:83:
d3:ab:00:f4:ed:48:eb:96:7b:ab:fb:80:e0:d6:91:e8:26:c2:
80:d8:d9:0c:f7:22:98:04:b0:9f:74:17:14:dd:1d:8d:5e:23:
10:fc:d3:56:a8:06:93:0b:15:7a:90:03:48:3c:38:3d:64:87:
fe:28:3e:fb:67:f2:40:39:4b:77:df:ed:93:61:ec:9a:91:0f:
b3:b0:1e:47:09:1f:2d:cf:22:66:17:99:75:71:74:98:32:19:
0d:6c:6e:32:d2:19:3a:b4:68:76:5f:cc:95:e1:dc:dc:8a:01:
85:0a:c4:dc:08:7f:7c:95:ff:65:b0:48:5f:92:70:58:1d:8e:
09:c0:f1:0c:98:b9:22:31:e2:33:a6:23:39:66:41:79:cf:42:
87:e8:bd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:33 2023 by rpki-client on console-ams.rpki-client.org