Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/lFzoF3pVgcqn63bIt--BeMp2r64.roa
File: lFzoF3pVgcqn63bIt--BeMp2r64.roa (raw, json)
Hash identifier: g9jpIqbpDULGSkN/H1eLFDRP39ZQcTwgiziGjThYoH8=
Subject key identifier: 94:5C:E8:17:7A:55:81:CA:A7:EB:76:C8:B7:EF:81:78:CA:76:AF:AE
Certificate issuer: /CN=5a0779e65d0ba10ddb25b4829bd725ce6cabe182
Certificate serial: 049E7B
Authority key identifier: 5A:07:79:E6:5D:0B:A1:0D:DB:25:B4:82:9B:D7:25:CE:6C:AB:E1:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wgd55l0LoQ3bJbSCm9clzmyr4YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/lFzoF3pVgcqn63bIt--BeMp2r64.roa
Signing time: Thu 03 Feb 2022 16:44:55 +0000
ROA not before: Thu 03 Feb 2022 16:44:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 185.112.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302715 (0x49e7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0779e65d0ba10ddb25b4829bd725ce6cabe182
Validity
Not Before: Feb 3 16:44:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=945ce8177a5581caa7eb76c8b7ef8178ca76afae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:69:6a:79:3e:be:5b:32:fc:2a:87:f6:f6:50:
7f:59:90:7b:57:87:ac:bc:ba:40:a9:a6:c6:61:32:
0a:24:8a:61:4f:03:be:d1:b9:72:42:b7:2a:8e:21:
ac:2b:23:eb:9d:7d:05:c4:95:6f:1b:46:64:02:44:
bb:ac:19:01:24:27:6d:f5:10:03:50:9c:fb:5d:ba:
d5:0f:c6:8a:5b:c5:fe:0a:e2:76:e0:0e:48:81:5c:
52:c6:5f:ad:77:bc:2b:3a:c6:5c:e5:96:d2:c8:b5:
ba:33:4c:bb:e7:b6:c6:9e:49:28:e3:fb:cb:60:1c:
85:ca:62:7a:c5:c4:fd:f2:13:d0:4c:c7:bc:99:2b:
77:7b:1d:c9:7b:9b:66:91:f4:72:78:49:ad:e5:1a:
c5:ae:51:dc:62:9e:f5:fa:62:12:7e:50:18:ae:14:
4a:a3:1d:19:35:3b:95:2d:07:66:cc:33:a0:76:f5:
0b:c9:ba:e4:f5:e5:58:26:7d:d4:09:26:54:ff:2a:
90:a4:ad:e8:0e:56:07:9f:90:98:51:7d:9d:9d:b6:
c3:da:b2:a6:02:de:68:25:76:31:f2:6e:e7:77:c3:
53:a0:23:ac:bf:9a:de:ec:53:d6:d4:3d:64:9b:28:
20:0d:df:b0:41:8c:86:dd:03:80:d3:15:fd:69:1c:
01:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5C:E8:17:7A:55:81:CA:A7:EB:76:C8:B7:EF:81:78:CA:76:AF:AE
X509v3 Authority Key Identifier:
keyid:5A:07:79:E6:5D:0B:A1:0D:DB:25:B4:82:9B:D7:25:CE:6C:AB:E1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wgd55l0LoQ3bJbSCm9clzmyr4YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/lFzoF3pVgcqn63bIt--BeMp2r64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/Wgd55l0LoQ3bJbSCm9clzmyr4YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.249.0/24
Signature Algorithm: sha256WithRSAEncryption
53:05:a6:a6:c0:c1:88:57:6d:a5:e4:ed:d2:2a:24:0f:20:dc:
cb:e1:0d:b5:4e:3a:6d:2a:6b:87:39:ff:83:20:26:0f:7c:e8:
55:e6:5b:d9:7c:4b:0b:7d:a2:d0:98:99:ed:aa:45:4d:b2:f2:
c4:66:3c:42:24:25:7e:6c:2e:9a:6b:af:fb:2b:4f:b1:a6:6a:
ed:20:3a:5c:6a:86:bc:51:a0:4e:12:0e:5b:f1:00:5b:e0:d3:
a2:93:15:80:5c:75:a5:81:82:d9:ff:45:27:5b:2a:de:a9:fb:
75:27:0c:2e:8c:ad:8e:5f:19:49:cf:7e:15:20:7f:29:5e:f1:
2a:3c:e4:06:10:a1:18:3c:4c:86:e4:25:b5:28:a8:59:6c:63:
90:d7:e0:9f:8f:0c:5c:51:46:12:5f:4a:de:1e:90:37:00:e7:
64:9d:e4:92:8a:38:f4:96:d0:ba:38:d9:75:1c:1a:1c:65:21:
8d:af:a7:27:6a:52:4d:b8:36:68:ac:56:c4:49:7d:9d:07:8b:
13:05:ea:c2:c8:bc:64:77:42:62:07:0a:7b:85:e0:1d:41:bb:
e3:40:05:b5:22:7a:f9:3a:27:da:d4:9a:a6:86:52:3d:b4:84:
b1:07:5e:7f:bc:dc:ec:16:4f:ae:64:06:e2:39:0e:fa:7c:c4:
3b:60:08:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:33 2023 by rpki-client on console-ams.rpki-client.org