Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3d6407-72da-4568-843f-37641e999b8d/1/VCbFCQFZ4vCz3UbCUSvZaUdQIyk.roa
File: VCbFCQFZ4vCz3UbCUSvZaUdQIyk.roa (raw, json)
Hash identifier: 8P10H6lUve5qGPts0WucHrVwkt5bZo49Ok9/ZhqhZHI=
Subject key identifier: 54:26:C5:09:01:59:E2:F0:B3:DD:46:C2:51:2B:D9:69:47:50:23:29
Certificate issuer: /CN=34f3891c7528e1c9ed08b2cbe3dc3607afb37a4c
Certificate serial: 01856C5CB1FA420D8892847CCE0E6BD13C3D
Authority key identifier: 34:F3:89:1C:75:28:E1:C9:ED:08:B2:CB:E3:DC:36:07:AF:B3:7A:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPOJHHUo4cntCLLL49w2B6-zekw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3d6407-72da-4568-843f-37641e999b8d/1/VCbFCQFZ4vCz3UbCUSvZaUdQIyk.roa
Signing time: Sun 01 Jan 2023 08:04:52 +0000
ROA not before: Sun 01 Jan 2023 08:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.218.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:b1:fa:42:0d:88:92:84:7c:ce:0e:6b:d1:3c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f3891c7528e1c9ed08b2cbe3dc3607afb37a4c
Validity
Not Before: Jan 1 08:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5426c5090159e2f0b3dd46c2512bd96947502329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:07:2b:dc:2a:23:05:33:2a:f3:50:d6:a2:14:
47:18:97:e0:0f:09:79:ca:98:ae:e0:07:67:30:c8:
7e:a8:70:6d:ba:c9:06:ec:47:f8:88:3c:3d:a1:ed:
e5:0c:4e:0b:bb:13:b5:ec:20:99:7d:e3:ee:09:7c:
82:33:b9:b5:80:ea:a4:c7:85:b8:1b:f1:a0:03:a9:
de:97:52:9a:3f:9a:d8:9b:63:23:cb:27:7c:e9:ad:
da:60:24:25:10:d7:b8:57:6c:2e:b7:fa:54:1e:e4:
97:bc:40:67:69:67:1c:92:f2:8c:97:0e:aa:b6:12:
e6:7d:ee:4f:fc:6f:7a:11:f1:ee:4a:a4:98:d8:6b:
99:19:da:a6:4b:0f:17:aa:4f:b0:7a:b1:7b:b8:4b:
b3:b5:d6:c2:1c:24:9e:c3:69:b8:38:69:bf:f1:2e:
3b:5d:5c:da:1b:54:b2:5c:50:9d:fe:db:6d:37:00:
fd:16:7b:e4:a5:10:1a:63:ac:d6:be:4f:90:a2:1b:
7f:c8:d7:33:5f:6c:46:7b:5c:b1:79:f0:69:c5:39:
1f:62:84:76:ff:5e:0d:45:d0:af:d0:16:a0:0c:84:
64:07:3a:17:11:dc:10:30:06:45:19:30:56:a0:d3:
45:01:77:9a:39:61:32:16:a9:8e:bf:84:45:9b:c2:
5c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:26:C5:09:01:59:E2:F0:B3:DD:46:C2:51:2B:D9:69:47:50:23:29
X509v3 Authority Key Identifier:
keyid:34:F3:89:1C:75:28:E1:C9:ED:08:B2:CB:E3:DC:36:07:AF:B3:7A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPOJHHUo4cntCLLL49w2B6-zekw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3d6407-72da-4568-843f-37641e999b8d/1/VCbFCQFZ4vCz3UbCUSvZaUdQIyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3d6407-72da-4568-843f-37641e999b8d/1/NPOJHHUo4cntCLLL49w2B6-zekw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.186.0/24
Signature Algorithm: sha256WithRSAEncryption
50:76:21:c4:f4:53:0a:ca:17:cd:79:ae:ae:63:96:f3:46:ae:
3e:5c:e9:f3:8c:87:6a:ec:e8:a5:c0:91:9f:b6:3c:70:e8:a4:
f2:fa:a9:a1:dd:2b:8f:fa:50:ab:c4:94:27:c0:6b:d9:5a:8b:
5c:29:b4:38:d6:8f:c6:51:e7:e1:22:0a:58:8a:eb:d0:e4:eb:
9e:41:9b:cb:e3:79:c9:25:be:88:d8:df:1c:e5:b9:81:d6:be:
7e:ee:12:6e:33:2e:da:9e:29:bc:ff:14:78:7a:1e:14:46:fd:
05:f9:1c:4f:05:85:f7:39:aa:50:d0:d1:db:0e:fc:27:7c:fb:
83:b1:ae:58:6c:57:92:1a:a9:62:c4:b6:42:03:57:5d:6d:9b:
24:d3:6a:76:53:0c:b1:17:3a:00:8d:ee:02:d9:07:57:38:35:
f4:67:8e:51:a5:04:be:41:5e:79:d9:47:a1:40:bf:37:b3:6f:
4a:e0:87:55:a4:01:42:0f:8c:06:27:42:f4:07:91:f6:f4:8d:
8b:64:ed:6d:8b:1b:ec:82:69:31:ce:77:cb:81:5c:81:19:f0:
54:ba:b4:54:c6:b4:41:e1:0f:f0:fd:eb:c2:0f:19:99:f2:65:
a4:38:c7:8a:cf:25:0c:64:9a:a6:60:0d:0d:c2:0b:5b:d4:9d:
e3:a8:48:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:14 2024 by rpki-client on console-ams.rpki-client.org