Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/iR1BzjHi9fcXK2kJS14DAOnTVtk.roa
File: iR1BzjHi9fcXK2kJS14DAOnTVtk.roa (raw, json)
Hash identifier: PIkSj6zI4Q9JkPZO0MxjIGKKGLH6sP524opCC5kajSk=
Subject key identifier: 89:1D:41:CE:31:E2:F5:F7:17:2B:69:09:4B:5E:03:00:E9:D3:56:D9
Certificate issuer: /CN=6abafcbb23ab01e5adeccd169a31efb7c5c3c522
Certificate serial: 018281182E46C1409AFA3EB9E96E3334F90F
Authority key identifier: 6A:BA:FC:BB:23:AB:01:E5:AD:EC:CD:16:9A:31:EF:B7:C5:C3:C5:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arr8uyOrAeWt7M0WmjHvt8XDxSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/iR1BzjHi9fcXK2kJS14DAOnTVtk.roa
Signing time: Tue 09 Aug 2022 05:33:41 +0000
ROA not before: Tue 09 Aug 2022 05:33:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.126.233.0/24 maxlen: 24
185.126.232.0/24 maxlen: 24
185.126.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:18:2e:46:c1:40:9a:fa:3e:b9:e9:6e:33:34:f9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6abafcbb23ab01e5adeccd169a31efb7c5c3c522
Validity
Not Before: Aug 9 05:33:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=891d41ce31e2f5f7172b69094b5e0300e9d356d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:87:7e:86:8a:4e:cc:ba:36:6f:89:88:48:21:
e6:df:26:71:f0:ae:aa:99:fb:b9:0a:30:0a:f7:ea:
86:3c:4f:b5:6f:aa:52:a1:66:22:76:0b:28:cc:38:
56:96:53:ad:27:cc:30:88:ee:b9:f9:10:65:fd:f7:
76:48:ac:73:3b:ad:e2:d2:b9:86:f9:76:b5:db:ea:
0e:71:bc:04:d0:7b:2d:34:12:d0:ff:ea:a4:49:00:
92:c0:40:45:81:fe:30:4b:13:bc:e8:39:76:3f:63:
92:02:15:e5:54:ef:f5:d3:4d:a5:76:6a:2e:51:4b:
64:90:79:82:2f:0c:1b:a3:f9:16:8c:a5:6a:19:03:
87:fd:93:31:d4:c6:41:17:e2:62:c3:d3:83:09:12:
2c:1d:94:e8:c6:08:7e:94:9f:cd:66:bc:92:d5:98:
d4:0d:ad:aa:8e:72:de:f1:78:78:fe:bc:84:29:4f:
7a:73:5c:2f:3a:df:4d:6e:4c:99:74:51:0f:d7:a4:
2d:2f:a9:e8:e4:d1:05:8c:8c:74:83:52:13:aa:71:
55:ba:b7:76:89:1e:58:a3:4a:de:ad:88:1c:aa:26:
9c:11:0f:ab:dd:d3:40:f5:e1:f3:eb:3c:cb:d3:2c:
86:70:ab:5b:b4:a8:c7:bb:c6:24:b5:bb:aa:ac:c3:
b9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1D:41:CE:31:E2:F5:F7:17:2B:69:09:4B:5E:03:00:E9:D3:56:D9
X509v3 Authority Key Identifier:
keyid:6A:BA:FC:BB:23:AB:01:E5:AD:EC:CD:16:9A:31:EF:B7:C5:C3:C5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arr8uyOrAeWt7M0WmjHvt8XDxSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/iR1BzjHi9fcXK2kJS14DAOnTVtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/arr8uyOrAeWt7M0WmjHvt8XDxSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.232.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:a3:3a:a3:82:e3:6e:6a:3d:17:a8:53:0c:81:f1:bf:08:9c:
a3:9f:e1:26:33:bf:37:94:f0:ba:1c:5a:f9:84:1f:99:c4:13:
64:f6:5f:4a:a6:4b:a4:e8:be:08:bb:87:22:39:eb:46:86:76:
80:99:7a:98:e9:4f:94:e3:66:5d:83:65:59:4f:1d:93:a2:3e:
f6:14:77:14:6f:c1:10:a1:4e:c7:21:5a:ec:a0:cf:3f:33:30:
c6:fc:f3:5e:ba:12:c0:b6:18:a6:86:a5:58:df:cf:4b:77:7b:
ba:3c:45:a8:0c:92:bb:38:62:67:f9:9d:cd:fe:d9:11:77:41:
83:be:ff:a9:f7:87:e2:39:5f:75:b8:cb:1a:56:86:d7:3a:73:
c0:ac:47:56:8c:6a:cd:53:31:5d:de:97:f5:00:f1:92:e2:6b:
64:8a:de:d9:7b:f8:9e:38:2b:35:af:7b:cf:62:95:6c:1d:55:
ea:1f:c2:da:29:e1:b8:6f:ec:15:5d:24:dc:51:b7:b4:4e:d7:
fc:1d:90:e9:bb:e2:d4:2f:6f:77:30:ec:38:b7:bb:25:f5:b5:
15:ed:11:65:64:9b:80:5d:af:97:38:8e:a0:93:8d:34:48:76:
00:de:1e:9f:d0:36:4a:f0:a7:2e:2d:33:6d:4a:d7:a1:3a:c1:
09:a4:76:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:42 2024 by rpki-client on console-ams.rpki-client.org