Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/mT-oHuL0v79KccCyu48NsarCeOc.roa
File: mT-oHuL0v79KccCyu48NsarCeOc.roa (raw, json)
Hash identifier: AXV2/21YI2Wbg6utxDV0PptYaVwUUwyMR9Suj5x0ces=
Subject key identifier: 99:3F:A8:1E:E2:F4:BF:BF:4A:71:C0:B2:BB:8F:0D:B1:AA:C2:78:E7
Certificate issuer: /CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
Certificate serial: 01856E2665ACF02B45E75537F8BCF04DC330
Authority key identifier: 62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/mT-oHuL0v79KccCyu48NsarCeOc.roa
Signing time: Sun 01 Jan 2023 16:24:48 +0000
ROA not before: Sun 01 Jan 2023 16:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36007
IP address blocks: 185.139.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:65:ac:f0:2b:45:e7:55:37:f8:bc:f0:4d:c3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
Validity
Not Before: Jan 1 16:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=993fa81ee2f4bfbf4a71c0b2bb8f0db1aac278e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:dd:db:3b:19:ba:b6:9f:6a:89:f2:7c:84:b2:
e1:3e:41:cc:54:76:c7:28:75:2c:99:b3:de:21:d3:
27:27:32:f2:11:6f:0a:f0:48:9f:23:e6:e2:83:b3:
29:ff:d4:3c:35:fd:f8:70:df:52:6f:ec:5a:ae:11:
4b:d5:5b:8f:ec:fb:a3:b8:26:bc:bd:bf:34:42:aa:
6c:95:61:b6:e7:11:2d:35:8a:4e:a8:a3:07:c8:8b:
fb:74:ed:1e:d0:0e:4b:4a:e3:2f:8a:3a:ec:ac:25:
13:55:df:ff:78:93:c4:fa:73:86:13:77:d4:e5:0b:
c8:28:3d:33:18:02:ef:66:c7:2d:6a:fc:65:c9:4f:
96:3f:82:1a:7c:c4:3b:9d:67:90:fa:a4:c3:53:eb:
6f:fe:4a:60:4b:7f:ea:f5:90:b2:87:ac:04:54:cb:
7c:65:c6:d5:53:0f:3e:2f:f4:8a:66:1c:aa:71:9c:
e5:33:ae:3a:06:0a:c9:81:2b:9c:0e:c5:ba:87:69:
22:66:88:48:b0:cb:5c:b0:87:df:1f:23:a6:9b:c1:
04:69:32:40:2e:8b:ad:82:6a:c6:4a:cc:b7:93:ca:
88:29:f9:ef:22:f4:fd:bf:fd:0e:f3:88:80:00:1d:
8c:c9:d7:5e:bf:1e:2b:ff:73:9b:1f:e9:21:11:39:
cb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3F:A8:1E:E2:F4:BF:BF:4A:71:C0:B2:BB:8F:0D:B1:AA:C2:78:E7
X509v3 Authority Key Identifier:
keyid:62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/mT-oHuL0v79KccCyu48NsarCeOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/YkHuLESs6KczhMJVrXfGwfBFJIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.228.0/24
Signature Algorithm: sha256WithRSAEncryption
81:b0:ed:02:18:a2:7c:0f:53:35:68:b2:14:a8:ec:97:f3:b5:
79:8e:fe:e9:bd:0f:49:7d:2a:23:68:16:f4:f2:fa:b8:07:8b:
01:42:a4:a8:54:69:10:b1:3f:4f:f5:cc:83:33:5a:de:cf:ef:
2e:b6:7e:8e:1c:7d:c3:c9:ea:a4:fe:64:87:9d:e1:a7:6d:52:
dc:3d:f1:d2:ae:23:25:67:7f:c8:be:12:88:ef:2a:37:f2:0e:
48:f3:5d:bb:bd:71:ef:fe:76:5f:65:13:7a:d1:0d:46:e3:a6:
19:3a:18:2d:f5:ee:bd:ba:5e:c8:39:fe:24:43:88:40:9a:b0:
56:49:a0:28:6b:aa:ce:d9:3c:d5:28:d5:33:95:40:b9:00:78:
b5:38:cb:62:49:08:3d:29:36:46:be:e9:2c:d4:b9:37:6c:eb:
b5:4b:a4:b9:c5:5f:48:cf:04:41:06:1d:ad:5d:e3:15:55:53:
03:62:b2:42:af:1a:bb:e1:67:93:66:38:29:b5:28:3b:da:ce:
77:f1:95:96:16:a0:14:e1:38:ea:96:96:1f:86:2c:d5:b8:c4:
66:82:a8:b7:f3:ed:09:99:6a:ad:23:d8:70:05:60:8e:95:6b:
f1:22:18:41:43:4b:1b:ae:79:ff:9f:11:b9:e4:61:d4:82:e3:
2c:9b:38:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:06 2024 by rpki-client on console-fra.rpki-client.org