Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4a132d-233b-4740-93c4-46dd63ea76f3/1/TcAvCc-dxEl4EIayrlGrLRQsCKU.roa
File: TcAvCc-dxEl4EIayrlGrLRQsCKU.roa (raw, json)
Hash identifier: 2lV5mRQJmJn6NSiev7cHL7IGqrY1Lqk3r5FTmuL7e1E=
Subject key identifier: 4D:C0:2F:09:CF:9D:C4:49:78:10:86:B2:AE:51:AB:2D:14:2C:08:A5
Certificate issuer: /CN=3934bea04024280609f917b87bed080daf4c7ea4
Certificate serial: CEDDE5
Authority key identifier: 39:34:BE:A0:40:24:28:06:09:F9:17:B8:7B:ED:08:0D:AF:4C:7E:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTS-oEAkKAYJ-Re4e-0IDa9MfqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4a132d-233b-4740-93c4-46dd63ea76f3/1/TcAvCc-dxEl4EIayrlGrLRQsCKU.roa
Signing time: Mon 25 Apr 2022 17:59:21 +0000
ROA not before: Mon 25 Apr 2022 17:59:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 185.214.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13557221 (0xcedde5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3934bea04024280609f917b87bed080daf4c7ea4
Validity
Not Before: Apr 25 17:59:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4dc02f09cf9dc449781086b2ae51ab2d142c08a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:30:26:6d:ae:ba:39:c7:b7:42:a7:65:1e:1b:
c0:23:09:e1:a1:25:ad:4c:cf:03:30:42:89:c5:42:
74:a7:9b:b5:e2:50:5f:16:27:c1:34:b8:c9:a8:70:
f4:05:9a:ec:e1:4a:8f:2f:c4:0c:a5:2d:44:6b:70:
20:db:17:8f:1d:80:5a:71:a8:42:90:b9:e1:0e:75:
8a:b3:5a:9c:f9:8d:a2:c6:c2:37:b2:3d:bd:45:cc:
3a:41:d5:da:7c:4d:b0:77:4e:2c:cf:35:87:a3:4b:
b8:af:30:86:b5:90:64:ec:75:c1:d4:36:ae:94:43:
e0:6f:55:c6:00:20:43:23:3d:c2:5b:46:bf:73:09:
11:f2:7c:f6:3f:e5:2c:85:37:88:84:34:91:54:b1:
89:5d:43:c4:1e:e1:38:6b:b2:fe:01:c8:55:d3:c7:
30:ca:9b:43:b5:dd:1c:92:95:0d:0d:52:1e:d7:cc:
cd:7e:1d:72:5c:0e:91:de:fe:3b:e2:d5:ac:76:c0:
a8:80:f3:a6:f6:e1:31:51:f9:d4:e5:1c:31:91:8b:
19:01:28:f3:a5:65:48:40:ac:0b:f0:49:c9:d9:2f:
e0:12:24:fd:12:69:51:df:69:66:f9:9d:1f:6e:4f:
f6:f1:37:19:16:80:cf:03:f2:bc:44:fd:cd:c6:08:
e3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C0:2F:09:CF:9D:C4:49:78:10:86:B2:AE:51:AB:2D:14:2C:08:A5
X509v3 Authority Key Identifier:
keyid:39:34:BE:A0:40:24:28:06:09:F9:17:B8:7B:ED:08:0D:AF:4C:7E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTS-oEAkKAYJ-Re4e-0IDa9MfqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4a132d-233b-4740-93c4-46dd63ea76f3/1/TcAvCc-dxEl4EIayrlGrLRQsCKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4a132d-233b-4740-93c4-46dd63ea76f3/1/OTS-oEAkKAYJ-Re4e-0IDa9MfqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.167.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f9:8b:fe:61:c9:40:8a:09:ac:53:c9:78:d3:18:16:90:ce:
b2:17:f8:8d:24:44:45:3e:d3:a8:08:5a:4f:72:29:6a:9a:bb:
0b:a5:56:4f:9a:3a:9b:ae:3b:d7:0b:79:e7:1d:00:ba:ba:99:
82:5d:17:95:16:75:d0:ea:76:a9:95:06:cf:07:e4:f5:a3:29:
be:d0:f5:0b:bb:13:1d:b1:45:da:7a:0c:5b:b7:51:21:24:40:
29:e2:34:93:f1:4b:eb:54:92:a2:34:cb:65:30:3c:9f:07:a2:
ac:44:14:73:8f:a8:e4:54:cd:ba:78:77:a1:36:fc:28:4e:7a:
dc:f4:77:6d:2d:12:81:37:e9:8e:f9:1e:37:b7:57:0b:35:81:
c5:7e:a9:77:aa:88:98:d2:82:05:fe:a3:0b:3d:4f:4d:76:99:
49:1b:9a:89:1e:02:d6:02:ae:44:f2:5e:3a:f2:f9:36:c1:1d:
82:f2:35:a1:1f:0b:10:42:54:04:72:74:17:60:95:dd:71:53:
21:71:10:1b:85:2e:6d:a0:6c:e0:4b:8f:ae:0f:6f:99:98:6b:
6a:94:72:bd:34:d7:27:99:8a:b4:dd:8f:00:60:4f:b5:88:e8:
ae:05:35:29:96:62:a1:74:bb:08:9d:2b:21:14:97:3b:29:d7:
f3:e0:60:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:18 2024 by rpki-client on console-fra.rpki-client.org