Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/64829d-a344-44d2-9e9d-1dd67c32b06a/1/d2I6MY1DzoSTLEzZ6ybelTQThfQ.roa
File: d2I6MY1DzoSTLEzZ6ybelTQThfQ.roa (raw, json)
Hash identifier: q5peWWHK25E0yve1pNQCyLy45G9MYk7+3Q7kPA+EUxw=
Subject key identifier: 77:62:3A:31:8D:43:CE:84:93:2C:4C:D9:EB:26:DE:95:34:13:85:F4
Certificate issuer: /CN=85b8b21e4f5fbfdeb714d3e1b38a53817b5729ed
Certificate serial: 01856C65CBF83666C9A3AAED50E8C1149983
Authority key identifier: 85:B8:B2:1E:4F:5F:BF:DE:B7:14:D3:E1:B3:8A:53:81:7B:57:29:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbiyHk9fv963FNPhs4pTgXtXKe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/64829d-a344-44d2-9e9d-1dd67c32b06a/1/d2I6MY1DzoSTLEzZ6ybelTQThfQ.roa
Signing time: Sun 01 Jan 2023 08:14:48 +0000
ROA not before: Sun 01 Jan 2023 08:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49453
IP address blocks: 185.212.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:cb:f8:36:66:c9:a3:aa:ed:50:e8:c1:14:99:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b8b21e4f5fbfdeb714d3e1b38a53817b5729ed
Validity
Not Before: Jan 1 08:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77623a318d43ce84932c4cd9eb26de95341385f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:82:8c:b4:37:27:40:4f:2b:85:50:95:b7:
4c:54:44:3f:0d:62:4a:74:ae:09:fd:0c:ef:da:7f:
e2:0c:e9:9a:7a:b5:51:25:95:fe:05:04:42:2c:b1:
1f:41:bd:3c:2b:01:be:51:ec:0f:d3:2c:95:3d:b1:
02:0a:8c:e5:5b:1b:25:17:7d:1e:a8:2b:d0:c2:cb:
a3:1a:3f:5e:84:78:e0:2d:76:89:7c:97:68:c3:9f:
2f:71:9c:4f:a2:fb:9a:58:9d:da:0b:92:5c:c9:03:
93:f6:df:f5:35:1b:29:64:e0:49:b5:1d:36:93:9a:
9d:2b:40:0f:95:bf:fc:6e:67:62:c5:83:d3:6f:db:
3c:1d:b8:6d:cf:9f:48:f9:23:76:f9:ac:99:db:7e:
e5:43:27:d0:5f:c7:64:c5:bc:a6:e3:08:6d:5a:7a:
f4:de:04:47:c7:6b:95:64:05:40:d1:c1:f4:04:80:
4b:97:a4:66:aa:10:7a:3f:95:87:e2:fa:04:66:77:
55:c8:47:aa:ba:a9:ad:92:d6:56:54:71:ff:44:8c:
0a:e9:e4:fe:3a:90:00:ec:3c:f3:5c:10:3c:88:eb:
78:cb:b4:89:80:7f:22:3b:06:6c:be:5f:e6:a5:47:
4d:72:c0:a0:2b:66:47:82:e8:2f:47:14:8c:e4:a2:
b5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:62:3A:31:8D:43:CE:84:93:2C:4C:D9:EB:26:DE:95:34:13:85:F4
X509v3 Authority Key Identifier:
keyid:85:B8:B2:1E:4F:5F:BF:DE:B7:14:D3:E1:B3:8A:53:81:7B:57:29:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbiyHk9fv963FNPhs4pTgXtXKe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/64829d-a344-44d2-9e9d-1dd67c32b06a/1/d2I6MY1DzoSTLEzZ6ybelTQThfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/64829d-a344-44d2-9e9d-1dd67c32b06a/1/hbiyHk9fv963FNPhs4pTgXtXKe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.115.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e1:da:77:75:af:93:85:f5:01:e0:42:e5:c6:3d:c9:a9:0e:
50:8d:1e:3b:54:57:05:50:94:18:a4:c2:bd:55:69:3d:9a:74:
52:05:cb:18:20:eb:f7:7d:bc:ad:ad:86:12:fd:40:f2:d4:d5:
21:bb:29:43:e6:c9:f9:77:bb:99:a4:c3:e2:ab:af:94:ea:2f:
93:91:bf:b5:12:ac:66:49:82:97:33:7b:d1:68:82:a8:0e:85:
d1:5e:12:c2:e0:69:5b:7a:d9:36:8e:21:a6:28:d1:d0:95:72:
dd:e0:eb:4a:18:21:e2:71:6e:9d:3f:af:46:9a:a8:77:8e:45:
8f:a4:26:37:aa:e2:ec:0c:af:9a:44:30:36:c0:d9:94:0c:42:
9d:f7:41:a8:64:48:51:5f:41:77:9e:7a:58:57:9c:a3:9a:c9:
d4:63:be:4c:5d:9d:34:c4:ae:81:ea:de:a2:db:47:d1:d4:43:
ce:96:5d:44:32:d3:da:32:a8:38:3a:4b:d4:2d:a9:d0:c0:c9:
fa:f1:1d:d1:57:b5:ea:64:bd:b7:60:f5:df:41:c1:c4:39:bf:
d1:1d:82:1e:81:ee:c6:28:ad:73:bd:e9:8e:51:a1:df:d4:d5:
55:13:9e:28:48:bf:a8:06:3f:aa:b1:db:56:b6:52:de:74:b8:
a5:f9:0b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:37 2024 by rpki-client on console-ams.rpki-client.org