Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b666e4-b405-4c07-bb89-59eaa8670ffa/1/grgB9ztaOZsWoUXUWqKsOHVgZ5M.roa
File: grgB9ztaOZsWoUXUWqKsOHVgZ5M.roa (raw, json)
Hash identifier: pdHmnoSF43MQkC6Nrv+Hhr5TJvadF1VMkGESswR2kTQ=
Subject key identifier: 82:B8:01:F7:3B:5A:39:9B:16:A1:45:D4:5A:A2:AC:38:75:60:67:93
Certificate issuer: /CN=a1479239d443985876b0859d33b1a0e7114d1a20
Certificate serial: 0960940F
Authority key identifier: A1:47:92:39:D4:43:98:58:76:B0:85:9D:33:B1:A0:E7:11:4D:1A:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUeSOdRDmFh2sIWdM7Gg5xFNGiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b666e4-b405-4c07-bb89-59eaa8670ffa/1/grgB9ztaOZsWoUXUWqKsOHVgZ5M.roa
Signing time: Sat 01 Jan 2022 09:04:19 +0000
ROA not before: Sat 01 Jan 2022 09:04:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34993
IP address blocks: 185.57.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157324303 (0x960940f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1479239d443985876b0859d33b1a0e7114d1a20
Validity
Not Before: Jan 1 09:04:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82b801f73b5a399b16a145d45aa2ac3875606793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:3d:a9:bb:11:d7:0f:e4:5a:f0:39:59:82:
63:1c:80:d2:31:ad:3a:af:e0:cc:42:c6:5f:4d:81:
9f:4a:33:83:f5:de:88:3e:77:a8:63:2c:e0:f3:5a:
c7:00:2f:26:66:bc:cb:46:d6:08:24:7f:73:22:9e:
10:36:79:99:fb:69:60:e5:f8:87:24:d8:3c:4c:76:
f1:b2:f5:89:e8:8f:fa:d8:07:1c:95:89:8f:9e:f2:
f3:f0:4f:6f:9a:99:06:bb:0d:d8:7a:87:0b:5c:a9:
1a:92:89:3e:10:ef:35:42:dd:16:4c:9d:25:a1:5f:
28:e5:93:b2:0c:15:bb:9d:c8:84:4d:35:25:5d:22:
75:f5:26:65:9c:a6:0e:b3:0d:a1:11:7c:db:fb:77:
ef:92:ad:2c:ed:c8:66:c9:b2:70:9a:4e:93:3d:2d:
25:7f:c2:ca:a8:62:28:22:83:d4:9d:18:aa:cf:e4:
9a:9e:31:2f:00:f1:60:7c:7e:a6:07:c3:f5:93:3a:
98:91:7b:88:65:28:f7:ca:09:9a:44:2a:ac:28:cb:
63:cc:bf:48:2f:d9:d1:cc:f8:0a:47:36:35:81:1d:
7b:1f:8a:79:6a:84:a2:e5:0b:5f:e7:52:1b:c4:0f:
84:58:bc:65:6d:53:d1:d9:b3:89:54:a7:4b:6a:52:
5f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B8:01:F7:3B:5A:39:9B:16:A1:45:D4:5A:A2:AC:38:75:60:67:93
X509v3 Authority Key Identifier:
keyid:A1:47:92:39:D4:43:98:58:76:B0:85:9D:33:B1:A0:E7:11:4D:1A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUeSOdRDmFh2sIWdM7Gg5xFNGiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b666e4-b405-4c07-bb89-59eaa8670ffa/1/grgB9ztaOZsWoUXUWqKsOHVgZ5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b666e4-b405-4c07-bb89-59eaa8670ffa/1/oUeSOdRDmFh2sIWdM7Gg5xFNGiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.148.0/22
Signature Algorithm: sha256WithRSAEncryption
75:4e:2f:1e:d6:6a:ba:4a:dc:95:87:ef:a6:65:ae:27:cb:7e:
5b:33:8e:07:68:09:f0:26:2b:0f:91:4c:60:97:25:8e:c3:7b:
be:db:f4:c8:be:b8:1a:93:dd:8c:d8:7e:36:07:aa:1b:f6:9b:
d6:b3:30:f4:23:e8:83:d0:83:f1:10:e5:89:cc:dc:5a:1a:49:
c7:b4:ab:e1:7c:33:83:18:28:8e:3e:d4:c2:1e:13:03:ca:6d:
79:c8:a6:34:66:bd:70:77:1c:f2:aa:34:d3:35:93:72:ba:4e:
0c:13:33:e2:f9:c0:4b:ce:e8:4a:75:c8:db:8b:6f:9c:6d:bc:
06:12:7e:10:e6:9f:ef:a5:f9:3b:0d:53:f5:63:72:73:f3:8d:
54:d1:0e:4c:26:2e:5e:54:72:0f:e3:03:fc:cf:ea:3e:ae:9c:
ad:4b:60:e2:53:90:a5:6c:96:bb:0a:5d:b6:f4:6a:26:6e:31:
fc:fe:65:81:99:ca:58:6f:7a:04:e1:c7:14:85:a0:64:e4:ee:
10:e5:16:27:f0:1f:6b:65:0d:14:b0:58:2f:27:fd:5c:bb:dd:
86:35:16:37:75:b1:b2:a3:5d:fd:e3:e6:70:a1:93:bc:bb:7c:
03:45:d7:c7:ab:f5:6a:e6:1d:6d:9b:b3:2d:d0:b8:97:7f:fe:
51:88:19:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:40 2024 by rpki-client on console-ams.rpki-client.org