Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/dca951-bca5-4162-af8a-581ed63f0c78/1/qK9l4AP3ETd6mDsbFPyn9vjd3EY.roa
File: qK9l4AP3ETd6mDsbFPyn9vjd3EY.roa (raw, json)
Hash identifier: OTCOZFq6JtEt2ZJZrlR4bEjzFenSydqbU1yFZqXeb84=
Subject key identifier: A8:AF:65:E0:03:F7:11:37:7A:98:3B:1B:14:FC:A7:F6:F8:DD:DC:46
Certificate issuer: /CN=7550861a244c69122df95f24eba7b710e366198f
Certificate serial: 0488DBE8
Authority key identifier: 75:50:86:1A:24:4C:69:12:2D:F9:5F:24:EB:A7:B7:10:E3:66:19:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVCGGiRMaRIt-V8k66e3EONmGY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/dca951-bca5-4162-af8a-581ed63f0c78/1/qK9l4AP3ETd6mDsbFPyn9vjd3EY.roa
Signing time: Sat 01 Jan 2022 05:58:00 +0000
ROA not before: Sat 01 Jan 2022 05:58:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204821
IP address blocks: 185.146.58.0/24 maxlen: 24
185.146.57.0/24 maxlen: 24
185.146.56.0/24 maxlen: 24
185.146.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76078056 (0x488dbe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7550861a244c69122df95f24eba7b710e366198f
Validity
Not Before: Jan 1 05:58:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8af65e003f711377a983b1b14fca7f6f8dddc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ac:f6:3f:5d:e0:c8:3d:74:40:26:e4:46:ca:
0f:16:f2:7e:ec:af:90:59:28:1a:8a:6c:dd:de:09:
b7:6f:0c:17:04:ec:9b:af:1e:19:f5:47:13:c1:dc:
e3:48:b8:f3:ba:f8:f8:6a:1b:08:40:0b:fa:f6:82:
1c:5a:9b:4d:8e:fb:2a:fe:c8:35:00:95:5d:42:13:
77:71:54:e8:dd:b0:9b:99:9c:62:ef:0c:56:dc:5c:
24:5b:36:54:81:4d:1f:ab:51:b1:85:fc:30:f7:0d:
a9:e3:39:8b:0e:e9:65:a7:5a:46:a3:cc:4d:89:5e:
f1:5e:ff:ab:71:4d:bf:4e:38:72:5e:76:28:c8:23:
34:9d:82:e7:df:b4:cd:80:e7:eb:f8:50:73:92:42:
50:e6:18:7f:7e:3d:08:a3:3c:6c:d5:fd:75:ca:df:
0b:0b:29:84:31:8f:a7:d6:99:a1:aa:1e:c0:bc:16:
78:72:18:a5:59:b5:51:d9:a3:bf:ea:6b:60:7e:96:
e8:f4:e3:88:ca:91:92:08:1b:9a:ce:7c:51:fd:c3:
58:e5:82:1f:bf:7c:b4:51:4a:8f:0c:e0:86:5a:f1:
68:58:1b:33:9a:17:37:d3:4f:de:f8:0b:ba:43:68:
ef:e7:48:1d:14:cf:5f:94:d7:c5:9c:bd:80:96:e5:
76:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AF:65:E0:03:F7:11:37:7A:98:3B:1B:14:FC:A7:F6:F8:DD:DC:46
X509v3 Authority Key Identifier:
keyid:75:50:86:1A:24:4C:69:12:2D:F9:5F:24:EB:A7:B7:10:E3:66:19:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVCGGiRMaRIt-V8k66e3EONmGY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/dca951-bca5-4162-af8a-581ed63f0c78/1/qK9l4AP3ETd6mDsbFPyn9vjd3EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/dca951-bca5-4162-af8a-581ed63f0c78/1/dVCGGiRMaRIt-V8k66e3EONmGY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.56.0/22
Signature Algorithm: sha256WithRSAEncryption
77:62:bf:c2:7b:52:2d:b8:8b:79:c9:a4:2f:d7:17:9d:b1:c9:
ef:bc:cc:a9:8b:db:8f:83:fa:76:c8:69:1c:ce:7d:9f:f8:e6:
78:b8:a7:4e:c9:f9:ce:43:31:20:56:c9:b4:d1:e6:87:32:81:
b3:f5:4a:44:55:66:81:f1:0a:24:87:c6:38:3a:31:dd:d0:49:
5f:84:46:b2:6f:2c:70:e4:07:88:52:af:ff:c8:46:5b:f6:36:
9b:5c:89:be:ab:d8:6c:d2:24:a5:ee:28:60:07:85:f6:95:71:
ad:7d:c1:dc:eb:79:c1:6b:74:85:3b:de:4a:97:5c:b7:a4:7f:
f5:ca:e3:be:f2:d7:7c:1f:88:08:0e:d9:b7:52:ea:ce:08:e1:
7e:02:ed:31:d1:ed:91:c5:34:4f:65:17:29:0d:2b:99:3c:49:
4c:9d:84:7b:ff:46:36:ef:31:b1:48:79:a3:56:a3:17:58:b8:
0e:f7:29:3a:c7:e5:3e:7c:49:23:55:af:94:fa:f7:9a:3f:7d:
da:c7:d2:49:29:91:f7:b3:22:cd:6a:a1:f8:46:58:c7:11:34:
71:0f:42:6e:38:a9:2f:a9:f6:ef:f4:d6:8c:74:58:2a:62:27:
5b:5e:19:4b:1b:8b:7b:eb:6e:b4:a8:05:a9:3c:1c:e9:24:20:
83:09:dd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:32 2024 by rpki-client on console-fra.rpki-client.org