Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c19da3-7a3b-4938-b7c7-17fb64fd8250/1/SlBylHYwviYd91qsnfm1K10LXKc.roa
File: SlBylHYwviYd91qsnfm1K10LXKc.roa (raw, json)
Hash identifier: ZxTSB9iNyV5BzE4QL6jFgHfbnWrGiwnd1dR9EcmKh7E=
Subject key identifier: 4A:50:72:94:76:30:BE:26:1D:F7:5A:AC:9D:F9:B5:2B:5D:0B:5C:A7
Certificate issuer: /CN=084b2408adf9480e8268b7733be48127433ce4d4
Certificate serial: 01877A9CB6B42DDC53627E0828A6A2223A07
Authority key identifier: 08:4B:24:08:AD:F9:48:0E:82:68:B7:73:3B:E4:81:27:43:3C:E4:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEskCK35SA6CaLdzO-SBJ0M85NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c19da3-7a3b-4938-b7c7-17fb64fd8250/1/SlBylHYwviYd91qsnfm1K10LXKc.roa
Signing time: Thu 13 Apr 2023 12:35:03 +0000
ROA not before: Thu 13 Apr 2023 12:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.235.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:9c:b6:b4:2d:dc:53:62:7e:08:28:a6:a2:22:3a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084b2408adf9480e8268b7733be48127433ce4d4
Validity
Not Before: Apr 13 12:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a5072947630be261df75aac9df9b52b5d0b5ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:51:e2:3f:40:3b:0d:4f:ca:1c:f5:2a:64:3c:
6e:c8:d1:c1:b2:60:62:29:34:02:8d:1f:b5:47:90:
cb:69:3c:53:4a:3b:eb:a3:8a:ac:be:10:dd:83:eb:
2e:98:74:da:18:88:68:0b:c9:e8:5c:86:1c:50:41:
20:c2:2b:47:dc:68:d7:70:73:18:a3:88:10:bd:c4:
f1:de:49:f2:79:72:02:67:e6:2e:16:d8:85:c4:1f:
8f:27:dd:19:45:af:d9:2b:db:24:e7:c5:90:15:51:
0e:8a:44:c9:ae:2b:08:ac:67:a3:2e:6a:dd:4f:7d:
c1:15:72:3e:2a:17:55:b4:ae:98:b4:80:ca:4f:ff:
53:50:4f:14:c2:67:5e:c8:fb:e7:cb:c2:ad:1a:0c:
83:22:90:8e:9c:cf:5a:dd:b5:78:20:a5:bd:29:0f:
b4:0b:85:9c:00:fc:36:c2:38:4f:cf:8f:66:59:70:
78:49:ec:97:af:d1:2a:05:43:46:30:39:b0:27:a1:
41:38:29:94:8b:3b:ef:f7:fe:ec:07:a3:9b:e5:d5:
80:1d:71:d7:9f:b2:18:b9:46:1f:70:a0:ed:58:82:
da:73:2f:fa:bf:04:da:d2:79:c7:49:1b:d2:3b:bd:
4b:6a:17:d7:c9:90:82:3d:85:ac:5e:88:3d:42:7a:
9e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:50:72:94:76:30:BE:26:1D:F7:5A:AC:9D:F9:B5:2B:5D:0B:5C:A7
X509v3 Authority Key Identifier:
keyid:08:4B:24:08:AD:F9:48:0E:82:68:B7:73:3B:E4:81:27:43:3C:E4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEskCK35SA6CaLdzO-SBJ0M85NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c19da3-7a3b-4938-b7c7-17fb64fd8250/1/SlBylHYwviYd91qsnfm1K10LXKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c19da3-7a3b-4938-b7c7-17fb64fd8250/1/CEskCK35SA6CaLdzO-SBJ0M85NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.224.0/24
Signature Algorithm: sha256WithRSAEncryption
38:72:ca:cf:a6:62:6b:67:b3:d4:ee:7e:38:e2:04:68:9a:c6:
53:fc:f5:99:f6:51:e8:03:e2:b6:e8:21:60:9c:cd:40:3b:89:
5e:e2:1e:71:e8:8d:7c:1f:af:0c:d1:f7:33:c5:7f:a2:4d:a1:
06:ab:29:47:28:04:20:07:54:d2:e4:1d:63:2f:bd:0a:70:db:
b9:6c:97:06:11:03:f0:2a:a4:50:1c:bd:52:40:3e:89:7d:35:
f0:ab:33:de:f2:58:3a:c0:ce:6c:cd:f0:1b:ca:8a:a7:86:82:
7d:05:93:eb:0e:ff:17:44:0f:5b:94:3b:3f:f7:20:85:7f:62:
17:aa:fb:67:91:ef:c8:75:4c:ad:45:3b:8c:da:fb:90:d9:ea:
7d:4c:25:c5:59:10:79:bb:71:44:85:86:4e:98:5f:a0:4b:97:
65:0e:95:c8:9b:49:d0:2e:c0:b0:94:3f:17:33:d7:d4:2f:0c:
6b:02:91:9d:34:c5:16:80:81:21:94:5b:e2:18:cb:a4:8c:c9:
04:cd:dc:fb:e6:67:ef:b1:95:83:60:8d:55:32:21:d6:71:83:
3e:2a:74:82:d5:78:ed:5a:0d:c0:54:7d:1b:66:40:7d:34:c3:
54:91:f3:05:6e:5f:d0:0a:96:f9:44:7b:0f:b0:18:ce:c3:61:
d4:2a:4e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:48 2024 by rpki-client on console-fra.rpki-client.org