Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c9e24-7e5a-48b6-b75f-d1b36841dee1/1/AwioqJeOpFCShynMKKvwSUYySuo.roa
File: AwioqJeOpFCShynMKKvwSUYySuo.roa (raw, json)
Hash identifier: YogkYVqSy30Ju1Ur1XoAvlgRK5bz+l6sL1zFXr87Z+k=
Subject key identifier: 03:08:A8:A8:97:8E:A4:50:92:87:29:CC:28:AB:F0:49:46:32:4A:EA
Certificate issuer: /CN=d162caa6a984f0885bfe8a7e5e091f932377442b
Certificate serial: 0389036C
Authority key identifier: D1:62:CA:A6:A9:84:F0:88:5B:FE:8A:7E:5E:09:1F:93:23:77:44:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WLKpqmE8Ihb_op-XgkfkyN3RCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c9e24-7e5a-48b6-b75f-d1b36841dee1/1/AwioqJeOpFCShynMKKvwSUYySuo.roa
Signing time: Sat 01 Jan 2022 04:51:10 +0000
ROA not before: Sat 01 Jan 2022 04:51:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212346
IP address blocks: 185.217.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59310956 (0x389036c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d162caa6a984f0885bfe8a7e5e091f932377442b
Validity
Not Before: Jan 1 04:51:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0308a8a8978ea450928729cc28abf04946324aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:45:4d:0c:c4:39:12:55:c8:a8:06:32:fc:
4d:22:64:0a:26:c7:37:7f:e8:60:37:b3:61:00:6e:
cc:fa:b6:17:69:8c:bf:58:0b:74:68:ce:7d:a4:a2:
dc:27:86:ac:73:58:12:bd:e3:2f:3c:e7:09:f6:ed:
4d:14:94:69:5e:e1:f7:39:64:3b:a8:50:70:aa:8c:
b4:74:e6:98:84:cc:c4:6a:1a:37:61:25:f9:d3:b8:
69:15:e8:96:78:70:99:73:c4:af:17:c7:c6:da:6e:
da:7f:91:74:d8:06:7d:4c:36:4e:f9:88:ee:1b:05:
f7:91:5f:91:16:27:6c:59:d0:6d:fa:4c:a8:15:63:
1b:9d:aa:ea:88:ec:9a:1a:6a:f8:3b:17:5c:3c:fd:
5c:04:fb:2f:12:4f:ac:52:34:ba:2c:d7:8b:d1:d2:
65:29:35:d3:69:23:e7:ab:22:b6:1e:fe:c1:79:12:
6d:d8:b5:63:e5:9b:2a:2a:a3:92:17:43:85:d1:ac:
00:9f:48:7b:93:e3:d9:33:f1:57:f1:89:bc:fc:ee:
25:e1:e1:f7:ae:ae:5e:0d:b6:63:d0:ae:77:2f:b3:
4d:11:24:85:38:20:b1:fe:2b:4a:b9:18:2e:ed:ee:
a5:34:96:2d:d2:2c:0d:08:af:f5:e4:cf:cb:92:e7:
86:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:08:A8:A8:97:8E:A4:50:92:87:29:CC:28:AB:F0:49:46:32:4A:EA
X509v3 Authority Key Identifier:
keyid:D1:62:CA:A6:A9:84:F0:88:5B:FE:8A:7E:5E:09:1F:93:23:77:44:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WLKpqmE8Ihb_op-XgkfkyN3RCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c9e24-7e5a-48b6-b75f-d1b36841dee1/1/AwioqJeOpFCShynMKKvwSUYySuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c9e24-7e5a-48b6-b75f-d1b36841dee1/1/0WLKpqmE8Ihb_op-XgkfkyN3RCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.36.0/24
Signature Algorithm: sha256WithRSAEncryption
80:68:9e:e1:32:bf:37:33:f2:80:88:8f:87:f1:c9:04:ca:e6:
3a:c6:24:69:a3:ce:11:b9:f4:1d:3a:44:b7:b8:f8:27:2a:42:
b9:25:60:80:30:d1:ae:0e:d4:2b:47:34:04:b1:7d:cd:16:6e:
18:38:2d:e0:7d:f5:6a:90:b8:6f:07:7f:e0:7d:25:e1:bb:3c:
f5:02:51:d4:98:ef:4e:b1:69:07:b1:ab:f2:0b:2e:dd:15:ac:
4e:9e:9c:5c:e6:c5:1e:47:43:78:d0:1c:ac:3e:5a:fe:16:52:
58:60:03:f6:66:13:b5:48:7b:b1:47:d0:d8:cb:cd:ff:e3:bd:
c7:29:eb:6d:8d:83:d7:59:29:e9:8f:1e:fb:27:72:2a:66:44:
a5:00:8a:9e:e7:a7:2d:7d:bc:c5:f7:6e:5b:f5:b7:82:85:d9:
8d:c7:ac:c0:16:25:39:df:08:9d:bd:31:b3:25:e9:2f:5a:e2:
e1:3d:41:14:84:54:55:c1:60:2b:41:60:8f:f7:bc:72:f6:3c:
04:f1:9a:03:16:0a:88:65:32:99:45:46:88:62:be:a0:a7:26:
00:ed:37:f3:45:42:d8:09:4a:17:06:c4:e4:14:1c:67:af:80:
e2:0a:27:06:5c:79:25:34:91:f9:cb:d6:59:42:eb:9e:e9:66:
f4:2e:5d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:57 2024 by rpki-client on console-fra.rpki-client.org