Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2c9183-a763-47fd-b2b1-68ac3a5ece53/1/IcewENCuAXV9vxdzwh5aEjeKpYY.roa
File: IcewENCuAXV9vxdzwh5aEjeKpYY.roa (raw, json)
Hash identifier: CXehcssj10edvool8N9ei9zMLd9AWDKTE5fHEDRMTSw=
Subject key identifier: 21:C7:B0:10:D0:AE:01:75:7D:BF:17:73:C2:1E:5A:12:37:8A:A5:86
Certificate issuer: /CN=fc3faa582d9f53b9a98682401481b0bf70581690
Certificate serial: 01856EB91A68DAE5E108CD6C63199D6035CC
Authority key identifier: FC:3F:AA:58:2D:9F:53:B9:A9:86:82:40:14:81:B0:BF:70:58:16:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_D-qWC2fU7mphoJAFIGwv3BYFpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2c9183-a763-47fd-b2b1-68ac3a5ece53/1/IcewENCuAXV9vxdzwh5aEjeKpYY.roa
Signing time: Sun 01 Jan 2023 19:05:02 +0000
ROA not before: Sun 01 Jan 2023 19:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57030
IP address blocks: 185.177.120.0/22 maxlen: 22
185.177.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:1a:68:da:e5:e1:08:cd:6c:63:19:9d:60:35:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3faa582d9f53b9a98682401481b0bf70581690
Validity
Not Before: Jan 1 19:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21c7b010d0ae01757dbf1773c21e5a12378aa586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:24:51:86:5c:e1:89:53:d1:80:15:9b:33:2b:
37:c4:58:7f:07:31:17:d9:22:a3:32:a1:f6:52:21:
d6:a1:24:de:6a:cd:08:aa:5a:0b:66:9d:2b:62:31:
2c:6d:aa:f6:aa:3a:98:00:2f:32:8a:44:69:76:c1:
1c:01:3a:01:f7:bd:b4:98:4b:ed:22:82:5e:8a:5b:
f4:d4:26:31:a8:01:89:a5:cd:fc:16:77:99:7f:06:
13:65:36:ff:4f:6e:3d:ab:96:fb:cd:ed:9d:cc:17:
9c:93:a8:27:53:34:ea:6e:ad:6d:f6:3e:7f:6f:0e:
fe:ce:fe:47:0c:ce:43:21:c9:94:cd:82:0d:23:17:
66:14:84:0b:d0:04:ed:57:75:bf:d2:0f:d5:ae:84:
18:f1:e9:6f:86:00:8c:35:b2:2b:68:87:06:d6:c2:
ff:1c:f9:17:df:8f:25:5f:fd:2b:61:c5:cf:36:69:
54:e3:5a:29:cd:61:8f:e7:4a:ff:87:92:8f:3c:92:
da:9c:ab:24:29:2e:78:0a:89:e7:de:00:29:32:44:
9f:40:43:38:b4:d6:93:cb:79:c9:ca:f0:d7:a7:00:
1e:ef:cb:85:bc:e4:0b:d0:0a:dc:ee:5d:77:7b:11:
22:b8:8f:82:ed:9d:7d:cf:7e:07:5d:c2:ac:c0:14:
cf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C7:B0:10:D0:AE:01:75:7D:BF:17:73:C2:1E:5A:12:37:8A:A5:86
X509v3 Authority Key Identifier:
keyid:FC:3F:AA:58:2D:9F:53:B9:A9:86:82:40:14:81:B0:BF:70:58:16:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_D-qWC2fU7mphoJAFIGwv3BYFpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2c9183-a763-47fd-b2b1-68ac3a5ece53/1/IcewENCuAXV9vxdzwh5aEjeKpYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2c9183-a763-47fd-b2b1-68ac3a5ece53/1/_D-qWC2fU7mphoJAFIGwv3BYFpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.120.0/22
Signature Algorithm: sha256WithRSAEncryption
74:f3:d6:6d:1f:cb:42:13:3d:09:12:b6:f2:fe:12:8f:4b:f2:
53:b4:0f:9e:b8:2f:27:1d:3f:9a:be:d5:8e:4a:a9:97:6a:60:
17:65:34:33:b1:4b:93:e8:23:73:e9:44:75:ee:df:62:03:f4:
12:e3:1f:e2:09:23:3a:38:72:11:58:6a:ef:d0:ca:7c:3e:e7:
24:5d:44:f5:63:aa:a6:4b:c8:fd:08:c2:df:e4:2d:a6:14:23:
96:40:35:46:26:bc:8b:db:9c:a8:52:ca:3a:16:0d:38:b9:7a:
f6:f0:f2:6d:c0:b0:54:ce:b9:da:5b:b0:d2:0b:a8:ca:87:81:
c4:35:62:9e:b7:09:0b:5c:91:71:4f:a1:bc:2c:8b:24:48:89:
5f:8e:c2:d9:24:20:a2:6e:21:b1:00:c9:9e:a7:cf:6e:54:f4:
72:86:6a:d0:1f:8b:a3:d8:95:f1:e2:87:e0:1e:3c:6f:79:b7:
38:d6:2f:24:af:8f:07:52:b4:f3:cc:5e:73:ea:b0:0d:f4:30:
d4:d0:a3:81:5b:92:fc:61:23:73:51:ca:cb:e7:7f:bd:b9:8d:
50:62:c7:fe:57:8a:32:ad:8d:d5:e0:da:cc:e1:e8:53:b0:9d:
6b:a4:44:50:66:04:71:8a:af:4c:f4:5f:87:33:95:a3:30:1b:
4b:cb:1e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:10 2024 by rpki-client on console-ams.rpki-client.org