Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1Gve8fYTXr8t8ywXMfJYNv_IKeo.roa
File: 1Gve8fYTXr8t8ywXMfJYNv_IKeo.roa (raw, json)
Hash identifier: mrf67c9XGgdtEzMrBH8NorZWnINlgO7NbWJgxCAGEsc=
Subject key identifier: D4:6B:DE:F1:F6:13:5E:BF:2D:F3:2C:17:31:F2:58:36:FF:C8:29:EA
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 084FE2CF
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1Gve8fYTXr8t8ywXMfJYNv_IKeo.roa
Signing time: Sat 01 Jan 2022 00:51:23 +0000
ROA not before: Sat 01 Jan 2022 00:51:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44771
IP address blocks: 185.149.154.0/24 maxlen: 24
185.149.155.0/24 maxlen: 24
185.149.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139453135 (0x84fe2cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jan 1 00:51:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d46bdef1f6135ebf2df32c1731f25836ffc829ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:29:ed:07:5b:c1:06:4f:d3:a6:6b:d0:11:f8:
42:f7:ba:5c:d8:ce:72:e9:36:ea:13:56:90:f5:0f:
03:0c:04:23:6b:5b:43:fe:31:69:a7:66:60:61:ea:
1c:19:7c:72:93:bc:0b:3a:70:07:bf:45:db:86:d6:
c4:3c:92:b4:4d:e5:58:7f:16:05:d8:02:21:01:db:
9a:50:71:30:de:a5:e2:40:b6:11:02:02:3f:81:cd:
4a:29:b1:a1:f6:ef:db:09:f6:01:5c:f3:43:16:59:
e5:f5:ca:1b:3f:db:d9:a3:dc:2b:3f:c8:cd:28:8f:
85:f0:64:e8:c6:c4:5b:b3:c9:ed:1d:2c:c1:8b:67:
82:90:99:9f:d9:82:8f:5d:da:b8:ad:35:ee:72:86:
87:61:47:80:12:8d:52:2c:16:11:bf:0e:60:b5:2c:
3b:00:99:b9:c1:f7:03:87:2f:c5:3b:58:e6:eb:da:
26:e2:72:6a:e7:e6:5e:b7:0f:45:e0:a9:5b:57:ec:
90:3a:2d:a3:e6:52:d8:b0:84:fe:0a:26:ef:e6:d0:
80:fc:1c:28:e3:ba:73:3a:57:9b:08:05:24:17:ec:
cb:05:2e:31:4b:92:d3:a4:eb:bd:0d:4e:8c:e5:6f:
ee:5e:fb:fb:7f:f5:59:08:fa:df:eb:96:fd:98:94:
4d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6B:DE:F1:F6:13:5E:BF:2D:F3:2C:17:31:F2:58:36:FF:C8:29:EA
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1Gve8fYTXr8t8ywXMfJYNv_IKeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.153.0-185.149.155.255
Signature Algorithm: sha256WithRSAEncryption
1c:5a:b4:85:d0:15:18:00:90:f0:15:29:c9:4d:ae:d9:cc:3c:
db:f2:08:f8:80:b6:98:1a:f7:d1:ed:fa:a3:11:c2:a0:b1:14:
dd:b3:dd:11:86:da:0b:ad:a6:db:a9:34:56:14:5e:5c:09:13:
e1:1a:8d:ff:79:46:19:5b:9b:46:16:3f:62:88:cb:9f:30:de:
a9:80:6c:e4:70:97:73:b6:d9:4f:a3:bf:e7:1b:3c:53:67:43:
56:72:f4:f1:f6:7f:35:76:a4:62:9d:53:38:b5:db:5f:65:60:
a3:d0:15:4f:97:d2:3a:b8:ff:90:a2:52:62:5c:12:92:ec:32:
33:99:87:87:9d:0b:ae:c0:09:97:3a:ad:f6:4f:36:fa:da:4b:
24:58:09:89:52:03:9a:9b:a6:94:c0:35:2e:15:f4:a3:26:ac:
fe:1a:f6:55:80:be:4a:75:76:9b:35:9d:13:ac:9e:f9:55:45:
e8:19:3a:aa:e9:e5:52:de:30:2e:c0:7b:91:3d:96:96:e8:d9:
ac:ac:6f:62:76:a5:5c:60:87:3a:07:bf:90:e1:d1:cb:07:3b:
fa:ff:bc:96:0d:f1:86:68:a7:c3:38:aa:dc:c5:80:1f:92:37:
25:b2:f2:93:e3:ad:4d:ef:c2:0d:c6:1e:b3:c0:07:1c:c3:c1:
fe:e9:c4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:17 2023 by rpki-client on console-ams.rpki-client.org