Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/odOygNatf8a_d6gPE9hLCN8b-Zk.roa
File: odOygNatf8a_d6gPE9hLCN8b-Zk.roa (raw, json)
Hash identifier: s3Pp3BnQ5EKQKjHLvkA7w1EoLurqgd1ocw/nKTtFfrQ=
Subject key identifier: A1:D3:B2:80:D6:AD:7F:C6:BF:77:A8:0F:13:D8:4B:08:DF:1B:F9:99
Certificate issuer: /CN=0b1c467eb9408b11d06f1f67e5a9cc423c39ac2f
Certificate serial: 018572A80791BB0AFF5211D1DDA80EF77A08
Authority key identifier: 0B:1C:46:7E:B9:40:8B:11:D0:6F:1F:67:E5:A9:CC:42:3C:39:AC:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxxGfrlAixHQbx9n5anMQjw5rC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/odOygNatf8a_d6gPE9hLCN8b-Zk.roa
Signing time: Mon 02 Jan 2023 13:24:52 +0000
ROA not before: Mon 02 Jan 2023 13:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207059
IP address blocks: 185.167.78.0/24 maxlen: 24
185.167.79.0/24 maxlen: 24
2a0b:4e00:3::/48 maxlen: 48
2a0b:4e00:4::/48 maxlen: 48
2a0b:4e00::/29 maxlen: 48
2a0b:4e00:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:a8:07:91:bb:0a:ff:52:11:d1:dd:a8:0e:f7:7a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1c467eb9408b11d06f1f67e5a9cc423c39ac2f
Validity
Not Before: Jan 2 13:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1d3b280d6ad7fc6bf77a80f13d84b08df1bf999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:13:ab:63:d6:3a:24:3f:68:6a:2b:a3:d4:
fd:e9:a9:56:e4:55:8c:cd:0f:cf:09:65:a6:17:27:
4c:d8:57:57:4d:4d:47:35:9b:a7:df:a1:77:4b:8e:
3c:53:c2:63:76:cf:0e:86:75:db:f7:19:87:d5:66:
5e:ff:de:12:50:77:e7:70:f2:84:bf:59:81:e5:2d:
ef:30:77:51:f2:9f:41:20:6c:77:c6:13:f1:4a:92:
97:16:cc:01:33:ae:c7:c0:3c:24:02:bb:76:cb:ea:
e1:69:df:c6:80:89:10:d4:eb:e3:1b:5e:eb:23:ef:
b7:db:c1:22:b6:bf:98:11:3a:68:4a:1d:69:0e:e6:
11:61:12:9c:ff:c8:e2:7b:9d:75:18:cd:2a:de:f5:
d6:93:99:e0:91:c6:eb:40:ea:43:84:1e:90:8b:65:
57:5c:06:2a:49:92:82:54:38:ec:74:4e:ed:13:b7:
2d:4d:0c:42:ec:92:6a:ed:55:df:99:f3:cc:46:bb:
54:e5:ee:37:78:fd:8a:bd:e4:f4:a2:85:97:0c:b3:
b0:ba:4d:71:68:45:29:c0:dc:71:5d:3c:81:4f:2c:
5a:ba:4c:f9:3c:c2:1e:49:52:8a:98:ac:a1:a6:32:
e2:28:eb:2b:03:1c:46:f4:4d:65:90:39:64:86:06:
43:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D3:B2:80:D6:AD:7F:C6:BF:77:A8:0F:13:D8:4B:08:DF:1B:F9:99
X509v3 Authority Key Identifier:
keyid:0B:1C:46:7E:B9:40:8B:11:D0:6F:1F:67:E5:A9:CC:42:3C:39:AC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxGfrlAixHQbx9n5anMQjw5rC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/odOygNatf8a_d6gPE9hLCN8b-Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/CxxGfrlAixHQbx9n5anMQjw5rC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.78.0/23
IPv6:
2a0b:4e00::/29
Signature Algorithm: sha256WithRSAEncryption
0d:b6:d3:81:85:05:e2:1f:10:24:4e:80:27:42:a5:c4:8b:5b:
b4:fb:39:72:9c:08:81:a7:72:af:2a:c7:9a:6c:9b:ed:d7:6d:
36:70:41:4a:0a:ac:33:20:38:28:2a:59:2a:7c:c1:60:5a:48:
a1:db:06:cd:8e:86:d5:3f:aa:53:25:86:9e:03:73:56:3a:1a:
b8:f0:eb:e4:45:52:a2:e8:e0:f4:48:10:d4:22:d9:cd:13:03:
a9:98:28:18:a8:92:c9:c1:f8:be:0b:9a:4b:ce:2c:58:bf:df:
67:42:8f:dc:11:34:fe:89:87:dd:3e:5f:ed:c8:5b:4d:bf:60:
57:6e:b0:81:8c:6c:fe:9b:6b:9a:ee:c4:31:96:f5:53:6a:34:
3d:55:55:32:9a:ab:c3:33:cb:ab:05:71:08:69:19:99:0d:d0:
d6:cc:c9:97:ee:0f:cc:6a:5b:97:c4:94:83:f0:de:11:d0:7f:
3d:49:ce:d1:4c:dc:31:3b:c5:26:90:a9:03:67:1a:0c:3d:b1:
91:47:9d:7e:55:cf:b8:e0:e9:32:d4:5a:36:5e:98:f4:87:db:
86:81:04:cd:b6:f9:61:db:87:51:cc:23:60:ca:50:89:8b:a8:
6e:6f:09:cf:a3:b5:a8:c1:7c:c8:70:89:83:4f:5a:8d:50:dd:
9e:3f:a4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:22 2024 by rpki-client on console-fra.rpki-client.org