Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/480f65-f662-459f-ac27-8090832194fd/1/e3rlLBKzH8TIAvwp-_uLet8A8l4.roa
File: e3rlLBKzH8TIAvwp-_uLet8A8l4.roa (raw, json)
Hash identifier: k1QugkLGEV1wXWhnoOhvXEJ+MrESfYNY9MRqnvLSm3o=
Subject key identifier: 7B:7A:E5:2C:12:B3:1F:C4:C8:02:FC:29:FB:FB:8B:7A:DF:00:F2:5E
Certificate issuer: /CN=305d6998a47e3c7e1925caf09307ba0a991692ed
Certificate serial: 01857094EE4AE942E393AA7C64BD37B9C84B
Authority key identifier: 30:5D:69:98:A4:7E:3C:7E:19:25:CA:F0:93:07:BA:0A:99:16:92:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MF1pmKR-PH4ZJcrwkwe6CpkWku0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/480f65-f662-459f-ac27-8090832194fd/1/e3rlLBKzH8TIAvwp-_uLet8A8l4.roa
Signing time: Mon 02 Jan 2023 03:44:46 +0000
ROA not before: Mon 02 Jan 2023 03:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197886
IP address blocks: 185.244.70.0/24 maxlen: 24
185.244.69.0/24 maxlen: 24
185.244.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:ee:4a:e9:42:e3:93:aa:7c:64:bd:37:b9:c8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305d6998a47e3c7e1925caf09307ba0a991692ed
Validity
Not Before: Jan 2 03:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b7ae52c12b31fc4c802fc29fbfb8b7adf00f25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c6:86:9d:51:47:57:10:94:98:ce:6f:38:8f:
d9:73:c9:c3:77:c1:89:6d:fd:50:34:08:9e:b6:1d:
57:0b:7a:60:61:3b:8b:83:26:9e:39:2a:74:47:05:
e7:7a:5b:bb:65:ef:51:a4:77:29:7a:a7:1e:1b:41:
f8:38:c0:a8:7c:21:2e:92:20:e1:ff:36:71:a1:13:
bd:8b:97:11:9c:15:89:66:f2:ec:b9:8a:37:db:2f:
73:fb:c1:f0:e8:84:59:1d:31:77:4a:85:65:52:14:
ce:b1:85:98:26:76:1f:9f:93:59:1e:11:04:36:84:
9e:b4:57:a4:40:ad:66:9d:3e:27:9d:29:93:03:7a:
31:79:3f:d2:db:5a:94:03:fc:5b:47:d6:19:44:f4:
2f:5a:59:5a:8f:13:2f:b6:48:b9:b6:13:dc:5d:db:
ed:0e:37:8b:ec:28:8b:3e:bd:c0:cf:3b:08:fe:e5:
b4:19:47:80:0a:b5:23:5a:96:ac:0a:87:74:cf:19:
5c:5d:68:4e:95:36:e5:bf:19:19:3b:0d:33:18:dd:
bb:86:27:7e:8b:d9:91:54:55:a4:6d:82:8f:15:07:
aa:a7:f3:c3:9d:00:d1:48:c2:72:b2:27:f2:1e:ef:
47:9a:75:a4:37:e8:d7:84:be:3b:a6:2a:bd:a4:de:
75:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7A:E5:2C:12:B3:1F:C4:C8:02:FC:29:FB:FB:8B:7A:DF:00:F2:5E
X509v3 Authority Key Identifier:
keyid:30:5D:69:98:A4:7E:3C:7E:19:25:CA:F0:93:07:BA:0A:99:16:92:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MF1pmKR-PH4ZJcrwkwe6CpkWku0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480f65-f662-459f-ac27-8090832194fd/1/e3rlLBKzH8TIAvwp-_uLet8A8l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480f65-f662-459f-ac27-8090832194fd/1/MF1pmKR-PH4ZJcrwkwe6CpkWku0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.68.0-185.244.70.255
Signature Algorithm: sha256WithRSAEncryption
71:86:27:c4:95:e0:e0:c5:62:3f:fe:b0:21:6a:e6:8d:13:a3:
f1:8d:c0:48:cd:57:71:a7:3b:a7:12:44:76:44:fc:20:c3:be:
43:a6:df:a1:42:44:2c:ed:a1:3b:4b:70:6b:b7:ac:4f:b9:5c:
d6:32:73:d6:e2:97:5d:d7:ca:f2:cb:53:20:a6:53:25:d7:9b:
ff:8d:00:5f:01:34:5e:a3:c3:a6:1a:e7:47:b5:fe:d9:38:88:
4e:e5:fa:41:8b:9c:7e:de:22:04:76:ec:44:4b:24:e5:47:c7:
78:ef:d8:9f:bf:48:7a:41:4a:a6:18:dc:ff:8f:df:d0:52:d7:
73:1d:74:23:c2:ef:bc:09:41:38:19:4b:01:ba:db:f1:b4:68:
e8:fb:50:f4:ac:21:33:92:59:8c:b2:d9:50:84:84:fc:08:2f:
bf:60:40:e1:c8:ce:13:9b:86:16:6e:11:b6:a5:df:b1:c1:96:
84:c9:11:5d:aa:f3:32:36:58:c8:8e:a0:2f:43:87:df:ec:6f:
b1:f1:85:59:ca:0b:83:de:a7:0d:0b:16:b3:31:8b:d6:4d:1a:
fe:c8:e3:21:fe:16:8f:9c:65:4f:c6:2b:d0:1b:64:c0:1c:2b:
3e:e6:77:83:30:e1:d7:3a:2a:87:47:3c:d4:ca:19:bb:c2:a2:
67:2d:d9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:16 2024 by rpki-client on console-ams.rpki-client.org