Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ec2163-7d15-4746-8abb-6e367e7bf6db/1/slQeL4-BaFk8WkacZkN0LqLokFc.roa
File: slQeL4-BaFk8WkacZkN0LqLokFc.roa (raw, json)
Hash identifier: 5BLQlVzv1WKuK//niqOr/+SHb4siw6DcmvbQ9uFGYHA=
Subject key identifier: B2:54:1E:2F:8F:81:68:59:3C:5A:46:9C:66:43:74:2E:A2:E8:90:57
Certificate issuer: /CN=05285129a41cdc7291b48d35f6f033add5596506
Certificate serial: 01857094EFDF677D0EB6D5BAC43D2FD63DA3
Authority key identifier: 05:28:51:29:A4:1C:DC:72:91:B4:8D:35:F6:F0:33:AD:D5:59:65:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BShRKaQc3HKRtI019vAzrdVZZQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ec2163-7d15-4746-8abb-6e367e7bf6db/1/slQeL4-BaFk8WkacZkN0LqLokFc.roa
Signing time: Mon 02 Jan 2023 03:44:47 +0000
ROA not before: Mon 02 Jan 2023 03:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41155
IP address blocks: 185.34.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:ef:df:67:7d:0e:b6:d5:ba:c4:3d:2f:d6:3d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05285129a41cdc7291b48d35f6f033add5596506
Validity
Not Before: Jan 2 03:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2541e2f8f8168593c5a469c6643742ea2e89057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fe:ac:bd:6b:0c:b5:fc:a9:21:20:71:68:01:
f3:ef:57:9d:0b:a5:a0:6b:eb:73:74:e2:34:3e:cc:
71:43:a4:1c:f2:d8:00:07:6b:88:9f:21:9c:b9:d2:
3d:66:ac:b0:c8:80:b7:14:2a:cc:78:45:3f:a9:d5:
7b:ea:d8:74:a8:8d:49:5e:4c:12:9c:7e:8f:20:57:
7f:23:d6:a9:c5:45:f8:a4:19:00:15:67:bf:16:b8:
d6:92:3a:9a:9e:f9:dc:8c:c2:fe:00:bd:d5:84:92:
7a:be:89:e5:e3:31:95:b6:cb:a3:d9:c8:a5:15:fd:
28:5f:eb:ea:47:b9:8a:8f:8c:91:6f:c4:5e:e7:04:
d0:25:96:d7:fc:f2:49:3f:0b:04:53:1e:d0:ac:61:
85:c5:26:87:4d:fd:90:fb:23:1e:ff:ed:e2:7e:82:
90:dc:b5:0f:10:b1:2f:b6:4a:d4:79:cd:84:d0:37:
83:47:df:24:cb:ca:43:c3:2b:c8:49:cd:1a:84:d7:
df:6c:74:f1:e1:ec:f1:a7:4f:a4:f2:3d:7c:c7:20:
b0:a7:b8:50:7d:76:37:99:c2:5e:68:90:62:ec:42:
81:9d:5b:e2:47:21:4b:0c:16:a5:56:75:9b:2c:ba:
8b:e5:1d:c0:bf:0d:5c:15:b6:49:0f:2e:82:a4:bb:
2e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:54:1E:2F:8F:81:68:59:3C:5A:46:9C:66:43:74:2E:A2:E8:90:57
X509v3 Authority Key Identifier:
keyid:05:28:51:29:A4:1C:DC:72:91:B4:8D:35:F6:F0:33:AD:D5:59:65:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BShRKaQc3HKRtI019vAzrdVZZQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ec2163-7d15-4746-8abb-6e367e7bf6db/1/slQeL4-BaFk8WkacZkN0LqLokFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ec2163-7d15-4746-8abb-6e367e7bf6db/1/BShRKaQc3HKRtI019vAzrdVZZQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.103.0/24
Signature Algorithm: sha256WithRSAEncryption
73:da:fb:e3:d3:03:78:9c:f7:a2:03:58:00:87:6b:8d:fd:1a:
f1:3b:96:6b:75:a1:d2:3d:96:7b:6d:70:2d:d6:3c:52:97:ec:
91:75:ed:a0:b0:93:94:21:d9:08:a3:15:d4:b2:ae:ea:c9:7d:
07:bd:c6:99:be:f8:9a:39:b7:6b:77:d3:ff:8d:45:e8:5d:9f:
4d:9a:4d:8e:01:4a:d4:e4:9d:6d:93:bd:2c:84:a6:16:d0:d2:
e9:2a:ec:53:83:00:bd:0a:4e:3d:94:f1:6b:1c:d3:dd:e8:5c:
6e:32:4d:23:0d:b1:3b:71:2b:35:7d:8e:03:07:43:d3:db:05:
d4:7a:fa:e7:1a:a6:58:9c:cc:49:87:c2:0d:59:f0:c4:e0:ab:
cd:2d:a6:e2:99:c5:86:26:a0:b1:f8:fd:f3:ba:fd:76:6d:af:
37:5a:77:29:f0:b1:bf:c2:33:b7:56:0f:6f:64:8a:29:35:02:
6b:94:1a:45:9d:ca:06:d1:ea:54:db:18:dd:e7:ec:af:99:96:
a9:9d:4c:b5:01:83:18:15:dc:14:97:a3:0c:2a:33:ad:77:5f:
11:e0:9e:1f:4b:3d:a1:d8:0f:50:16:80:34:4d:a8:32:51:2d:
ee:6c:54:9e:35:99:ea:fc:d0:7f:b5:5f:cc:65:de:d3:e9:e6:
8a:7d:a8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 6 14:55:50 2023 by rpki-client on console-ams.rpki-client.org