Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/20b85b-98b1-4169-b71a-61a1bdf24b13/1/Ir0UcI2D37pWamNeC2zCredwKG4.roa
File: Ir0UcI2D37pWamNeC2zCredwKG4.roa (raw, json)
Hash identifier: sVS4U7vXPUWA0muhVbMpnZOoEoC7zpcz6/qC+0oivEo=
Subject key identifier: 22:BD:14:70:8D:83:DF:BA:56:6A:63:5E:0B:6C:C2:AD:E7:70:28:6E
Certificate issuer: /CN=d344e0134bbfd2e4c681d5995efe42748c4458f7
Certificate serial: 018CC86F0E220AF3BCF9CF7CE38913240ACD
Authority key identifier: D3:44:E0:13:4B:BF:D2:E4:C6:81:D5:99:5E:FE:42:74:8C:44:58:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00TgE0u_0uTGgdWZXv5CdIxEWPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/20b85b-98b1-4169-b71a-61a1bdf24b13/1/Ir0UcI2D37pWamNeC2zCredwKG4.roa
Signing time: Tue 02 Jan 2024 04:29:30 +0000
ROA not before: Tue 02 Jan 2024 04:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211982
IP address blocks: 185.231.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:0e:22:0a:f3:bc:f9:cf:7c:e3:89:13:24:0a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d344e0134bbfd2e4c681d5995efe42748c4458f7
Validity
Not Before: Jan 2 04:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22bd14708d83dfba566a635e0b6cc2ade770286e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:05:d1:ec:e9:24:c4:48:3d:dd:5a:71:88:6c:
f5:85:f8:80:52:db:c7:68:e3:d8:73:17:34:f0:49:
d9:03:12:7c:5e:80:1e:e0:5d:ed:cb:af:4d:fa:de:
a5:c7:22:48:24:eb:e2:8b:9d:67:57:e9:7d:19:1a:
b7:30:5d:4c:cc:be:f3:c3:26:69:99:ea:17:29:37:
6b:0b:d9:96:4f:54:23:6a:ae:86:81:11:16:b9:e4:
15:ae:64:f0:2b:01:92:db:02:9c:31:0d:e6:d3:c8:
67:36:08:e9:51:65:7b:bc:ed:d4:99:ab:a9:14:cd:
3e:19:52:50:56:2a:a7:e6:40:92:25:e2:a7:2d:93:
4c:08:fa:31:72:bf:3d:46:d4:a1:c0:90:ee:7b:04:
2e:a0:05:5f:fc:d9:e0:e6:2e:59:e1:e6:d8:64:f0:
f1:52:91:2e:a4:2f:50:04:4f:62:6f:10:9b:3a:80:
12:db:03:ea:f9:32:98:fa:ba:c3:77:a2:e5:ff:f7:
bd:82:82:6b:b8:11:6d:e1:8d:53:e7:44:85:e2:6f:
52:9d:81:aa:a1:09:ff:5f:e2:62:b2:ca:07:09:65:
e3:ff:62:e3:28:cf:01:11:77:a3:08:3e:b7:14:5e:
82:c7:93:7c:98:70:a9:cf:2c:e1:4f:e0:fa:85:6e:
b0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BD:14:70:8D:83:DF:BA:56:6A:63:5E:0B:6C:C2:AD:E7:70:28:6E
X509v3 Authority Key Identifier:
keyid:D3:44:E0:13:4B:BF:D2:E4:C6:81:D5:99:5E:FE:42:74:8C:44:58:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00TgE0u_0uTGgdWZXv5CdIxEWPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/20b85b-98b1-4169-b71a-61a1bdf24b13/1/Ir0UcI2D37pWamNeC2zCredwKG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/20b85b-98b1-4169-b71a-61a1bdf24b13/1/00TgE0u_0uTGgdWZXv5CdIxEWPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.235.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:ca:78:b4:8a:be:af:a3:06:c5:f6:02:30:ba:b8:78:98:90:
ab:e3:44:b1:79:4f:17:aa:4c:2d:06:4a:ca:3a:e8:be:bf:f4:
74:bf:d2:37:be:5c:18:f8:19:2c:41:22:86:56:a2:1c:03:50:
9c:a8:cb:d0:89:a2:fd:67:20:6a:d7:c3:d5:c5:be:21:2a:21:
99:66:7f:a8:35:76:ae:b7:48:75:cd:5f:1e:bd:9d:ec:d6:38:
6b:52:0d:e0:fd:6b:55:7b:87:2d:c1:4d:05:a0:fd:ad:ba:d3:
9f:5c:f3:5b:84:ae:d5:7f:4e:1a:08:fd:cc:87:f0:81:88:7f:
03:0b:88:8c:9e:75:5a:23:bd:55:8b:1c:dc:d4:f4:62:d0:38:
4d:88:63:e2:fc:86:5a:f2:00:8b:b5:66:43:f8:9d:34:4a:ce:
3c:fb:74:3a:5f:ca:45:27:59:a0:92:3a:c5:41:5a:13:f1:bf:
bf:0b:fb:f4:a1:f0:4b:40:35:2c:a2:76:79:ff:c9:57:93:ac:
84:75:6b:75:0c:db:9c:36:b1:17:ba:9a:72:03:63:d9:3d:2b:
65:eb:7b:5a:d8:dd:ca:10:6e:ce:3f:1a:de:70:00:0b:12:04:
40:e9:02:c3:38:57:e5:c2:9b:e0:2b:5a:63:62:69:f6:9c:64:
a6:3f:7b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 19 17:01:39 2024 by rpki-client on console-ams.rpki-client.org