Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f3476e-9f86-4d2c-9c75-d68898b9a129/1/_PckuG6MST1wqGGYo5_aW12JnX0.roa
File: _PckuG6MST1wqGGYo5_aW12JnX0.roa (raw, json)
Hash identifier: rte/yGhlUiuCHXTLLqw44ttQw6wjZgMyZqB9oOmneKU=
Subject key identifier: FC:F7:24:B8:6E:8C:49:3D:70:A8:61:98:A3:9F:DA:5B:5D:89:9D:7D
Certificate issuer: /CN=e2b966f1c18b8ef78b0c3bdbc4dd47f6740b0a1e
Certificate serial: 018CC34913FB6E166C7FC1EC094E2396C743
Authority key identifier: E2:B9:66:F1:C1:8B:8E:F7:8B:0C:3B:DB:C4:DD:47:F6:74:0B:0A:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rlm8cGLjveLDDvbxN1H9nQLCh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f3476e-9f86-4d2c-9c75-d68898b9a129/1/_PckuG6MST1wqGGYo5_aW12JnX0.roa
Signing time: Mon 01 Jan 2024 04:29:55 +0000
ROA not before: Mon 01 Jan 2024 04:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212315
IP address blocks: 185.198.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:13:fb:6e:16:6c:7f:c1:ec:09:4e:23:96:c7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b966f1c18b8ef78b0c3bdbc4dd47f6740b0a1e
Validity
Not Before: Jan 1 04:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcf724b86e8c493d70a86198a39fda5b5d899d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a6:97:67:0c:7e:e4:be:a4:c6:55:02:c4:dc:
f4:69:93:ad:de:3f:95:00:91:ad:a1:f3:26:b3:c0:
f7:6f:35:08:09:8d:42:60:a6:25:72:38:f4:8f:a8:
63:0d:a1:89:4f:f1:68:66:44:55:d4:2d:f2:10:a6:
e9:98:73:1f:f7:08:e5:01:67:12:dc:da:e8:df:a9:
55:ff:ea:8d:f3:c6:c8:5b:79:eb:f1:4b:07:c7:de:
1c:9b:72:db:d0:50:51:e7:b3:71:e9:91:42:d3:a3:
d1:9a:ba:29:fa:46:4e:dd:4e:25:ff:1f:51:a9:76:
44:15:c8:37:9c:ad:46:d5:84:15:e7:83:90:a6:be:
ac:fe:79:df:12:c0:67:a8:53:ff:d9:95:90:dd:0a:
6b:3e:b4:52:37:bd:f7:ec:8c:c1:42:d4:15:ff:07:
8e:9a:f8:6d:7c:60:f1:80:34:0b:9a:40:e1:87:b4:
2f:b9:bc:59:a0:a2:e3:18:ae:df:81:10:0a:46:e6:
1a:d3:35:5b:0a:9e:bc:c8:bd:98:a4:1e:4f:d6:e3:
7c:db:6f:e2:73:4b:66:77:c7:4e:4d:46:49:4e:cc:
fa:19:4b:3a:97:21:d1:7d:15:c4:de:0c:45:e6:d6:
ea:99:61:66:79:77:c2:59:cf:83:1e:0c:fd:3f:ba:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F7:24:B8:6E:8C:49:3D:70:A8:61:98:A3:9F:DA:5B:5D:89:9D:7D
X509v3 Authority Key Identifier:
keyid:E2:B9:66:F1:C1:8B:8E:F7:8B:0C:3B:DB:C4:DD:47:F6:74:0B:0A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rlm8cGLjveLDDvbxN1H9nQLCh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f3476e-9f86-4d2c-9c75-d68898b9a129/1/_PckuG6MST1wqGGYo5_aW12JnX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f3476e-9f86-4d2c-9c75-d68898b9a129/1/4rlm8cGLjveLDDvbxN1H9nQLCh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.15.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:a6:93:ee:d1:ce:62:d8:33:84:5f:b1:3d:03:e0:ad:16:c2:
72:6e:fb:43:33:ad:8c:b4:c9:d2:64:d8:33:12:86:66:05:11:
42:72:57:37:a3:3a:17:e3:b2:04:67:2a:1b:5a:b0:19:a9:4c:
5e:84:c2:8e:f5:73:60:02:96:99:31:94:16:bf:1d:0e:7e:27:
c4:17:79:7e:1b:76:cd:80:dc:8f:7b:7c:0f:a7:a2:7e:7d:a9:
c7:28:d1:bb:74:28:85:04:f0:7d:78:55:20:d7:32:7a:71:0e:
8c:61:e6:65:52:ab:74:3b:d8:3f:14:36:d1:8b:57:61:25:19:
0d:c0:ba:e4:59:df:09:0d:6b:17:dc:8d:d1:b5:78:e0:11:74:
c7:d2:81:8f:a2:a1:9d:f9:9a:ab:d0:4c:5c:8b:8d:97:f7:82:
e2:cb:3e:ad:6b:08:8c:57:0f:41:73:6d:5f:c7:9f:31:2d:71:
d9:be:2d:12:cd:73:c5:cb:9f:36:a1:5c:a8:64:3c:4e:76:11:
88:9a:85:1a:24:62:b7:41:c8:56:53:47:70:9d:b0:61:c3:d0:
f5:b5:8b:d9:75:64:95:b9:62:09:89:42:25:3d:bf:96:ca:2d:
8d:22:4f:77:da:70:3e:c1:a0:01:7b:70:7f:ec:0f:e1:48:a4:
a0:db:63:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 08:57:54 2024 by rpki-client on console-ams.rpki-client.org