Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0482c8-6fbf-481c-b5cb-a13b2f116521/1/_kI1KhC7p0Um5Mk_2kokNCM5iiY.roa
File: _kI1KhC7p0Um5Mk_2kokNCM5iiY.roa (raw, json)
Hash identifier: MQw/mp2vc8pHZz+rmM+ns3EwQ3LxH+wuZnfiF+uweVA=
Subject key identifier: FE:42:35:2A:10:BB:A7:45:26:E4:C9:3F:DA:4A:24:34:23:39:8A:26
Certificate issuer: /CN=9e888901024e8c6b27174da9e03dc8a09dcb8833
Certificate serial: 018A0DDF3088BC6ED0B7845A70C0BA468018
Authority key identifier: 9E:88:89:01:02:4E:8C:6B:27:17:4D:A9:E0:3D:C8:A0:9D:CB:88:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noiJAQJOjGsnF02p4D3IoJ3LiDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0482c8-6fbf-481c-b5cb-a13b2f116521/1/_kI1KhC7p0Um5Mk_2kokNCM5iiY.roa
Signing time: Sat 19 Aug 2023 12:57:25 +0000
ROA not before: Sat 19 Aug 2023 12:57:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.248.57.0/24 maxlen: 24
185.248.58.0/24 maxlen: 24
185.248.56.0/24 maxlen: 24
185.248.56.0/22 maxlen: 24
185.248.59.0/24 maxlen: 24
2a0d:2bc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0d:df:30:88:bc:6e:d0:b7:84:5a:70:c0:ba:46:80:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e888901024e8c6b27174da9e03dc8a09dcb8833
Validity
Not Before: Aug 19 12:57:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe42352a10bba74526e4c93fda4a243423398a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:06:9d:53:ba:11:9e:c9:41:5f:72:c6:ad:b6:
cc:3c:83:9a:e7:f0:7b:be:b0:be:c4:e3:da:1c:48:
43:28:31:51:2d:5a:c1:10:2c:a3:27:94:66:29:38:
68:b4:9f:5b:fe:bd:33:d1:ea:5c:91:41:76:9b:70:
83:19:ed:3a:95:a5:5a:c4:67:df:a0:aa:d1:24:b0:
1c:07:94:78:42:77:f3:cc:ed:06:f2:eb:4c:3e:3d:
d0:20:20:05:dc:9e:c3:60:d4:16:bb:ca:ba:1a:57:
8a:a9:fa:95:1f:97:01:b3:85:63:7d:9d:40:14:ce:
0c:9c:e2:a0:8b:60:45:40:01:af:a4:ba:e8:19:7d:
ad:57:ef:6e:a5:ab:99:5f:c2:13:59:ab:a8:09:50:
57:90:0e:04:4b:01:97:23:46:cb:df:85:6a:fd:e6:
15:e8:fe:a1:9a:7e:d0:da:d3:ef:95:8c:d9:0a:11:
01:33:76:84:18:a8:86:d1:5a:2a:fc:f3:a1:33:63:
98:c6:d4:2d:69:cb:45:6c:17:5c:4f:51:e1:58:5b:
b7:63:62:3f:39:20:97:eb:ea:7d:28:c4:32:00:70:
a3:0e:4b:66:db:83:4b:99:ea:0b:33:eb:73:c0:92:
33:4f:07:66:a6:24:5a:c4:53:9c:09:5d:d6:18:f0:
2a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:42:35:2A:10:BB:A7:45:26:E4:C9:3F:DA:4A:24:34:23:39:8A:26
X509v3 Authority Key Identifier:
keyid:9E:88:89:01:02:4E:8C:6B:27:17:4D:A9:E0:3D:C8:A0:9D:CB:88:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noiJAQJOjGsnF02p4D3IoJ3LiDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0482c8-6fbf-481c-b5cb-a13b2f116521/1/_kI1KhC7p0Um5Mk_2kokNCM5iiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0482c8-6fbf-481c-b5cb-a13b2f116521/1/noiJAQJOjGsnF02p4D3IoJ3LiDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.56.0/22
IPv6:
2a0d:2bc0::/48
Signature Algorithm: sha256WithRSAEncryption
07:b3:ed:71:31:5c:1a:a7:57:49:2d:6e:a2:10:ff:ad:ba:ae:
0f:8b:0a:7c:35:16:c6:00:8d:53:07:4d:c0:b5:51:28:5d:ea:
b6:3d:b7:b2:79:ae:33:e4:ba:b6:6e:54:c6:28:12:ad:22:69:
f2:6c:75:9f:35:c7:c7:97:9c:c0:0f:9d:cd:38:98:9b:c0:ac:
9c:c4:53:25:65:59:8a:38:75:b6:a4:44:9c:26:b5:05:c1:53:
56:c6:65:fb:f6:4c:8a:24:fc:91:75:54:6b:a4:83:ea:d3:7f:
75:fc:1b:d2:48:2b:eb:ca:56:47:17:bb:7d:a7:e8:50:61:49:
03:da:c5:12:a3:b1:33:4d:9f:db:4c:3b:2a:c3:ce:36:ec:d6:
e8:3f:a4:27:1d:d3:fe:66:e6:a2:d4:2c:60:af:88:19:2e:4b:
05:1e:30:10:5b:ac:9a:ae:67:c5:97:2b:df:5d:5d:f7:5b:65:
d6:6b:01:09:cc:79:6f:2b:34:e7:df:0e:98:0a:6f:77:be:99:
81:a8:b4:ba:b4:93:27:48:95:f5:71:ec:1c:91:6a:de:5f:52:
39:3c:ed:29:37:75:03:5f:10:51:50:94:55:fc:5e:d2:3c:e6:
85:2e:a1:22:62:0d:4d:4c:25:8b:74:2b:75:77:f6:c6:a2:f1:
a7:6a:a0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:31 2024 by rpki-client on console-ams.rpki-client.org