Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8636a8-8bfd-4b1f-937c-5802ec394188/1/1lzTaTQ64rBja6AxGWAghalHaww.roa
File: 1lzTaTQ64rBja6AxGWAghalHaww.roa (raw, json)
Hash identifier: BWPEfhMnWiUNkLiIM2b2cIzR/yZ06yaLs6mqTBb6oME=
Subject key identifier: D6:5C:D3:69:34:3A:E2:B0:63:6B:A0:31:19:60:20:85:A9:47:6B:0C
Certificate issuer: /CN=c0dcf1f72ac79a9d029205073414ba5b2f0f60b7
Certificate serial: 08B4CC9B
Authority key identifier: C0:DC:F1:F7:2A:C7:9A:9D:02:92:05:07:34:14:BA:5B:2F:0F:60:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNzx9yrHmp0CkgUHNBS6Wy8PYLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8636a8-8bfd-4b1f-937c-5802ec394188/1/1lzTaTQ64rBja6AxGWAghalHaww.roa
Signing time: Sat 01 Jan 2022 04:00:52 +0000
ROA not before: Sat 01 Jan 2022 04:00:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41230
IP address blocks: 185.134.128.0/22 maxlen: 22
2a07:c300::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146066587 (0x8b4cc9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0dcf1f72ac79a9d029205073414ba5b2f0f60b7
Validity
Not Before: Jan 1 04:00:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d65cd369343ae2b0636ba03119602085a9476b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:32:56:b3:1f:5e:4a:21:15:12:af:4a:d2:f6:
48:d8:80:9b:1e:42:18:55:4d:de:c6:71:e9:4f:96:
2a:c0:c6:82:a4:e7:88:7e:23:1c:18:12:8c:1e:0e:
e6:44:15:1c:7e:9b:7a:ec:07:c6:9b:5f:8d:3a:f3:
1e:76:81:78:ab:6c:57:a2:4a:6a:b9:0a:c2:56:67:
b1:8e:6b:b3:2d:8e:2b:64:ad:19:fd:3e:e5:5b:4d:
d1:b5:4f:76:de:60:8b:1b:04:55:3e:ce:28:e2:0d:
f8:82:60:8a:cc:30:fa:e2:ba:42:fe:66:22:51:f4:
a2:5a:25:4f:fc:7a:39:2a:5e:75:b3:d7:97:a9:be:
e2:dd:d8:4f:34:da:8e:10:65:28:8c:df:41:1a:11:
45:f6:3f:cf:ec:92:85:ac:94:99:ef:64:08:e4:b9:
ad:8e:12:cd:78:48:f6:fd:06:0f:ce:ec:ca:ec:c9:
be:04:e4:13:a7:b0:55:82:93:27:91:d9:a0:d5:26:
d2:10:51:bb:ef:61:96:d6:5a:31:cd:2d:21:9d:cd:
30:b5:61:83:ed:10:c7:6b:5b:f7:38:6a:d8:46:6e:
64:5e:70:6f:47:9c:69:f6:6a:13:55:a6:0a:43:49:
b5:00:86:98:ca:09:72:4b:73:1e:f8:47:a6:bb:60:
b7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5C:D3:69:34:3A:E2:B0:63:6B:A0:31:19:60:20:85:A9:47:6B:0C
X509v3 Authority Key Identifier:
keyid:C0:DC:F1:F7:2A:C7:9A:9D:02:92:05:07:34:14:BA:5B:2F:0F:60:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNzx9yrHmp0CkgUHNBS6Wy8PYLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8636a8-8bfd-4b1f-937c-5802ec394188/1/1lzTaTQ64rBja6AxGWAghalHaww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8636a8-8bfd-4b1f-937c-5802ec394188/1/wNzx9yrHmp0CkgUHNBS6Wy8PYLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.128.0/22
IPv6:
2a07:c300::/29
Signature Algorithm: sha256WithRSAEncryption
5c:04:23:c4:8d:0f:82:e1:6a:2a:dc:0d:8f:c4:81:df:c2:e5:
11:ee:44:8a:10:0f:15:43:45:b6:d1:df:40:e0:21:72:58:68:
5f:c3:fd:ae:b7:17:27:16:40:ea:bb:49:9e:b7:14:a5:97:0b:
97:83:b1:28:82:df:3b:ac:16:38:77:55:95:18:0e:7e:e6:dc:
60:1a:34:f0:18:cf:9d:07:5e:0d:b2:a0:ce:4b:33:c3:c1:e1:
ad:2f:b5:60:ad:08:44:a9:7e:0d:3a:e0:30:d5:ba:6f:12:4c:
f9:3c:00:37:6e:4d:2a:5d:6e:e3:ac:90:14:d3:27:55:0a:c4:
56:53:eb:87:74:b5:7d:83:2d:82:25:cd:5c:d1:3d:86:7d:b6:
1d:21:d7:a4:7e:aa:bf:6c:da:cf:18:30:e4:32:2c:27:f7:50:
c6:d4:81:80:4c:25:1e:be:f7:45:5a:af:82:f5:ff:29:50:e0:
0a:42:b9:22:0f:51:43:ab:b0:1b:35:0f:32:16:4d:97:9d:83:
3f:64:0f:f0:97:ad:06:00:70:92:04:24:85:92:f3:48:66:dd:
59:5c:27:51:91:ca:45:16:64:b8:47:a1:cf:30:bb:10:0e:34:
16:50:ec:fe:f5:06:46:93:79:cd:ab:ae:63:dc:e8:65:b2:2e:
da:67:89:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:14 2024 by rpki-client on console-ams.rpki-client.org