Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c95e71-43f2-4b0a-9aee-5a3e823c27a6/1/dDuXYiGDtHXT_C-AIy8kRSawrAc.roa
File: dDuXYiGDtHXT_C-AIy8kRSawrAc.roa (raw, json)
Hash identifier: w9WNUdqdQMhj2/Qr4hxgC390I0Kf2qtF4F+iiZLm494=
Subject key identifier: 74:3B:97:62:21:83:B4:75:D3:FC:2F:80:23:2F:24:45:26:B0:AC:07
Certificate issuer: /CN=d075a52cde7d4c65066f1ddf458eaefaa6e76d40
Certificate serial: 01836A53980EB902ABA0975C08AB6DF5B6F8
Authority key identifier: D0:75:A5:2C:DE:7D:4C:65:06:6F:1D:DF:45:8E:AE:FA:A6:E7:6D:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HWlLN59TGUGbx3fRY6u-qbnbUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c95e71-43f2-4b0a-9aee-5a3e823c27a6/1/dDuXYiGDtHXT_C-AIy8kRSawrAc.roa
Signing time: Fri 23 Sep 2022 12:30:06 +0000
ROA not before: Fri 23 Sep 2022 12:30:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47886
IP address blocks: 185.236.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6a:53:98:0e:b9:02:ab:a0:97:5c:08:ab:6d:f5:b6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d075a52cde7d4c65066f1ddf458eaefaa6e76d40
Validity
Not Before: Sep 23 12:30:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=743b97622183b475d3fc2f80232f244526b0ac07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:c6:fc:27:dd:3e:1e:a6:c9:f0:c5:8a:34:
4a:48:dc:b3:64:54:79:5f:b1:08:c4:76:5b:f8:ff:
67:05:04:c9:b0:bb:d7:38:e5:47:2c:f5:a3:a6:10:
d5:04:c9:15:a6:40:df:e9:40:0d:c0:6f:6b:79:35:
3a:32:86:69:1d:72:e7:c6:d2:e8:e1:ec:17:30:23:
12:60:a7:12:9f:3c:0a:cd:24:d6:b5:e3:af:56:6f:
73:83:56:30:01:44:bc:57:42:76:45:bf:0e:15:52:
b9:29:97:41:82:f6:03:a8:1c:22:e8:55:92:a4:e7:
02:45:71:f6:c3:83:3c:a5:fe:85:09:1d:02:e4:1e:
47:02:6e:e5:d3:f2:35:1b:f7:42:97:c5:18:d1:d7:
ed:08:2c:3d:bd:b5:4a:ba:ff:63:e8:20:98:46:cb:
e2:a4:c6:1b:03:ce:d5:3a:53:a5:fa:65:19:e4:3c:
ce:0f:7a:a0:f4:6f:71:d2:bf:c0:d9:22:41:e7:51:
8c:b1:eb:9e:31:ad:8f:95:a0:54:49:aa:c4:ca:45:
55:da:e1:85:bd:93:68:8d:31:32:cc:c5:55:a9:3a:
d5:f0:24:db:3e:50:50:f6:a2:44:80:99:61:ab:9d:
cc:4d:ca:87:f8:b5:ca:7c:57:ea:5f:0c:00:e7:d4:
5d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3B:97:62:21:83:B4:75:D3:FC:2F:80:23:2F:24:45:26:B0:AC:07
X509v3 Authority Key Identifier:
keyid:D0:75:A5:2C:DE:7D:4C:65:06:6F:1D:DF:45:8E:AE:FA:A6:E7:6D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HWlLN59TGUGbx3fRY6u-qbnbUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c95e71-43f2-4b0a-9aee-5a3e823c27a6/1/dDuXYiGDtHXT_C-AIy8kRSawrAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c95e71-43f2-4b0a-9aee-5a3e823c27a6/1/0HWlLN59TGUGbx3fRY6u-qbnbUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.16.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:db:da:23:87:92:6f:2e:07:a5:c5:aa:96:cd:ef:8d:82:eb:
6e:ba:f9:65:76:b4:cb:41:51:3c:c6:9c:03:0a:53:e4:e5:98:
83:38:3e:25:3d:44:5d:12:db:9a:8f:a3:95:6a:b2:c1:2d:ab:
db:f0:60:3c:be:5e:09:82:0c:ce:66:b5:f3:71:78:c8:0a:4b:
8d:8c:61:2d:74:0f:aa:ff:77:3a:21:ac:e5:44:87:79:eb:45:
e5:5a:79:4d:a8:aa:5e:26:33:c7:73:f8:3e:8a:37:de:ea:d4:
01:dd:25:61:2f:5c:38:4e:ea:7d:9d:93:5e:33:01:82:03:be:
fc:99:0e:a8:aa:ec:71:c3:2a:6e:d9:54:49:62:c4:86:53:fc:
2b:e6:ab:b6:40:e2:5b:32:89:53:7c:9e:d5:b6:1b:04:ee:a3:
69:f4:68:2d:b2:71:7b:5e:3a:9f:60:60:56:d0:a3:fa:f7:cd:
2f:30:65:67:6a:b1:4e:0c:12:c6:f5:cd:32:ee:19:ed:29:10:
86:8b:0f:d2:74:5b:8b:b9:af:cf:97:7b:9f:51:11:5c:d5:b9:
cc:6e:db:12:48:7c:2f:4e:ae:af:70:30:8f:aa:61:87:3b:e2:
43:51:d4:67:bd:85:56:98:3d:6d:ca:fc:b1:2b:71:e0:c4:2e:
c0:9d:e1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:50 2024 by rpki-client on console-ams.rpki-client.org