Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/7e80c0-7249-4b07-9c5b-b6194acf1c40/1/A1ouHYiTD5xMXFJXUY9k_x3uniY.roa
File: A1ouHYiTD5xMXFJXUY9k_x3uniY.roa (raw, json)
Hash identifier: pVfeg1etyfqW4Ct1oNQEuxE/I36mlzluGM9PaR7I7Xs=
Subject key identifier: 03:5A:2E:1D:88:93:0F:9C:4C:5C:52:57:51:8F:64:FF:1D:EE:9E:26
Certificate issuer: /CN=458486f116b70097fe22479027e1553ca7db73af
Certificate serial: 0F4C0E84
Authority key identifier: 45:84:86:F1:16:B7:00:97:FE:22:47:90:27:E1:55:3C:A7:DB:73:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYSG8Ra3AJf-IkeQJ-FVPKfbc68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/7e80c0-7249-4b07-9c5b-b6194acf1c40/1/A1ouHYiTD5xMXFJXUY9k_x3uniY.roa
Signing time: Sat 01 Jan 2022 01:01:53 +0000
ROA not before: Sat 01 Jan 2022 01:01:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.131.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256642692 (0xf4c0e84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458486f116b70097fe22479027e1553ca7db73af
Validity
Not Before: Jan 1 01:01:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=035a2e1d88930f9c4c5c5257518f64ff1dee9e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:56:57:95:b6:69:a8:6f:4c:3d:4d:1d:f2:cf:
ed:97:94:41:47:96:db:02:90:1d:26:7e:2e:d9:5e:
25:23:b5:66:85:da:0c:18:cf:f3:bb:a2:8a:cd:f6:
21:0f:12:ea:a9:40:5e:03:55:f0:bd:f9:86:33:bd:
e2:f5:58:cb:02:f5:29:a0:b5:f6:2c:b2:88:9d:5e:
ef:b5:f6:26:98:14:5c:6e:fb:d9:46:4a:87:94:1a:
5f:ce:7a:12:4b:b4:96:d9:ed:3a:3c:6e:a2:a0:ca:
6d:c7:4d:bc:db:58:97:86:52:30:61:a8:16:87:34:
10:d0:43:a2:78:fc:2a:e9:54:c6:c3:fc:00:c8:11:
b3:09:35:c1:c4:94:26:c7:c2:04:16:86:42:e6:1a:
a2:76:59:7f:21:4b:7f:c7:2d:db:71:8a:2b:78:a0:
a2:72:55:cf:26:21:16:3e:c7:7e:74:47:fd:b3:89:
cf:26:ac:0a:ad:d0:15:ae:4e:33:0b:64:a4:f4:34:
d2:b7:3a:63:8d:84:bc:91:5f:15:a0:5a:bd:64:d2:
2d:a8:ca:a0:18:f8:fd:73:d7:92:45:92:77:cc:ce:
83:13:08:b8:99:70:27:cc:24:64:09:5c:56:16:47:
a9:88:c8:3c:59:3d:18:97:b5:2f:bd:81:4a:0c:b1:
a2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5A:2E:1D:88:93:0F:9C:4C:5C:52:57:51:8F:64:FF:1D:EE:9E:26
X509v3 Authority Key Identifier:
keyid:45:84:86:F1:16:B7:00:97:FE:22:47:90:27:E1:55:3C:A7:DB:73:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYSG8Ra3AJf-IkeQJ-FVPKfbc68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7e80c0-7249-4b07-9c5b-b6194acf1c40/1/A1ouHYiTD5xMXFJXUY9k_x3uniY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7e80c0-7249-4b07-9c5b-b6194acf1c40/1/RYSG8Ra3AJf-IkeQJ-FVPKfbc68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.188.0/22
Signature Algorithm: sha256WithRSAEncryption
14:ad:36:cc:a5:79:be:da:1f:51:e2:98:86:fb:7c:7b:1d:df:
37:8c:22:51:df:71:01:08:6f:df:eb:35:57:3d:7f:02:f1:98:
c8:76:96:81:58:15:a7:32:49:83:80:ba:63:25:3a:53:b2:0b:
85:9b:78:d8:c5:75:e4:b2:e1:bb:08:b7:ec:f7:69:e6:06:79:
f3:87:18:62:03:82:61:75:db:f1:f7:68:74:2a:47:8e:a9:3b:
85:82:6e:c6:87:cf:af:5b:9f:88:69:1a:33:c2:d0:bc:55:99:
29:af:31:3e:40:0b:6b:25:71:aa:15:b6:d7:6f:98:5b:dc:e6:
a9:b3:94:e7:27:8e:a3:ac:d7:52:cb:27:26:5c:d4:81:d1:7b:
f1:ea:04:40:2d:f1:b5:4f:ce:1a:ef:ee:5e:f5:db:0a:fd:00:
30:bf:8d:d0:bb:e1:14:b7:02:70:7d:b2:a4:4e:6d:4f:8e:0d:
92:ba:15:48:86:41:e2:43:d7:7e:b9:94:58:83:f9:4f:ad:42:
ad:18:c9:eb:c6:9f:e5:0c:da:f5:db:0c:e0:34:15:ef:d2:c7:
40:03:5c:ab:61:9f:42:cf:c6:7b:e9:1d:f7:af:7c:1e:6b:f5:
16:21:6c:dc:9b:7c:72:0a:a4:56:95:1a:af:7a:47:3d:db:f4:
2d:53:92:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:47 2024 by rpki-client on console-fra.rpki-client.org