Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/7G0z41AF0wvMRX_-qQVMxg1ogUw.roa
File: 7G0z41AF0wvMRX_-qQVMxg1ogUw.roa (raw, json)
Hash identifier: F1Nt0FcfAI0wJB6CY+v1lYpByTvnk3GeMID9WoD/gQU=
Subject key identifier: EC:6D:33:E3:50:05:D3:0B:CC:45:7F:FE:A9:05:4C:C6:0D:68:81:4C
Certificate issuer: /CN=4354d70a988e257ec57c3408159dc8b504f5723a
Certificate serial: 081D1F21
Authority key identifier: 43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/7G0z41AF0wvMRX_-qQVMxg1ogUw.roa
Signing time: Sat 01 Jan 2022 15:58:35 +0000
ROA not before: Sat 01 Jan 2022 15:58:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50113
IP address blocks: 185.232.170.0/24 maxlen: 24
185.232.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136126241 (0x81d1f21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4354d70a988e257ec57c3408159dc8b504f5723a
Validity
Not Before: Jan 1 15:58:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec6d33e35005d30bcc457ffea9054cc60d68814c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:61:f4:87:8a:27:ae:9a:9b:48:e6:66:12:3a:
b0:41:e3:f5:3b:d9:4f:5d:7f:66:d1:63:be:75:8b:
b0:7e:67:fe:35:bf:98:6c:ab:99:e1:f4:6b:dd:46:
3f:33:7d:2a:ca:35:c6:63:e0:97:99:32:f5:fd:04:
9d:6d:a6:84:6e:fb:2d:f7:d9:68:aa:d3:d5:f3:18:
cf:f3:2c:a0:47:a8:e0:65:5b:e8:8f:b5:30:4e:f7:
5a:c0:1c:f0:b5:32:1e:12:e0:ef:a0:84:1c:45:91:
9f:6b:36:16:a6:33:b1:5a:83:8d:41:62:df:fe:38:
1e:e7:f2:98:7f:ba:d5:e1:75:f2:15:be:ef:d8:c5:
12:2a:0b:af:f2:a7:9c:37:90:30:5c:e2:fe:aa:bf:
ad:f8:4d:15:fb:ef:28:ae:f5:97:7a:94:83:99:92:
a8:be:e0:c0:11:df:7b:c6:56:a4:60:b7:3e:0f:da:
36:c1:60:21:d5:1a:8b:87:c8:a0:8a:33:1c:ae:eb:
46:db:6b:b3:d3:33:df:d3:b8:2f:81:20:b8:90:72:
ab:18:62:b5:41:d2:91:f7:3f:09:51:b8:17:20:1c:
8b:26:5e:bc:86:41:1c:be:cd:f0:5d:1b:df:de:b0:
ac:42:94:8b:4a:56:c6:44:2b:bd:82:f8:55:33:9a:
a4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6D:33:E3:50:05:D3:0B:CC:45:7F:FE:A9:05:4C:C6:0D:68:81:4C
X509v3 Authority Key Identifier:
keyid:43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/7G0z41AF0wvMRX_-qQVMxg1ogUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.170.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:ea:54:92:82:10:e5:48:12:57:d5:42:65:33:59:5b:1d:74:
e7:d0:59:34:a6:ff:24:4f:a5:17:13:d0:46:13:14:87:48:c9:
a5:3e:2a:cf:7c:9e:75:bd:6b:4e:16:3b:c2:98:b2:c5:7c:25:
ab:94:9f:1d:97:db:f1:1d:ee:b7:4d:b1:95:ae:9a:f5:55:d1:
78:d5:f6:8b:dc:a6:77:c7:01:79:36:81:db:43:e1:f4:66:91:
c8:6b:71:c2:23:7f:4b:77:35:aa:af:5f:09:21:7d:25:bc:6c:
89:e7:c2:f7:2a:55:d0:09:35:19:e7:7c:e5:c6:a7:17:c6:ec:
7d:11:40:fb:77:55:13:73:f3:19:06:7b:ae:20:e6:15:be:fe:
7c:e4:2d:d9:c7:41:68:8b:61:b3:30:97:ae:c5:d0:2f:5e:26:
9f:53:da:95:e5:57:c1:b0:ae:3b:eb:3d:b6:21:9d:ec:de:fc:
ee:6d:ed:59:b1:dd:ab:b3:bf:70:79:53:4d:26:ce:a2:ee:80:
09:34:8b:f8:da:d4:99:e0:e4:f3:b7:f5:06:fb:10:4d:cf:02:
b3:9a:e0:43:35:77:b3:84:70:b0:6e:84:39:8f:80:fc:f8:57:
05:41:f2:c3:6b:fd:2d:50:2c:26:01:7e:be:4a:4a:f2:d2:36:
ca:25:f5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:57 2024 by rpki-client on console-fra.rpki-client.org