Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/MwUNV8aYbY9A8LzwSO9ZJAMMlQk.roa
File: MwUNV8aYbY9A8LzwSO9ZJAMMlQk.roa (raw, json)
Hash identifier: LOkO0ySU2KPdrYUDE/bCtX5fmwy6qknc6hYwjtoFi9M=
Subject key identifier: 33:05:0D:57:C6:98:6D:8F:40:F0:BC:F0:48:EF:59:24:03:0C:95:09
Certificate issuer: /CN=4354d70a988e257ec57c3408159dc8b504f5723a
Certificate serial: 081C5147
Authority key identifier: 43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/MwUNV8aYbY9A8LzwSO9ZJAMMlQk.roa
Signing time: Sat 01 Jan 2022 15:58:34 +0000
ROA not before: Sat 01 Jan 2022 15:58:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42922
IP address blocks: 185.252.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136073543 (0x81c5147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4354d70a988e257ec57c3408159dc8b504f5723a
Validity
Not Before: Jan 1 15:58:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33050d57c6986d8f40f0bcf048ef5924030c9509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:74:97:e4:3d:cc:f9:eb:9c:b2:67:c8:76:
e7:a0:55:33:46:73:24:23:52:ce:39:b1:02:d1:66:
38:da:48:ce:23:e6:01:77:5b:ee:a3:f2:a8:a5:1d:
f3:aa:88:1f:d8:ac:d9:f9:8f:04:1a:47:d3:fa:5b:
43:54:24:b0:de:84:d4:1b:d3:c7:87:de:67:d4:80:
bf:b6:2f:d2:53:6e:3d:cb:60:02:45:d6:0e:54:8c:
f8:61:e0:7f:77:c4:08:8b:d2:ab:d3:ba:8c:61:1e:
c6:9c:0c:a6:49:f8:59:91:af:44:bd:16:15:14:f8:
6e:68:cf:b9:f0:65:8f:74:7a:d5:61:c9:a2:ee:f4:
a8:10:62:18:15:5e:e4:31:5e:f7:1b:54:f3:bf:dc:
d2:5b:16:92:5f:86:b5:47:70:05:54:aa:c3:2f:6b:
4f:09:bf:c6:95:49:f3:67:13:a9:00:20:2c:02:bd:
45:2f:1e:08:05:be:03:c4:f9:62:fd:b3:fb:0b:13:
94:7b:31:b2:8d:db:da:90:35:a4:89:14:94:48:da:
80:b6:e3:e1:f4:e0:fa:60:ce:6a:eb:d0:04:63:84:
c4:42:90:71:7c:72:6a:5d:ec:64:eb:b0:9c:2a:97:
eb:73:1c:ba:34:4f:9c:2a:1f:af:5d:15:40:c9:05:
df:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:05:0D:57:C6:98:6D:8F:40:F0:BC:F0:48:EF:59:24:03:0C:95:09
X509v3 Authority Key Identifier:
keyid:43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/MwUNV8aYbY9A8LzwSO9ZJAMMlQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.145.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:03:e7:02:8e:ed:36:ca:1c:75:0e:f6:da:60:af:f5:1c:b9:
4a:9c:72:a3:76:40:2a:41:b0:84:57:9f:9b:79:4f:1d:79:da:
91:b6:0d:1d:18:fb:80:1f:9c:91:4d:1b:3d:62:49:7b:f6:d6:
5b:5b:76:2a:a7:34:47:54:0e:0d:68:b3:0c:ea:ae:be:2a:15:
bf:9f:30:32:32:c7:e0:64:43:f5:52:9f:6a:ab:c0:ea:9b:4b:
18:0c:f0:cc:d1:f8:89:09:38:36:d0:1e:07:61:d6:2a:48:4f:
93:ea:f3:d0:93:c7:bf:02:61:fe:f0:65:c1:9f:d5:34:c9:db:
d7:61:93:7e:7e:d2:df:7e:8b:2a:39:6d:ea:9f:d9:08:b1:06:
04:12:90:63:e3:88:11:c4:b7:27:5d:0a:e3:7b:1f:ba:96:d0:
3c:97:d6:53:bb:67:bc:67:e8:2c:ff:98:8d:10:a7:a4:cb:95:
07:cc:02:0b:8d:be:4e:b7:f8:b9:bb:29:a7:18:c3:2d:54:e4:
13:a2:a4:1e:8e:91:66:5e:27:ff:e1:04:f3:f1:70:b5:38:70:
b8:15:65:fd:b3:49:98:70:d9:bb:9c:38:3d:c7:c0:fe:9f:c6:
44:bc:0c:fb:f4:0c:97:1a:ed:3d:2a:3d:da:bf:05:ec:31:e7:
bf:51:46:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:57 2024 by rpki-client on console-fra.rpki-client.org