Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/nj7dMy_28_ao9cKNWOSUvujUOyc.roa
File: nj7dMy_28_ao9cKNWOSUvujUOyc.roa (raw, json)
Hash identifier: xdarPhOJdrCJE40+d2hmEn0zcUu1xjnd+s816RKBv9Q=
Subject key identifier: 9E:3E:DD:33:2F:F6:F3:F6:A8:F5:C2:8D:58:E4:94:BE:E8:D4:3B:27
Certificate issuer: /CN=4354d70a988e257ec57c3408159dc8b504f5723a
Certificate serial: 0182F347B455C472735429C2C1339272D43D
Authority key identifier: 43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/nj7dMy_28_ao9cKNWOSUvujUOyc.roa
Signing time: Wed 31 Aug 2022 09:42:18 +0000
ROA not before: Wed 31 Aug 2022 09:42:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204997
IP address blocks: 185.255.132.0/24 maxlen: 24
185.255.133.0/24 maxlen: 24
185.255.135.0/24 maxlen: 24
185.255.134.0/24 maxlen: 24
185.244.172.0/24 maxlen: 24
185.244.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f3:47:b4:55:c4:72:73:54:29:c2:c1:33:92:72:d4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4354d70a988e257ec57c3408159dc8b504f5723a
Validity
Not Before: Aug 31 09:42:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e3edd332ff6f3f6a8f5c28d58e494bee8d43b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:96:c0:57:a4:0a:26:2d:da:9e:62:4a:bc:
46:ab:2c:51:43:1d:c0:9c:14:12:47:26:8b:4a:e3:
9e:85:95:ee:71:67:48:bf:25:ff:4a:88:db:00:96:
46:9b:95:2d:74:9b:f0:6c:0e:56:9b:bc:11:9f:d4:
07:fd:7e:58:1a:e1:39:97:b0:b0:4d:25:ca:87:17:
a0:1f:ff:fd:c4:cb:fb:42:dd:d3:3d:8e:50:b1:f4:
bf:cb:c1:f8:d7:5c:e7:61:e2:a3:9d:ee:cb:ed:cf:
f0:78:25:46:e3:41:d0:7d:ad:e5:c2:52:45:2e:86:
9f:18:f6:72:aa:47:f6:dc:31:7d:b6:90:7e:d6:3c:
54:b3:7c:4e:ff:e4:1f:ab:be:90:4d:72:0c:1e:c3:
c2:9c:07:dc:e8:85:99:fa:72:a5:25:08:0d:c6:db:
18:bd:26:f4:13:40:2e:a5:56:cc:1a:52:c8:88:d1:
89:11:e1:05:c3:ec:9b:1d:27:d8:78:78:75:6a:16:
2a:1e:28:0e:79:3a:31:1f:f5:86:5c:25:48:aa:6c:
d5:82:11:a6:3f:e1:09:b8:1a:c5:72:5a:5c:66:e4:
eb:ef:4d:9f:79:f2:b5:e1:2d:4c:e0:e8:f5:6e:c5:
0c:af:80:91:42:67:7d:23:19:6e:bc:b1:ed:39:9d:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3E:DD:33:2F:F6:F3:F6:A8:F5:C2:8D:58:E4:94:BE:E8:D4:3B:27
X509v3 Authority Key Identifier:
keyid:43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/nj7dMy_28_ao9cKNWOSUvujUOyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.172.0/23
185.255.132.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:f4:36:92:50:c5:2e:38:b6:dd:06:61:4a:93:fa:26:f8:83:
ac:2f:1c:46:41:70:f0:8b:5d:21:88:47:dc:09:18:a5:5c:3b:
90:ac:0e:1e:d3:df:a1:9b:6e:65:76:6b:88:d1:44:a3:18:9d:
93:30:52:17:fe:f0:a6:92:1e:50:06:ae:f5:bb:25:70:74:cf:
6f:0e:51:9d:a8:37:14:84:ba:af:be:56:8f:b2:d2:a8:ff:6d:
31:31:d4:53:ba:3c:c7:2a:a1:76:61:71:2d:38:6d:1f:d0:ef:
6a:41:f6:6f:cc:60:09:eb:fb:21:f6:63:75:6c:cd:69:50:c5:
78:f7:1d:a0:4f:27:f6:11:23:21:c2:19:81:c6:ca:7c:c1:0d:
ec:26:03:43:05:73:35:32:87:8d:da:99:71:dc:40:62:ab:b8:
a9:c5:e7:67:2d:17:58:9e:b0:df:76:3f:8d:a0:b6:54:5a:eb:
38:68:54:42:2c:46:9d:7f:41:22:a9:d2:1e:e8:48:1d:f0:60:
15:6d:a1:17:53:9d:47:e6:d9:f5:97:3c:f0:af:9a:47:25:c5:
53:f7:5e:d8:7b:d3:1f:13:6c:3a:23:f5:ee:df:1d:b0:89:11:
ff:95:5f:62:11:4d:de:b3:41:c4:a9:76:36:f0:9b:95:cf:b8:
ae:9d:67:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:21 2024 by rpki-client on console-ams.rpki-client.org