Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d5b93c-6022-48d3-a72f-461e894872e8/1/01ifYPQBG6udxIozZmBmbPCxC3E.roa
File: 01ifYPQBG6udxIozZmBmbPCxC3E.roa (raw, json)
Hash identifier: hi3UK8Risrfha8xJVZW9qIudjtsznNerYuqMIV7aPEA=
Subject key identifier: D3:58:9F:60:F4:01:1B:AB:9D:C4:8A:33:66:60:66:6C:F0:B1:0B:71
Certificate issuer: /CN=6306cc0161475d84f7a577e2ca23c8c244f00b7c
Certificate serial: 135F4D6C
Authority key identifier: 63:06:CC:01:61:47:5D:84:F7:A5:77:E2:CA:23:C8:C2:44:F0:0B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwbMAWFHXYT3pXfiyiPIwkTwC3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d5b93c-6022-48d3-a72f-461e894872e8/1/01ifYPQBG6udxIozZmBmbPCxC3E.roa
Signing time: Sat 01 Jan 2022 04:53:21 +0000
ROA not before: Sat 01 Jan 2022 04:53:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204771
IP address blocks: 185.133.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325012844 (0x135f4d6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6306cc0161475d84f7a577e2ca23c8c244f00b7c
Validity
Not Before: Jan 1 04:53:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3589f60f4011bab9dc48a336660666cf0b10b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:62:c6:b9:70:68:7f:ac:c4:f4:61:bd:60:
d1:3b:d7:2a:f7:e0:af:a5:e1:43:05:22:72:29:9f:
f1:97:93:66:1a:2a:b7:6c:bc:81:43:a9:98:4e:8c:
c2:ea:a6:9e:52:14:50:90:9b:19:2c:db:97:ec:ad:
73:78:bf:d9:ab:07:bf:ca:e2:01:42:cd:15:9e:95:
b7:ab:d0:87:f5:44:fc:8d:d7:4b:df:f1:2f:68:9a:
82:8c:21:cd:cc:92:4b:73:c5:12:b2:10:4b:91:08:
4f:00:d4:b0:08:e2:db:a3:d2:3f:bd:61:c1:13:3b:
3d:52:07:fb:ae:5c:26:d9:c7:28:18:cf:b4:fa:9b:
a4:5d:3f:3f:9f:11:50:ee:cf:43:c7:e2:0a:69:31:
21:85:b7:c8:67:f1:16:2f:fd:8f:0d:30:8b:ad:bb:
7c:43:a1:76:ab:ff:69:58:5b:9f:29:be:67:b3:0a:
36:5e:f8:5b:25:3e:49:65:56:7c:6c:2e:0a:22:89:
38:8e:5a:97:26:06:ca:03:ba:b1:72:4e:0d:58:4a:
ec:33:ee:9e:36:e2:0a:27:75:75:69:00:ce:d2:9f:
79:4d:e7:89:5e:5f:a0:99:13:33:60:ae:6b:a1:d1:
e6:d9:d7:18:1b:34:c0:c8:5b:de:99:23:fb:e6:d6:
ef:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:58:9F:60:F4:01:1B:AB:9D:C4:8A:33:66:60:66:6C:F0:B1:0B:71
X509v3 Authority Key Identifier:
keyid:63:06:CC:01:61:47:5D:84:F7:A5:77:E2:CA:23:C8:C2:44:F0:0B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwbMAWFHXYT3pXfiyiPIwkTwC3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d5b93c-6022-48d3-a72f-461e894872e8/1/01ifYPQBG6udxIozZmBmbPCxC3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d5b93c-6022-48d3-a72f-461e894872e8/1/YwbMAWFHXYT3pXfiyiPIwkTwC3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.184.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:be:72:10:ef:68:ef:c3:13:d5:ef:58:54:61:a1:2d:fb:a1:
27:d9:8c:a5:5b:fd:b1:ac:e2:88:d1:d1:dd:64:57:7a:d4:26:
2e:d2:6c:3f:1b:89:ab:3e:9b:3f:8e:4a:75:c7:73:ba:65:c0:
43:95:6e:23:41:09:8b:bd:87:63:c1:5c:81:c8:1c:c8:dd:29:
21:0b:40:cd:9b:a8:65:6f:1c:3f:96:f9:6e:2d:b8:19:7d:a7:
52:56:e9:f2:85:3c:6e:67:83:ad:1e:de:ab:91:2e:49:eb:b0:
e7:f0:5e:4e:37:5d:f4:12:6d:ab:32:86:d8:90:13:ac:f5:ca:
f0:41:9a:1a:b7:8d:3c:c4:7a:8a:4d:bd:77:8a:f5:89:9c:b8:
86:06:b6:1d:33:5d:09:c1:46:dd:c1:de:28:a7:e4:7f:9b:d3:
98:06:ec:91:5f:a6:8f:f6:2d:30:a1:2a:4a:60:70:70:80:c5:
8f:fa:1b:88:3c:39:2a:7e:9d:03:5c:10:2e:28:a7:18:34:77:
06:13:2f:21:c8:ec:1f:85:af:c4:8f:78:3d:34:4e:45:ce:06:
0a:3a:2b:4d:66:7b:82:ae:7e:58:95:ff:89:be:b6:b4:9d:b6:
e2:0b:52:70:eb:b0:b4:d1:ff:4e:99:80:88:76:11:c9:74:9c:
6c:da:50:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:21 2024 by rpki-client on console-ams.rpki-client.org