Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/07dd67-e8c0-46b6-829c-e4c27d2e2376/1/uR9CA_9IQfrq-pT1aErEqVlIMUU.roa
File: uR9CA_9IQfrq-pT1aErEqVlIMUU.roa (raw, json)
Hash identifier: 9y/47FjYIanJNlLN9UlPxKUo21eNx4DSeETejem6eow=
Subject key identifier: B9:1F:42:03:FF:48:41:FA:EA:FA:94:F5:68:4A:C4:A9:59:48:31:45
Certificate issuer: /CN=04d9e5b0f9d1a7fdd3e6bc12e817e673a09ea193
Certificate serial: 0185711E4A7E1C6EE169A4171F44EF2DCD3E
Authority key identifier: 04:D9:E5:B0:F9:D1:A7:FD:D3:E6:BC:12:E8:17:E6:73:A0:9E:A1:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNnlsPnRp_3T5rwS6Bfmc6CeoZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/07dd67-e8c0-46b6-829c-e4c27d2e2376/1/uR9CA_9IQfrq-pT1aErEqVlIMUU.roa
Signing time: Mon 02 Jan 2023 06:14:48 +0000
ROA not before: Mon 02 Jan 2023 06:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 185.241.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:4a:7e:1c:6e:e1:69:a4:17:1f:44:ef:2d:cd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d9e5b0f9d1a7fdd3e6bc12e817e673a09ea193
Validity
Not Before: Jan 2 06:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b91f4203ff4841faeafa94f5684ac4a959483145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:81:16:18:93:9b:c3:a7:4d:91:46:96:26:0f:
ee:d2:d6:8c:d8:be:12:94:7b:1e:eb:64:8f:de:74:
1b:67:5a:41:77:4e:89:d2:67:bf:cd:12:d8:9a:c5:
85:80:9c:68:9d:f3:3a:bb:5b:ed:17:fb:23:d6:4e:
83:0f:bb:c2:d6:b1:87:98:78:a0:e8:ab:9f:64:71:
4b:23:fa:42:b0:51:de:5b:b5:3e:40:13:06:10:2c:
14:64:c4:51:77:65:bd:93:ef:37:c1:91:2e:78:cb:
c5:50:f6:31:65:06:0c:1d:9a:b2:4b:c8:44:fd:d2:
d9:32:ff:91:8b:5b:d5:14:9b:ca:c4:a6:3c:0c:a6:
d9:d3:34:55:eb:04:4a:6f:dd:1e:46:29:24:d3:8e:
82:d2:e1:74:e0:92:5d:d0:8a:0a:69:eb:41:12:48:
34:ed:fc:b2:ad:8b:ee:12:fd:f0:3d:b8:d1:4c:b3:
81:71:eb:f2:b6:b1:17:3d:e6:68:de:6f:9b:4e:ab:
cd:a7:93:d4:37:ed:d9:18:03:66:33:79:05:f4:75:
57:3d:5c:c7:cc:6f:0b:c4:bf:7f:fa:71:9a:df:b3:
94:e2:e0:c2:d0:5f:67:ce:1f:85:be:3e:0c:ee:5e:
5d:5b:50:84:ef:54:47:8d:bb:83:f6:1b:4d:8b:c3:
9f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1F:42:03:FF:48:41:FA:EA:FA:94:F5:68:4A:C4:A9:59:48:31:45
X509v3 Authority Key Identifier:
keyid:04:D9:E5:B0:F9:D1:A7:FD:D3:E6:BC:12:E8:17:E6:73:A0:9E:A1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNnlsPnRp_3T5rwS6Bfmc6CeoZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/07dd67-e8c0-46b6-829c-e4c27d2e2376/1/uR9CA_9IQfrq-pT1aErEqVlIMUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/07dd67-e8c0-46b6-829c-e4c27d2e2376/1/BNnlsPnRp_3T5rwS6Bfmc6CeoZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.244.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f9:4a:ad:ab:09:4d:6b:b5:d0:ec:66:58:be:fb:ca:71:4d:
a8:45:aa:bd:7b:43:66:08:e4:26:32:10:32:e9:47:f8:bc:7b:
fc:8c:35:4e:ba:e7:43:ef:7b:b3:9f:c3:e8:74:3e:fa:9a:4f:
17:17:d1:a1:dc:e3:8b:04:fc:ed:7b:d8:ee:a4:28:f4:91:e9:
b2:33:8c:ec:7b:5f:b3:d1:88:a3:4c:9f:5d:bc:a0:a7:90:c3:
15:c6:ad:43:8a:78:6a:1a:53:8a:d0:f1:2c:45:27:18:d3:7e:
9e:67:1e:94:fb:1c:5e:9b:24:0d:b7:24:82:50:9a:93:1d:75:
f3:8c:cd:33:8c:fd:79:ca:77:4c:1b:aa:63:b4:7c:61:13:af:
37:c2:4f:38:f4:b7:73:be:b9:da:25:58:4a:23:e9:3c:dc:19:
8e:38:a4:25:46:66:df:82:5a:e2:01:c1:cf:ff:ab:79:ac:25:
83:2f:c2:c4:2a:64:bd:34:60:85:80:23:65:5f:0e:c5:ec:18:
29:5f:c3:35:76:82:d6:2b:82:71:0b:44:b5:e3:e8:2b:5c:cd:
85:e3:5c:70:d5:31:73:44:64:8d:2d:30:5d:83:8a:47:fb:8b:
65:e5:5a:3d:f9:91:4b:e0:cc:46:47:82:42:fd:5d:28:d2:c3:
8d:f9:1c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:42 2024 by rpki-client on console-ams.rpki-client.org