Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e1f2f2-3ad7-4cd2-b76a-e856eff9ab0d/1/sRP4R33lrqIQnBCQRaq5VTzjOGw.roa
File: sRP4R33lrqIQnBCQRaq5VTzjOGw.roa (raw, json)
Hash identifier: CVlTFhxQCuNUNFhe4OCqWUlSQy7U/HXwFAf+5uvhfXk=
Subject key identifier: B1:13:F8:47:7D:E5:AE:A2:10:9C:10:90:45:AA:B9:55:3C:E3:38:6C
Certificate issuer: /CN=8a9ab0a6dc5de7baecaad66dac1d943bd8fd91ef
Certificate serial: 01856BDCB581ADF39DAE9A28DDF490BFAC4A
Authority key identifier: 8A:9A:B0:A6:DC:5D:E7:BA:EC:AA:D6:6D:AC:1D:94:3B:D8:FD:91:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ipqwptxd57rsqtZtrB2UO9j9ke8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/e1f2f2-3ad7-4cd2-b76a-e856eff9ab0d/1/sRP4R33lrqIQnBCQRaq5VTzjOGw.roa
Signing time: Sun 01 Jan 2023 05:45:04 +0000
ROA not before: Sun 01 Jan 2023 05:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48715
IP address blocks: 185.213.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:b5:81:ad:f3:9d:ae:9a:28:dd:f4:90:bf:ac:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9ab0a6dc5de7baecaad66dac1d943bd8fd91ef
Validity
Not Before: Jan 1 05:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b113f8477de5aea2109c109045aab9553ce3386c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:66:55:d6:55:8e:17:74:7c:5d:52:34:90:97:
3d:fa:8b:94:96:fd:09:d9:60:b9:77:39:2c:95:e7:
de:d5:40:66:28:4b:33:3d:75:92:4a:c6:47:47:af:
ed:ae:4a:3a:34:7d:39:6d:15:37:02:08:0a:d0:82:
f9:57:b9:de:43:f9:a3:13:66:b1:f8:62:a8:45:27:
db:c2:a0:4e:98:68:c7:56:25:e8:41:34:db:1e:b9:
32:6e:f7:1c:3d:0d:c2:16:91:68:b3:c0:e5:8f:09:
09:99:81:fa:c5:02:ab:09:7c:7f:91:13:f5:03:69:
ca:6c:ac:59:49:25:18:5d:97:98:f8:c0:8d:bd:93:
a7:59:56:59:ff:cc:a7:1a:85:58:c1:4a:e9:6a:7b:
d5:32:ac:23:8c:69:1d:57:65:1f:b4:0f:ab:60:fe:
21:93:5e:98:0a:7e:63:dd:f0:5c:d5:e7:9b:c8:34:
80:a6:9a:36:8a:de:14:05:c8:6e:40:5a:69:89:3f:
24:9c:87:60:ae:0e:ff:b1:7a:84:2a:ec:8f:77:f2:
68:e7:d8:b6:05:14:dd:e5:a0:bf:40:fb:34:e9:c7:
35:29:89:a1:7f:02:5f:75:c0:45:60:e7:18:2b:82:
11:92:b5:c0:91:30:b2:37:8b:44:38:8b:84:bb:05:
8d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:13:F8:47:7D:E5:AE:A2:10:9C:10:90:45:AA:B9:55:3C:E3:38:6C
X509v3 Authority Key Identifier:
keyid:8A:9A:B0:A6:DC:5D:E7:BA:EC:AA:D6:6D:AC:1D:94:3B:D8:FD:91:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ipqwptxd57rsqtZtrB2UO9j9ke8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e1f2f2-3ad7-4cd2-b76a-e856eff9ab0d/1/sRP4R33lrqIQnBCQRaq5VTzjOGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e1f2f2-3ad7-4cd2-b76a-e856eff9ab0d/1/ipqwptxd57rsqtZtrB2UO9j9ke8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.195.0/24
Signature Algorithm: sha256WithRSAEncryption
82:bc:e8:76:1b:e4:1f:4f:a2:c6:9e:b1:0f:08:65:23:e6:64:
88:50:b0:02:b6:81:54:e7:42:88:81:4c:2f:98:03:53:e9:87:
85:85:09:7a:be:3f:64:20:cb:56:9d:98:19:0e:3c:60:47:1a:
60:30:aa:ef:48:9d:9d:ea:ea:76:78:57:42:7e:e2:dd:52:34:
bb:6c:0f:fd:fb:59:f6:37:5f:d8:4f:8d:a9:97:c3:a2:0b:39:
e6:4e:b4:02:fb:59:82:4e:2d:e5:85:5c:9e:2b:5a:a6:8c:54:
75:bf:20:5e:fe:03:99:91:83:0b:12:ed:37:d6:c5:66:8c:2d:
63:7b:49:06:9b:54:9c:b9:d5:29:63:d9:01:3a:81:0f:85:74:
11:4a:e6:a5:51:6e:65:b9:b9:73:d9:27:a6:01:13:ee:6e:cf:
42:7f:0a:f3:86:bb:9c:eb:21:2d:55:88:98:1a:9c:8c:07:f9:
df:1e:f5:a2:cf:fa:ac:f7:2c:75:ec:52:00:d5:84:5e:54:04:
d8:1d:89:bf:3a:78:37:c8:10:34:79:92:9e:e1:61:f2:96:19:
2a:72:9c:f8:05:c3:09:c9:2b:7a:ad:ff:d1:f0:05:ee:25:53:
7c:85:92:fc:c9:46:67:fa:04:40:70:5e:5c:98:23:20:e0:90:
da:0c:e4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:22 2024 by rpki-client on console-fra.rpki-client.org