Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/n0mKIPhm4gxvNL_RQ51t3h2f2mk.roa
File: n0mKIPhm4gxvNL_RQ51t3h2f2mk.roa (raw, json)
Hash identifier: xFfGgu9Pp2lSGwo6JnnVDHgJp9Fn1Jd+Y+8MMInXcUw=
Subject key identifier: 9F:49:8A:20:F8:66:E2:0C:6F:34:BF:D1:43:9D:6D:DE:1D:9F:DA:69
Certificate issuer: /CN=c66048e9d22d671ee72eb373ae356bd5ad7d664f
Certificate serial: 018CC2DAFF0F8A112D517736CBBE6303DC0A
Authority key identifier: C6:60:48:E9:D2:2D:67:1E:E7:2E:B3:73:AE:35:6B:D5:AD:7D:66:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmBI6dItZx7nLrNzrjVr1a19Zk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/n0mKIPhm4gxvNL_RQ51t3h2f2mk.roa
Signing time: Mon 01 Jan 2024 02:29:41 +0000
ROA not before: Mon 01 Jan 2024 02:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57523
IP address blocks: 185.81.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ff:0f:8a:11:2d:51:77:36:cb:be:63:03:dc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66048e9d22d671ee72eb373ae356bd5ad7d664f
Validity
Not Before: Jan 1 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f498a20f866e20c6f34bfd1439d6dde1d9fda69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f1:d4:89:9b:14:86:92:39:d0:2f:6c:06:55:
6c:aa:68:38:f0:c2:4d:ce:b1:c9:c4:ff:df:3d:26:
46:24:cd:52:ad:23:74:e6:b3:a3:77:f5:dd:fd:9a:
7b:cf:b8:6b:34:b5:eb:32:94:26:b7:1a:63:40:b5:
97:27:45:87:7f:2d:e0:3f:2c:6b:ec:76:64:80:56:
94:e2:8c:07:c1:28:42:00:7d:7c:cf:37:fc:61:69:
8a:03:bd:d4:36:d7:75:60:4a:01:10:3d:a2:9e:7b:
e0:4c:18:ac:0e:76:05:08:f1:41:bf:65:41:a3:9b:
81:cb:0d:6b:1b:3c:0c:e6:07:8b:77:5d:45:18:53:
3c:02:6e:77:d4:ee:14:01:6a:11:6e:70:11:d5:79:
13:99:51:26:0a:ee:a6:c8:f5:73:50:b8:ac:9b:ac:
61:b3:79:e9:27:f7:5a:1c:a8:2a:b7:d8:3b:f2:e4:
a0:18:cc:f3:56:40:50:23:a7:82:06:65:dc:be:4f:
2f:49:2f:90:b2:54:fc:d1:e8:f9:05:7b:4c:32:39:
65:af:b6:06:40:e7:85:fc:ab:5b:84:9e:e9:1b:bb:
97:f7:5d:a0:fe:6a:da:8d:f9:e8:00:2c:51:39:16:
34:09:22:5c:7e:77:92:84:40:ef:10:a9:96:9c:9a:
be:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:49:8A:20:F8:66:E2:0C:6F:34:BF:D1:43:9D:6D:DE:1D:9F:DA:69
X509v3 Authority Key Identifier:
keyid:C6:60:48:E9:D2:2D:67:1E:E7:2E:B3:73:AE:35:6B:D5:AD:7D:66:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmBI6dItZx7nLrNzrjVr1a19Zk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/n0mKIPhm4gxvNL_RQ51t3h2f2mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/xmBI6dItZx7nLrNzrjVr1a19Zk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.68.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:09:33:2e:ce:e2:51:55:6b:dd:53:de:d8:59:51:1b:b6:3a:
fb:38:12:66:c6:1f:a8:c8:e1:ae:ad:9a:79:b7:28:e1:e5:87:
d4:d5:e4:7c:bd:a9:a8:46:2f:d2:55:eb:a0:7b:aa:52:a7:0e:
3e:6e:80:21:a0:a6:9b:ef:fe:62:6c:47:bd:11:54:55:08:1d:
8b:c0:d4:05:ae:95:0a:f6:4b:37:2c:97:8e:e4:0e:5a:69:1b:
a8:6d:61:2c:25:9e:88:b9:2d:d1:b2:5e:17:a0:4d:6e:4f:5b:
ee:90:14:be:49:3c:d9:9b:71:24:97:dc:73:b4:e0:68:b5:2c:
85:26:8f:f8:a0:e7:ba:99:c2:75:bd:5f:4d:ef:8f:6b:ca:b4:
03:28:c1:b1:e0:69:4d:92:38:c6:4a:03:16:73:69:97:0d:12:
6b:6b:56:88:b8:dc:c0:4a:12:90:3d:ee:a4:f9:7c:3f:09:d3:
fe:97:d9:cb:e9:47:83:2c:79:c8:78:6b:6e:bf:98:3f:e9:74:
98:14:a1:a2:9f:9a:9d:79:ba:e5:fd:c4:7d:17:8f:1c:8f:8b:
34:52:92:3c:b3:bb:af:f9:ca:79:30:9c:0e:7d:98:07:cc:c8:
a0:3a:1e:4a:7a:b2:0f:f5:a9:f7:54:d4:2f:54:50:cc:22:43:
7b:64:91:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:47 2024 by rpki-client on console-fra.rpki-client.org