Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/cd495f-2b83-4aae-abf7-733567ac73c4/1/5K8h1dTVqwRFP_aus72rH-0M9qc.roa
File: 5K8h1dTVqwRFP_aus72rH-0M9qc.roa (raw, json)
Hash identifier: kZI1W3cZdvZyR8A7oh1lNMJF3Q8aC70XbzZG6GNNIc8=
Subject key identifier: E4:AF:21:D5:D4:D5:AB:04:45:3F:F6:AE:B3:BD:AB:1F:ED:0C:F6:A7
Certificate issuer: /CN=f221ff685f4ec803cfaef1756e9e9ca29a854e02
Certificate serial: 018B8664832B6CFE1F3D265BF899683ED742
Authority key identifier: F2:21:FF:68:5F:4E:C8:03:CF:AE:F1:75:6E:9E:9C:A2:9A:85:4E:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iH_aF9OyAPPrvF1bp6copqFTgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd495f-2b83-4aae-abf7-733567ac73c4/1/5K8h1dTVqwRFP_aus72rH-0M9qc.roa
Signing time: Tue 31 Oct 2023 15:40:15 +0000
ROA not before: Tue 31 Oct 2023 15:40:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199548
IP address blocks: 185.64.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:86:64:83:2b:6c:fe:1f:3d:26:5b:f8:99:68:3e:d7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f221ff685f4ec803cfaef1756e9e9ca29a854e02
Validity
Not Before: Oct 31 15:40:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4af21d5d4d5ab04453ff6aeb3bdab1fed0cf6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:83:5a:94:38:1e:ae:b6:67:6a:13:43:b6:
83:6f:17:c8:57:45:95:40:9d:b4:e4:69:f8:4b:ab:
15:42:49:22:3b:7f:d0:88:c3:06:37:b4:24:ce:72:
d5:d8:9e:ed:52:80:b4:bc:39:91:3a:dc:06:08:c7:
b8:2c:3a:1e:ea:18:ca:5b:31:51:d1:37:d3:42:91:
4e:32:62:63:c1:e3:f6:90:7f:bf:02:42:6a:0e:d3:
bd:94:be:6c:f0:56:2b:91:32:5d:ff:75:3f:09:25:
57:de:b7:42:5f:33:c2:8d:a9:de:a7:7f:41:c0:fc:
6f:d0:98:3e:75:7b:79:0b:ea:2d:0e:a3:0f:c8:b3:
88:25:85:db:f1:89:84:d4:91:4f:13:04:d0:9e:83:
e7:3b:f0:37:39:e2:69:55:62:be:a1:8e:58:75:ed:
c0:b8:34:3d:02:c6:28:6d:1a:5e:55:93:0e:fb:55:
ad:fa:d5:c9:8b:54:be:ae:18:2b:52:b4:c8:f2:96:
6c:78:46:0b:f4:fc:58:aa:77:d7:82:06:82:0a:05:
7c:49:bb:00:09:eb:28:c6:e5:34:36:64:c4:7a:b1:
75:4c:df:b4:2a:3a:10:b8:8d:ac:15:01:f2:84:22:
0f:f6:df:ca:1c:b9:3f:cc:82:bd:12:27:e8:0d:d6:
82:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AF:21:D5:D4:D5:AB:04:45:3F:F6:AE:B3:BD:AB:1F:ED:0C:F6:A7
X509v3 Authority Key Identifier:
keyid:F2:21:FF:68:5F:4E:C8:03:CF:AE:F1:75:6E:9E:9C:A2:9A:85:4E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iH_aF9OyAPPrvF1bp6copqFTgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd495f-2b83-4aae-abf7-733567ac73c4/1/5K8h1dTVqwRFP_aus72rH-0M9qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd495f-2b83-4aae-abf7-733567ac73c4/1/8iH_aF9OyAPPrvF1bp6copqFTgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.77.0/24
Signature Algorithm: sha256WithRSAEncryption
04:ac:8b:42:ab:35:92:8e:db:c0:f0:23:bf:36:ea:b9:f9:ce:
5f:15:cd:cf:af:4f:5b:9b:fe:48:23:93:57:64:49:66:e1:d4:
80:a7:d0:9e:20:e6:74:39:73:e7:d9:e2:b6:2b:5f:f9:cc:bb:
e8:b6:98:c0:2e:e1:74:10:67:da:f4:77:af:bd:f7:77:c8:77:
8b:7e:0f:c6:e7:67:a9:64:4b:a5:76:8c:90:56:e1:9c:07:82:
b9:77:05:fb:a9:72:3e:51:fd:e4:a6:ea:ea:08:fb:33:04:04:
25:0e:13:01:a7:a5:58:c2:21:e6:2c:57:bd:e7:ab:36:ae:7d:
53:23:21:ed:75:2b:bf:00:03:76:ca:09:21:d6:71:0f:65:17:
68:13:b1:4c:02:57:ff:85:68:58:e3:69:6d:25:47:49:08:d9:
ad:b7:a8:92:f1:1a:fa:9d:36:c7:23:12:70:0d:f0:2f:5c:7f:
60:22:75:49:74:9c:39:c5:e8:8d:ec:25:e2:ae:f5:ad:47:2e:
bb:3d:a6:03:a1:25:7d:ce:c1:8c:92:ee:04:dd:9b:d4:ef:74:
56:57:ce:15:86:d8:c1:58:d8:8d:56:9a:0e:22:37:ef:4e:38:
ee:52:ac:ae:7a:6c:af:04:7b:45:41:0f:b3:25:65:14:8d:bd:
4f:68:ab:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:49 2024 by rpki-client on console-fra.rpki-client.org