Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0a3b9c-6178-42e8-99fc-131880c3df2e/1/5w6_hs9JPC0RfFVask-YbBThNjQ.roa
File: 5w6_hs9JPC0RfFVask-YbBThNjQ.roa (raw, json)
Hash identifier: hbsek17mlf3LrpEWfuAQjdBskofX0y/XwcuE4HgWiQ4=
Subject key identifier: E7:0E:BF:86:CF:49:3C:2D:11:7C:55:5A:B2:4F:98:6C:14:E1:36:34
Certificate issuer: /CN=877a2b800bea270ed1062390d311b33823425942
Certificate serial: 018572FA85C6EC93ACC035F2DA9FF985A890
Authority key identifier: 87:7A:2B:80:0B:EA:27:0E:D1:06:23:90:D3:11:B3:38:23:42:59:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3orgAvqJw7RBiOQ0xGzOCNCWUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0a3b9c-6178-42e8-99fc-131880c3df2e/1/5w6_hs9JPC0RfFVask-YbBThNjQ.roa
Signing time: Mon 02 Jan 2023 14:54:58 +0000
ROA not before: Mon 02 Jan 2023 14:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41155
IP address blocks: 185.222.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:85:c6:ec:93:ac:c0:35:f2:da:9f:f9:85:a8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877a2b800bea270ed1062390d311b33823425942
Validity
Not Before: Jan 2 14:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e70ebf86cf493c2d117c555ab24f986c14e13634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fe:b6:ef:95:c9:de:0b:f8:3e:e8:3d:6f:dc:
5a:10:9f:e6:e2:cd:9b:eb:b0:f4:91:97:e8:5c:ec:
13:02:c8:1a:94:92:b4:97:39:6e:c1:c7:8e:ec:a9:
c1:9e:f2:ce:a0:01:9e:b2:14:f5:20:fa:35:14:0d:
55:31:a4:48:d8:ee:84:25:de:82:4d:53:64:22:da:
eb:21:1e:75:93:0c:d7:df:6a:da:67:38:a8:f6:b2:
6f:1b:a6:cb:4e:92:23:7a:0d:47:62:35:99:e8:92:
af:c0:64:8a:5a:8f:56:8d:51:67:7d:90:01:ac:c9:
b7:e2:eb:e6:3a:38:36:82:9c:d3:6d:c4:fd:c8:af:
35:07:b5:9a:81:a4:d5:b9:ab:c0:42:36:50:d9:ed:
57:40:84:2b:8d:33:65:f7:48:ca:69:f6:48:85:e0:
32:62:dc:26:d0:98:a8:e8:35:2c:60:4d:90:9f:1f:
bf:29:a2:7a:c9:4a:04:50:f1:fe:f5:0a:47:97:93:
41:ed:45:a6:84:ac:8d:74:7d:e1:70:7e:14:c4:0e:
fd:f0:5d:e6:70:40:80:f9:d8:9e:6a:99:51:ec:09:
82:39:dd:bc:69:05:62:b0:3c:ee:9f:14:4b:da:87:
03:50:25:36:7b:dd:07:b6:40:b6:bd:96:c6:ad:a9:
b1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0E:BF:86:CF:49:3C:2D:11:7C:55:5A:B2:4F:98:6C:14:E1:36:34
X509v3 Authority Key Identifier:
keyid:87:7A:2B:80:0B:EA:27:0E:D1:06:23:90:D3:11:B3:38:23:42:59:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3orgAvqJw7RBiOQ0xGzOCNCWUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0a3b9c-6178-42e8-99fc-131880c3df2e/1/5w6_hs9JPC0RfFVask-YbBThNjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0a3b9c-6178-42e8-99fc-131880c3df2e/1/h3orgAvqJw7RBiOQ0xGzOCNCWUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.215.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e3:85:19:ef:71:b7:09:e2:e5:2f:1c:84:49:8a:4c:eb:1e:
c0:6d:9c:f4:b4:f3:e7:46:38:60:85:5f:53:ce:b3:17:de:e6:
62:25:be:4f:5a:2d:09:b6:db:f4:33:3d:93:3b:cf:02:6a:8f:
b5:92:31:1a:fe:0f:20:65:0e:a5:90:1b:af:4e:ec:d2:c1:ac:
97:73:c5:ee:5a:b4:1f:fb:56:16:ac:92:7b:19:51:5a:6b:06:
11:8e:9c:fe:19:e7:7a:93:28:9b:7e:c6:5f:9f:48:9c:17:7d:
0e:3e:9f:e7:ce:22:51:a6:ce:a1:10:4b:cc:7f:ee:9f:6b:45:
7d:29:ab:b0:45:d2:5f:d7:47:91:92:28:74:01:27:1a:5a:fd:
79:f2:3d:68:c0:c0:23:ec:7d:67:6b:f3:2c:34:a6:1a:11:4a:
7b:a1:db:40:7a:17:7e:01:27:e0:d0:1e:59:4a:8d:f3:2d:68:
e4:84:3a:a0:c9:2c:60:09:54:84:ea:83:9e:b9:89:e6:da:89:
fe:66:10:45:6c:00:db:b4:ed:3d:16:16:41:ea:6a:58:79:6f:
76:27:c3:1a:6b:93:15:f4:11:14:2c:8d:8b:47:28:3a:cb:dc:
56:7e:05:6a:2a:60:e3:b6:9c:bc:f3:7f:59:d5:58:f4:0e:d2:
d4:eb:4b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:41 2024 by rpki-client on console-ams.rpki-client.org