Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/a757da-acf8-4d9c-a708-8d1db62315cb/1/I_2z-_hY6Nnvcl0wdObyeBAeE3Y.roa
File: I_2z-_hY6Nnvcl0wdObyeBAeE3Y.roa (raw, json)
Hash identifier: OD2W0fkOaWEMS8Fw/TTHnhizAnzlqonv2Y7MQFyHCzU=
Subject key identifier: 23:FD:B3:FB:F8:58:E8:D9:EF:72:5D:30:74:E6:F2:78:10:1E:13:76
Certificate issuer: /CN=9a04ff3aee617c1c1e9074b06828561b30203070
Certificate serial: 01856ECB873B6CF0511E3146920DCDAF8E5A
Authority key identifier: 9A:04:FF:3A:EE:61:7C:1C:1E:90:74:B0:68:28:56:1B:30:20:30:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgT_Ou5hfBwekHSwaChWGzAgMHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/a757da-acf8-4d9c-a708-8d1db62315cb/1/I_2z-_hY6Nnvcl0wdObyeBAeE3Y.roa
Signing time: Sun 01 Jan 2023 19:25:10 +0000
ROA not before: Sun 01 Jan 2023 19:25:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205820
IP address blocks: 185.251.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:87:3b:6c:f0:51:1e:31:46:92:0d:cd:af:8e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a04ff3aee617c1c1e9074b06828561b30203070
Validity
Not Before: Jan 1 19:25:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23fdb3fbf858e8d9ef725d3074e6f278101e1376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fb:4d:aa:fb:56:44:7e:c4:6f:8e:01:11:3c:
fa:8c:4e:32:6b:fe:ec:29:bd:5e:04:a8:44:5a:a0:
16:2f:2e:aa:61:5f:2d:8d:92:48:88:32:25:4b:a1:
27:29:f7:66:9c:26:8e:cc:9f:33:5c:fd:5c:a3:97:
00:5b:89:45:de:88:c0:be:30:ef:be:ba:99:72:88:
22:d2:19:47:d4:fd:ea:cd:ea:f7:9e:56:aa:26:e9:
cb:9a:3a:3a:82:f5:43:fa:5c:39:4c:09:6f:8d:83:
f8:09:88:bc:3c:9c:f5:15:04:69:23:a0:0a:02:cb:
29:44:55:5a:14:45:9b:5a:81:78:89:72:0e:1d:63:
77:35:bb:93:4c:e1:31:4a:e4:ad:4f:1e:e5:b6:20:
51:90:45:19:6b:9e:02:8b:e1:64:e9:ad:44:c5:0d:
0b:15:2b:e3:5a:0a:d4:14:e5:5f:e9:fa:61:a4:84:
ae:90:ed:26:84:49:c4:70:57:6c:e4:4e:a3:f2:74:
02:79:9f:08:33:70:0f:a2:e0:bc:7f:42:52:6b:4c:
93:5c:a8:16:79:1c:bc:63:52:a3:95:11:4e:ed:68:
8b:d6:e7:00:8f:c7:04:8d:bd:5f:58:bb:69:b0:2e:
c7:90:2b:3b:f7:cc:f5:d9:c2:f3:dc:a0:83:8d:bc:
1f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FD:B3:FB:F8:58:E8:D9:EF:72:5D:30:74:E6:F2:78:10:1E:13:76
X509v3 Authority Key Identifier:
keyid:9A:04:FF:3A:EE:61:7C:1C:1E:90:74:B0:68:28:56:1B:30:20:30:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgT_Ou5hfBwekHSwaChWGzAgMHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a757da-acf8-4d9c-a708-8d1db62315cb/1/I_2z-_hY6Nnvcl0wdObyeBAeE3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a757da-acf8-4d9c-a708-8d1db62315cb/1/mgT_Ou5hfBwekHSwaChWGzAgMHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.38.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ff:df:df:ab:4e:6d:03:f4:05:66:79:d9:66:10:42:9c:92:
50:a6:f6:79:a0:fa:9d:b5:a1:bc:bd:d6:ee:26:87:a1:39:5f:
31:f5:f6:90:a3:7a:58:d6:bf:49:83:32:fe:60:8b:6d:91:d3:
f3:5a:2e:93:5d:bf:c1:89:7b:86:ae:86:cf:3e:80:5a:73:f5:
8d:71:9a:8e:ca:7d:fe:4f:32:a5:dc:8e:87:07:7b:c1:6c:80:
e4:d1:cd:91:53:3e:84:1f:cf:3e:ed:97:60:8d:22:6a:bd:b6:
90:05:e6:0e:82:7c:3e:ca:4c:f6:ab:03:5e:96:cf:a8:2d:36:
99:18:01:b8:1d:66:d8:7a:ab:ed:eb:e6:e8:a0:08:00:fb:0b:
2a:19:5b:5a:dd:de:e4:43:8e:1b:00:86:64:07:7f:e1:3e:f5:
82:6d:16:4c:4a:79:6c:c4:ed:8e:bd:db:ef:b0:0c:b2:bd:1a:
b1:44:61:82:91:5d:07:1b:8c:91:49:ec:14:f3:1b:01:c8:55:
0c:42:12:af:d4:c2:95:6e:c6:39:ca:4a:e1:37:10:57:43:16:
8b:88:b3:50:c6:a0:32:2e:ff:74:1f:e9:5b:37:c5:ee:06:ad:
0d:28:0c:4e:41:9c:b8:a1:98:67:f2:48:67:56:65:83:d8:e5:
5c:59:72:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:07 2024 by rpki-client on console-ams.rpki-client.org