Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/a757da-acf8-4d9c-a708-8d1db62315cb/1/W4iTYUW4ftdfIslWgKe13XpFjBg.roa
File: W4iTYUW4ftdfIslWgKe13XpFjBg.roa (raw, json)
Hash identifier: mXhsqwu7LebOCldpRh6TqLs6Bvr+F9zNOa/xnt1BPW0=
Subject key identifier: 5B:88:93:61:45:B8:7E:D7:5F:22:C9:56:80:A7:B5:DD:7A:45:8C:18
Certificate issuer: /CN=9a04ff3aee617c1c1e9074b06828561b30203070
Certificate serial: 0250E0AF
Authority key identifier: 9A:04:FF:3A:EE:61:7C:1C:1E:90:74:B0:68:28:56:1B:30:20:30:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgT_Ou5hfBwekHSwaChWGzAgMHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/a757da-acf8-4d9c-a708-8d1db62315cb/1/W4iTYUW4ftdfIslWgKe13XpFjBg.roa
Signing time: Sat 01 Jan 2022 14:05:09 +0000
ROA not before: Sat 01 Jan 2022 14:05:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205820
IP address blocks: 185.251.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38854831 (0x250e0af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a04ff3aee617c1c1e9074b06828561b30203070
Validity
Not Before: Jan 1 14:05:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b88936145b87ed75f22c95680a7b5dd7a458c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7a:96:e3:8f:85:af:cd:7e:d7:19:3e:5e:6c:
b2:56:fc:f1:cf:ca:48:c2:52:cb:7a:e8:3d:b0:ae:
db:ab:2e:c2:f7:58:08:4c:34:9c:0c:57:b7:78:a4:
4b:89:e0:f7:1e:50:d8:e4:57:98:57:1b:19:94:12:
5b:ea:10:cf:e4:6f:7d:ec:db:78:9d:69:1c:c4:b2:
04:f2:02:9d:7a:41:ea:7b:43:f0:e5:4d:5d:92:10:
18:32:03:fc:98:05:95:e3:36:c2:3b:e7:d3:7d:83:
56:ba:71:bf:8a:e1:44:db:57:5b:a7:27:89:fd:df:
00:71:73:09:94:1b:3c:4b:8a:e5:08:9d:eb:4f:f4:
6f:e8:2e:47:56:22:bf:f8:af:c8:ad:e4:95:30:92:
c4:96:a6:7e:b1:d0:ac:d2:51:71:00:70:06:5d:93:
45:a1:88:93:ec:30:e7:59:8b:a9:9e:f5:0c:b7:15:
a8:b2:ba:5b:df:3e:f2:0a:d4:6b:e4:a0:15:08:bd:
95:4e:84:54:c2:a6:ed:a6:7a:ee:a7:8f:ec:6e:96:
e4:a9:77:a8:99:70:f1:23:3e:22:f1:66:7b:49:c3:
3f:ab:3a:8a:8c:96:56:dd:6b:63:32:46:dd:9b:e3:
c4:cd:83:bc:77:e3:8a:2f:7e:9a:2e:ec:40:65:81:
7c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:88:93:61:45:B8:7E:D7:5F:22:C9:56:80:A7:B5:DD:7A:45:8C:18
X509v3 Authority Key Identifier:
keyid:9A:04:FF:3A:EE:61:7C:1C:1E:90:74:B0:68:28:56:1B:30:20:30:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgT_Ou5hfBwekHSwaChWGzAgMHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a757da-acf8-4d9c-a708-8d1db62315cb/1/W4iTYUW4ftdfIslWgKe13XpFjBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a757da-acf8-4d9c-a708-8d1db62315cb/1/mgT_Ou5hfBwekHSwaChWGzAgMHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.38.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:67:7d:24:3c:d4:99:f5:ea:c3:73:25:3f:d4:18:60:2f:2c:
c5:89:bd:6d:65:35:ca:a8:7f:e7:68:fa:a1:4f:42:84:16:92:
b3:e6:9e:35:82:28:c4:10:5f:36:32:22:5b:18:44:f9:7c:f9:
63:d8:f4:6d:e0:5e:eb:6a:49:ab:a6:86:cb:39:e2:08:dc:8b:
d6:af:69:a0:fd:19:90:99:79:90:fe:50:8b:d8:fe:65:fc:ed:
58:20:cf:23:1d:b8:18:21:d8:b5:41:8c:33:32:72:59:3a:2a:
47:88:79:55:4b:00:10:8d:27:f1:51:89:22:b4:78:1c:0a:6b:
b6:e8:37:c6:3e:9e:54:2a:7c:95:52:3c:ba:5b:3a:d6:24:f0:
64:3f:3e:59:22:e6:6a:f8:4d:b1:68:72:51:fd:1a:48:4d:7a:
cf:83:09:2b:52:28:15:39:25:c5:a7:3c:5d:ee:5b:76:5f:f7:
d9:be:96:a7:15:17:87:75:48:2b:21:f9:5a:e5:a9:be:cb:7d:
99:a1:e1:a9:5b:77:39:7d:a5:f8:9c:e7:4d:4b:c9:ee:fb:f0:
52:59:70:ef:38:ce:d9:d8:4e:9d:9f:5b:91:d9:08:9c:1c:62:
99:52:eb:52:03:3d:7b:05:79:13:b7:7a:74:8c:fb:08:e3:8b:
ca:06:98:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:36 2024 by rpki-client on console-fra.rpki-client.org