Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/388110-0366-479b-9bf9-50d7f7eaa1ad/1/ObTLklVi-Pc8SQ_RvT41ipYppu0.roa
File: ObTLklVi-Pc8SQ_RvT41ipYppu0.roa (raw, json)
Hash identifier: ZFpRUEfdOAGIprDHemve5NO11uX9zttEaCcmybYU1Fk=
Subject key identifier: 39:B4:CB:92:55:62:F8:F7:3C:49:0F:D1:BD:3E:35:8A:96:29:A6:ED
Certificate issuer: /CN=44f2b4d93b2aaf3a02697223b792f60218cad2b6
Certificate serial: 024474D6
Authority key identifier: 44:F2:B4:D9:3B:2A:AF:3A:02:69:72:23:B7:92:F6:02:18:CA:D2:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPK02TsqrzoCaXIjt5L2AhjK0rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/388110-0366-479b-9bf9-50d7f7eaa1ad/1/ObTLklVi-Pc8SQ_RvT41ipYppu0.roa
Signing time: Wed 04 May 2022 08:42:32 +0000
ROA not before: Wed 04 May 2022 08:42:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.195.44.0/24 maxlen: 24
185.195.44.0/22 maxlen: 22
185.195.46.0/24 maxlen: 24
185.195.45.0/24 maxlen: 24
185.195.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38040790 (0x24474d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f2b4d93b2aaf3a02697223b792f60218cad2b6
Validity
Not Before: May 4 08:42:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39b4cb925562f8f73c490fd1bd3e358a9629a6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3f:4c:9e:54:e6:92:0d:ec:e0:83:b8:78:55:
eb:ec:65:4b:65:c7:22:4a:f0:4b:f7:31:27:b3:49:
92:c6:35:54:b7:b6:f8:29:16:a8:4d:35:39:a5:a2:
b2:f4:ae:d3:67:58:99:8e:44:43:83:5f:aa:bb:97:
9f:32:bf:ea:b4:72:e0:5a:69:ea:34:8f:cd:cc:7f:
15:0c:a6:42:ec:6f:ad:b5:ae:45:cf:f5:0b:1f:b8:
2f:8f:76:64:25:62:a6:25:0a:85:97:67:b2:cc:36:
20:71:0d:c0:f1:91:f5:8b:77:bc:a2:e3:9e:02:6c:
c0:c2:4f:33:d3:6d:6c:b0:66:da:fc:9b:c6:77:ae:
8d:60:09:a0:66:bd:db:4f:6d:96:19:be:c1:84:85:
97:a7:13:6a:15:86:1c:da:7f:71:40:68:db:e9:c2:
ad:13:e2:85:c7:15:6f:0f:6e:f4:c1:5f:6a:f9:10:
59:df:10:66:62:01:22:d4:93:e3:3e:05:4b:eb:2b:
69:12:bb:56:ea:2e:e1:07:c7:14:7e:6c:05:25:93:
90:15:bd:0d:27:f4:f0:01:9a:63:78:cf:21:5f:a9:
ef:e4:c9:9c:1b:27:e6:d7:e2:cd:b4:ae:4e:04:52:
07:46:bd:74:fe:53:59:c4:cf:f5:4c:d2:fd:34:ed:
c3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B4:CB:92:55:62:F8:F7:3C:49:0F:D1:BD:3E:35:8A:96:29:A6:ED
X509v3 Authority Key Identifier:
keyid:44:F2:B4:D9:3B:2A:AF:3A:02:69:72:23:B7:92:F6:02:18:CA:D2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPK02TsqrzoCaXIjt5L2AhjK0rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/388110-0366-479b-9bf9-50d7f7eaa1ad/1/ObTLklVi-Pc8SQ_RvT41ipYppu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/388110-0366-479b-9bf9-50d7f7eaa1ad/1/RPK02TsqrzoCaXIjt5L2AhjK0rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.44.0/22
Signature Algorithm: sha256WithRSAEncryption
67:34:22:94:35:8a:34:3d:82:f2:2d:f1:06:76:13:32:22:e8:
04:3b:b3:83:fc:31:2c:a2:ca:75:0d:70:28:7e:88:e7:42:1f:
be:89:86:cd:8a:d4:01:fa:8a:7e:fd:1d:6c:25:3a:e4:99:e2:
b4:23:9d:95:c4:c6:82:87:23:3f:b4:10:7c:86:09:2e:6c:86:
32:1f:0e:89:46:60:be:ce:d4:90:ce:bd:a2:a8:a9:85:5e:38:
1f:72:23:2b:50:b6:78:a1:fb:b8:09:1b:ea:b6:2c:b9:ea:ff:
05:0f:2f:3f:8b:c0:21:0a:d5:79:d7:ef:17:78:99:57:d4:f4:
c5:a2:17:d5:86:ef:2f:89:9d:7e:f5:7b:9a:26:f1:56:30:d1:
08:4e:32:01:88:86:8e:fd:b3:69:3f:aa:52:08:1e:71:44:b8:
a6:da:dc:d5:28:51:4f:46:f8:50:e2:40:d0:f3:53:ba:2d:0c:
45:c1:3f:9e:02:63:92:80:a9:1a:88:bd:5a:b2:91:bb:4f:79:
a4:17:34:b1:ea:8c:a0:cd:97:fc:6f:b2:3f:e0:57:70:0a:63:
1d:61:5a:52:46:d1:a6:92:33:71:38:29:c3:53:e4:fb:bd:04:
ad:7c:41:02:d6:ea:c1:46:d9:63:71:2c:a1:cc:ec:16:45:04:
30:3f:eb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:13 2024 by rpki-client on console-ams.rpki-client.org