Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/388110-0366-479b-9bf9-50d7f7eaa1ad/1/hGqNGhrL5kd4C7h-q1ubydHt_oY.roa
File: hGqNGhrL5kd4C7h-q1ubydHt_oY.roa (raw, json)
Hash identifier: x+KaIStOZKbGdyZC2ouWNbheSBGChM18fUWJINBJ9cM=
Subject key identifier: 84:6A:8D:1A:1A:CB:E6:47:78:0B:B8:7E:AB:5B:9B:C9:D1:ED:FE:86
Certificate issuer: /CN=44f2b4d93b2aaf3a02697223b792f60218cad2b6
Certificate serial: 012DFDB1
Authority key identifier: 44:F2:B4:D9:3B:2A:AF:3A:02:69:72:23:B7:92:F6:02:18:CA:D2:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPK02TsqrzoCaXIjt5L2AhjK0rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/388110-0366-479b-9bf9-50d7f7eaa1ad/1/hGqNGhrL5kd4C7h-q1ubydHt_oY.roa
Signing time: Sat 01 Jan 2022 07:03:13 +0000
ROA not before: Sat 01 Jan 2022 07:03:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51662
IP address blocks: 185.195.44.0/22 maxlen: 22
185.195.44.0/24 maxlen: 24
185.195.45.0/24 maxlen: 24
185.195.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19791281 (0x12dfdb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f2b4d93b2aaf3a02697223b792f60218cad2b6
Validity
Not Before: Jan 1 07:03:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=846a8d1a1acbe647780bb87eab5b9bc9d1edfe86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:7e:4a:e4:38:af:e6:cc:ec:48:23:3c:f7:
ae:24:f6:5a:32:2e:d4:a9:5d:4a:a5:70:b7:a0:67:
c9:7c:56:e0:cc:bb:d2:c2:28:7f:26:5d:75:4e:c3:
03:1f:04:cb:15:f3:e4:e5:fc:67:06:ed:1b:b4:67:
e6:71:2b:96:8e:52:cf:4c:11:d8:68:fe:1f:b1:90:
85:3e:f9:05:3b:ce:9c:57:c3:67:79:ce:77:a5:24:
d4:11:e5:72:79:cd:13:13:c7:2b:35:7b:34:54:73:
c0:8d:24:c7:83:ec:8e:86:e1:69:cc:34:69:cf:b0:
9b:20:bf:34:bb:83:5e:35:21:49:22:bd:ec:64:e8:
85:49:4a:e4:a4:31:a2:b9:da:27:b4:e8:b0:63:bd:
7c:df:93:ec:02:aa:6e:a2:d9:ff:c2:12:e1:86:b8:
62:ba:40:eb:a4:e0:48:72:83:d8:04:09:4c:f8:5a:
cc:f6:f2:6f:51:2c:32:42:a5:49:a9:ec:12:5c:1e:
96:0e:1f:c7:8c:38:59:3f:8e:03:d1:c6:22:5b:11:
29:b0:c4:72:0d:09:a1:d8:60:94:17:68:31:ab:25:
55:ab:b6:d7:8b:b2:2e:ca:03:51:71:e3:cc:83:9a:
14:a3:5c:22:08:2d:50:e0:b0:cc:89:64:a8:1a:9e:
96:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6A:8D:1A:1A:CB:E6:47:78:0B:B8:7E:AB:5B:9B:C9:D1:ED:FE:86
X509v3 Authority Key Identifier:
keyid:44:F2:B4:D9:3B:2A:AF:3A:02:69:72:23:B7:92:F6:02:18:CA:D2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPK02TsqrzoCaXIjt5L2AhjK0rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/388110-0366-479b-9bf9-50d7f7eaa1ad/1/hGqNGhrL5kd4C7h-q1ubydHt_oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/388110-0366-479b-9bf9-50d7f7eaa1ad/1/RPK02TsqrzoCaXIjt5L2AhjK0rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.44.0/22
Signature Algorithm: sha256WithRSAEncryption
68:82:ad:b7:56:4f:be:85:12:dc:50:14:e9:3c:50:aa:e3:5d:
89:5f:55:2d:24:38:4f:e3:3c:1c:f4:ee:83:90:12:21:06:55:
6a:fe:73:64:a6:64:d5:bd:c4:fc:23:45:03:c5:0d:c1:13:4c:
99:d2:50:2d:a9:66:60:81:6b:14:80:52:08:a3:85:70:c1:dc:
5d:80:fc:03:ca:ac:df:18:54:5b:22:62:be:6f:5a:3d:e1:a0:
03:d3:f4:90:55:df:84:f1:bc:b2:a3:e8:69:a9:10:ce:8f:b4:
2f:7d:d7:fc:80:4d:af:1b:8f:ef:57:03:34:11:35:a9:89:fe:
eb:15:bc:80:d5:a1:90:0d:74:c5:d4:83:2f:7a:5f:1d:cc:ae:
4f:ef:1a:3b:04:82:eb:53:09:90:f4:82:19:89:13:06:0f:ca:
f1:c1:ae:d0:b3:29:7f:8d:83:c9:70:67:bc:fa:f4:30:58:24:
04:bd:ca:8e:ad:32:56:aa:ec:39:ae:80:a3:3c:c7:c5:88:5c:
c6:c2:4a:96:e0:89:0a:17:d0:4c:c1:d6:5b:ab:4c:b6:00:9f:
c4:0f:5d:3e:04:95:b2:da:7a:87:93:57:d2:14:f7:8d:38:0b:
a5:1d:1f:a1:ae:cd:2f:50:05:fc:8e:e6:2c:0b:95:63:bf:0c:
96:3c:13:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:13 2024 by rpki-client on console-ams.rpki-client.org