Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/388110-0366-479b-9bf9-50d7f7eaa1ad/1/rNKXP_NpMCRhUaxamBLfp2vJYeQ.roa
File: rNKXP_NpMCRhUaxamBLfp2vJYeQ.roa (raw, json)
Hash identifier: GAKC7yWokZd/j0ihhug2JBC3zbGEfFA1rmw4aF2Tq9E=
Subject key identifier: AC:D2:97:3F:F3:69:30:24:61:51:AC:5A:98:12:DF:A7:6B:C9:61:E4
Certificate issuer: /CN=44f2b4d93b2aaf3a02697223b792f60218cad2b6
Certificate serial: 012E7FBA
Authority key identifier: 44:F2:B4:D9:3B:2A:AF:3A:02:69:72:23:B7:92:F6:02:18:CA:D2:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPK02TsqrzoCaXIjt5L2AhjK0rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/388110-0366-479b-9bf9-50d7f7eaa1ad/1/rNKXP_NpMCRhUaxamBLfp2vJYeQ.roa
Signing time: Sat 01 Jan 2022 07:03:13 +0000
ROA not before: Sat 01 Jan 2022 07:03:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.195.44.0/24 maxlen: 24
185.195.46.0/24 maxlen: 24
185.195.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19824570 (0x12e7fba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f2b4d93b2aaf3a02697223b792f60218cad2b6
Validity
Not Before: Jan 1 07:03:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acd2973ff36930246151ac5a9812dfa76bc961e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:95:b0:0c:74:ec:c3:09:59:0a:0b:62:c2:39:
e8:b8:93:48:4a:69:28:c7:e2:de:37:6e:1f:43:fa:
34:2e:74:18:27:8c:65:21:54:36:ad:79:59:c4:fa:
91:d6:40:00:58:d0:75:86:4b:2c:3b:cd:40:10:44:
f2:94:3a:2a:61:1e:d4:3c:39:32:86:0f:3b:0c:40:
3e:23:16:7a:a5:1a:34:c3:1d:7c:e0:16:44:79:b7:
44:65:96:a3:c1:61:32:17:b1:a1:09:1c:6e:42:73:
c7:9f:d0:bb:4e:5d:d9:9c:93:ab:0a:c2:f8:4e:61:
d2:e7:56:57:b0:27:32:04:48:47:19:53:c5:38:61:
ab:0d:8a:e5:48:f5:ed:2b:54:2c:e5:5a:64:9d:e1:
d9:83:8b:42:9a:ca:d4:6c:ff:f8:02:92:73:3f:4e:
f0:dc:3e:d0:58:db:18:c5:86:9f:90:7a:1e:ae:fd:
f5:f9:3c:e9:e7:7d:73:8a:26:a8:b1:05:a8:7d:ba:
7e:9a:72:ea:81:9f:93:c8:ff:1c:72:bf:6f:9c:e4:
96:30:7e:ab:07:9e:42:83:b1:f2:6b:d9:29:b2:3b:
81:ac:5b:16:9d:8d:b0:36:0a:ac:75:98:63:fe:2c:
36:23:81:1d:8a:73:1f:92:ba:36:00:59:aa:af:98:
95:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D2:97:3F:F3:69:30:24:61:51:AC:5A:98:12:DF:A7:6B:C9:61:E4
X509v3 Authority Key Identifier:
keyid:44:F2:B4:D9:3B:2A:AF:3A:02:69:72:23:B7:92:F6:02:18:CA:D2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPK02TsqrzoCaXIjt5L2AhjK0rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/388110-0366-479b-9bf9-50d7f7eaa1ad/1/rNKXP_NpMCRhUaxamBLfp2vJYeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/388110-0366-479b-9bf9-50d7f7eaa1ad/1/RPK02TsqrzoCaXIjt5L2AhjK0rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.44.0-185.195.46.255
Signature Algorithm: sha256WithRSAEncryption
17:1c:83:b5:eb:c4:6b:c9:24:8d:1d:f2:fa:17:17:e6:06:b2:
bb:6c:3f:fb:3a:3d:cd:56:a6:0d:3a:2f:5c:84:10:c8:94:0a:
e1:88:1d:79:ff:21:cd:f7:3d:50:93:65:8f:78:00:97:ca:a7:
09:af:e5:d1:b2:80:38:30:51:08:8d:80:d3:0b:37:e0:7b:67:
a9:04:60:52:9a:a0:cb:3f:a1:48:76:64:58:89:4d:19:dc:ba:
56:d2:4d:01:cc:bd:9e:5d:ca:dd:fb:96:7d:bf:a3:5f:4f:f8:
a5:3c:ee:7f:30:29:e3:24:47:32:9e:35:97:3f:3a:19:25:24:
c5:85:8d:85:43:fe:8e:3b:e7:9b:b9:e5:42:e8:8c:06:24:5b:
8a:97:d5:88:db:03:93:5b:fc:22:40:01:07:6c:65:5f:9d:5d:
74:55:64:75:17:ac:a7:20:e0:13:d0:07:87:30:06:8d:a7:23:
93:55:ef:ad:c5:1d:aa:a1:20:f3:72:a1:b2:1a:71:1b:f2:65:
82:77:ff:8e:d4:6c:2b:1a:69:19:61:cf:a7:4f:a0:5f:34:43:
f8:88:15:66:8b:79:d8:86:e5:b4:b4:fe:ac:d0:7b:06:72:f2:
4e:f0:f4:15:b6:ff:20:de:76:ba:8d:69:4c:fb:9a:67:6a:61:
2e:c3:b3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:13 2024 by rpki-client on console-ams.rpki-client.org