Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4343bf-8e7e-4bc5-8863-61ab65b9264b/1/RCIpfsccQrPVhTRU_sVAbb97Vd8.roa
File: RCIpfsccQrPVhTRU_sVAbb97Vd8.roa (raw, json)
Hash identifier: L5PbH1hhIIiNGH67/SZTgNCvdOTR3Q9j692VOT4ErEQ=
Subject key identifier: 44:22:29:7E:C7:1C:42:B3:D5:85:34:54:FE:C5:40:6D:BF:7B:55:DF
Certificate issuer: /CN=24aa605ea9bbac91cc5a7e2522079afb16b7f1f6
Certificate serial: 0185704BB25FF6B84ABC2446A6CD4D402BE3
Authority key identifier: 24:AA:60:5E:A9:BB:AC:91:CC:5A:7E:25:22:07:9A:FB:16:B7:F1:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKpgXqm7rJHMWn4lIgea-xa38fY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4343bf-8e7e-4bc5-8863-61ab65b9264b/1/RCIpfsccQrPVhTRU_sVAbb97Vd8.roa
Signing time: Mon 02 Jan 2023 02:24:47 +0000
ROA not before: Mon 02 Jan 2023 02:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203228
IP address blocks: 185.124.72.0/22 maxlen: 22
185.124.75.0/24 maxlen: 24
2a03:93e0::/32 maxlen: 32
2a03:93e0:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:b2:5f:f6:b8:4a:bc:24:46:a6:cd:4d:40:2b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24aa605ea9bbac91cc5a7e2522079afb16b7f1f6
Validity
Not Before: Jan 2 02:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4422297ec71c42b3d5853454fec5406dbf7b55df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:83:bc:7e:00:44:14:aa:62:b5:95:8c:b9:c7:
f8:f8:44:2c:44:73:8f:a1:f6:4d:f4:1c:b2:fc:66:
75:be:01:6f:22:56:be:37:b6:36:59:22:69:57:cc:
65:95:6f:6f:ad:3e:cd:84:a1:38:f6:c4:38:03:3b:
36:33:8f:cc:f2:e4:5d:e0:af:47:a4:c8:e0:47:c0:
1a:e9:04:11:c2:73:72:a7:78:76:de:ca:b4:54:bb:
79:bf:55:29:82:31:27:7d:c3:4e:4b:92:da:8e:f4:
14:15:38:b7:32:1b:16:5c:75:26:51:d3:32:af:31:
f5:61:60:73:19:53:b9:36:77:1c:25:2f:71:2b:f5:
31:8b:b2:3b:d1:e0:06:d6:0b:2b:af:ee:8b:0e:dc:
77:3b:2a:b9:82:ad:c3:e5:6c:c4:3d:9b:a2:2d:14:
c0:8f:4b:40:08:40:56:5f:84:34:36:e6:49:85:c6:
2d:a0:e4:ba:c5:b5:d2:6e:6b:cc:50:87:c9:12:3b:
4c:1e:54:79:97:f8:fa:04:76:00:c5:d0:79:98:ef:
99:f8:e9:76:e9:eb:3b:83:85:ce:09:4e:c5:c0:9d:
77:d2:ab:f6:6f:fb:e0:45:fd:6f:05:c5:c4:fa:0a:
ff:5e:c8:01:3d:31:d3:08:dc:d7:50:03:40:85:cc:
57:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:22:29:7E:C7:1C:42:B3:D5:85:34:54:FE:C5:40:6D:BF:7B:55:DF
X509v3 Authority Key Identifier:
keyid:24:AA:60:5E:A9:BB:AC:91:CC:5A:7E:25:22:07:9A:FB:16:B7:F1:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKpgXqm7rJHMWn4lIgea-xa38fY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4343bf-8e7e-4bc5-8863-61ab65b9264b/1/RCIpfsccQrPVhTRU_sVAbb97Vd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4343bf-8e7e-4bc5-8863-61ab65b9264b/1/JKpgXqm7rJHMWn4lIgea-xa38fY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.72.0/22
IPv6:
2a03:93e0::/32
Signature Algorithm: sha256WithRSAEncryption
50:5a:50:06:c0:ae:c7:bd:02:5f:fd:15:b6:03:84:64:45:91:
c7:83:aa:6d:c4:c8:f7:19:c9:49:71:d6:e4:52:3e:5c:90:e6:
53:5c:2d:51:66:f2:85:7e:7e:e3:11:2c:7a:5b:7d:47:ef:1f:
d3:67:d4:cf:cc:a8:21:8a:53:e9:c6:ef:31:1d:ee:90:ff:ca:
29:0d:06:67:fb:b3:6e:d6:e7:2b:69:5c:80:1d:17:f3:f6:32:
6d:7a:81:ea:dd:39:31:03:4c:a1:86:c6:33:c9:4e:6c:fa:a1:
8e:e2:d4:91:27:18:bc:95:f3:10:b0:8a:ea:98:6b:8a:5a:54:
dd:5e:48:c6:3d:e6:c6:f7:9b:18:1d:be:d5:69:dc:1e:f3:b0:
72:17:18:ea:4d:2a:9e:ca:26:6d:9e:4c:83:cc:be:5d:c8:95:
1a:c5:ab:bb:ac:c2:53:1e:3b:08:c8:48:0a:b6:41:f0:af:1f:
42:7b:a0:bb:02:52:ec:27:4d:9d:be:30:e9:ba:ba:5e:83:b8:
63:ca:dd:8e:11:8c:73:61:d0:b8:16:9c:a6:32:2a:ee:a5:e8:
d9:a8:b5:58:7b:11:49:1d:7d:ab:13:4f:e0:60:23:eb:da:23:
f1:ef:eb:bc:87:5b:53:65:10:2f:eb:79:8d:d2:0d:63:d4:b7:
19:05:86:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:58 2024 by rpki-client on console-fra.rpki-client.org