Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/133c6c-46ce-4447-8b93-15bb10dddffb/1/8KTLKY8cC2wU3e3Dw0RArovK6lU.roa
File: 8KTLKY8cC2wU3e3Dw0RArovK6lU.roa (raw, json)
Hash identifier: 7lhKo7rhBiNDLQ45dJVoNwJyiwAskEwZPixev0wjyV0=
Subject key identifier: F0:A4:CB:29:8F:1C:0B:6C:14:DD:ED:C3:C3:44:40:AE:8B:CA:EA:55
Certificate issuer: /CN=e84edd1dca36afb77ff89e9ae858110ab313894a
Certificate serial: 03FB7768
Authority key identifier: E8:4E:DD:1D:CA:36:AF:B7:7F:F8:9E:9A:E8:58:11:0A:B3:13:89:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E7dHco2r7d_-J6a6FgRCrMTiUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/133c6c-46ce-4447-8b93-15bb10dddffb/1/8KTLKY8cC2wU3e3Dw0RArovK6lU.roa
Signing time: Sat 01 Jan 2022 12:05:21 +0000
ROA not before: Sat 01 Jan 2022 12:05:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48504
IP address blocks: 185.117.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66811752 (0x3fb7768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84edd1dca36afb77ff89e9ae858110ab313894a
Validity
Not Before: Jan 1 12:05:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0a4cb298f1c0b6c14ddedc3c34440ae8bcaea55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:74:c0:0f:e0:53:a8:da:e6:2d:3d:19:10:
44:57:74:56:11:1c:47:ca:4d:7f:94:7e:c0:d7:33:
5e:e2:bf:6c:70:15:ba:b1:d5:b4:63:fa:7e:8b:e9:
2d:e6:62:9e:d8:d1:2d:06:87:d4:68:de:10:c1:de:
a7:a4:8c:64:b5:01:d3:2b:5a:22:f2:f7:2f:53:39:
82:f3:5e:04:0f:e2:a6:88:65:c2:3f:4a:af:1e:2e:
82:72:91:10:bb:6b:5e:bc:fe:9b:c9:b5:14:60:e8:
4c:f7:1f:2a:48:a2:2c:e3:f2:67:88:3d:a4:74:15:
24:39:c1:96:81:14:65:1a:03:0a:c2:ac:98:79:c1:
24:30:86:2a:ea:18:27:5c:8d:c8:06:8b:38:11:f8:
33:91:3b:b3:8c:4f:7c:ee:c3:71:45:f3:15:e4:75:
5d:67:33:ca:ad:f5:ff:de:a5:cd:30:51:af:11:b1:
3d:20:e3:cd:df:fb:e8:27:a9:b5:c6:67:56:2b:90:
c1:5e:17:f4:8e:cb:9f:0d:37:46:fb:87:c2:9c:34:
09:38:b7:c7:69:69:6a:84:ad:4a:8d:f1:88:09:66:
98:5c:17:f6:98:49:d2:b5:ad:9a:e0:64:f4:dd:54:
ec:60:80:a8:64:96:36:74:45:55:41:9e:b8:c5:1f:
93:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A4:CB:29:8F:1C:0B:6C:14:DD:ED:C3:C3:44:40:AE:8B:CA:EA:55
X509v3 Authority Key Identifier:
keyid:E8:4E:DD:1D:CA:36:AF:B7:7F:F8:9E:9A:E8:58:11:0A:B3:13:89:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E7dHco2r7d_-J6a6FgRCrMTiUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/133c6c-46ce-4447-8b93-15bb10dddffb/1/8KTLKY8cC2wU3e3Dw0RArovK6lU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/133c6c-46ce-4447-8b93-15bb10dddffb/1/6E7dHco2r7d_-J6a6FgRCrMTiUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.36.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:73:8e:46:a9:d5:0c:41:d6:75:e0:b7:a1:57:6b:d6:33:15:
97:13:04:2c:6c:1a:63:58:8a:87:06:d1:50:71:59:09:73:f0:
a9:a7:83:b8:86:da:1d:5e:7c:72:20:c9:92:8a:5a:30:a0:f1:
d0:22:95:e4:5b:1b:c8:2e:67:f9:b8:eb:84:bd:a0:e4:d1:39:
44:fd:cc:20:43:35:8e:27:33:33:74:a3:2e:37:65:1d:35:b1:
e0:c9:6f:6f:b9:cc:fa:e5:3f:46:36:5a:96:b5:3a:53:e2:7b:
5e:4c:c0:b5:fb:b2:78:6f:a3:fb:bb:aa:fb:85:bc:13:6d:7d:
cc:d3:56:5b:a0:9b:47:8f:18:20:be:cc:48:c7:c6:fc:81:f0:
c5:e8:1b:fb:60:fd:1e:bf:8c:dd:d8:e5:9a:f5:ec:7b:c9:6d:
3f:96:73:9e:5e:1c:44:2c:85:7f:e4:a6:07:21:66:d1:92:86:
18:fd:32:88:8a:ed:33:e8:06:67:f2:fa:e1:3c:76:44:08:64:
4e:31:6b:3e:82:dc:77:ec:f6:d5:b9:e7:48:bb:b8:c2:4e:87:
38:cd:97:93:b9:76:88:8e:8a:85:ca:bb:24:ab:d0:77:f1:ec:
fe:c1:c1:ba:49:43:56:e1:71:72:1c:13:17:18:b9:d4:4f:7a:
d1:d6:17:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:15 2023 by rpki-client on console-fra.rpki-client.org