Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5f18eb-0ba1-421f-acd4-ba18060a6630/1/JTPflCsevpXAmdUmIxFdVcREwfs.roa
File: JTPflCsevpXAmdUmIxFdVcREwfs.roa (raw, json)
Hash identifier: ub0A430bzLpvVjvjEzI4PayEWuy5XJPSxZrVmnBg9PE=
Subject key identifier: 25:33:DF:94:2B:1E:BE:95:C0:99:D5:26:23:11:5D:55:C4:44:C1:FB
Certificate issuer: /CN=82dfd470782f8c4b359d7b9ffad3f660f6a42c32
Certificate serial: 01856D81A6965DDEC490666C4509846A95C0
Authority key identifier: 82:DF:D4:70:78:2F:8C:4B:35:9D:7B:9F:FA:D3:F6:60:F6:A4:2C:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gt_UcHgvjEs1nXuf-tP2YPakLDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5f18eb-0ba1-421f-acd4-ba18060a6630/1/JTPflCsevpXAmdUmIxFdVcREwfs.roa
Signing time: Sun 01 Jan 2023 13:24:51 +0000
ROA not before: Sun 01 Jan 2023 13:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202762
IP address blocks: 185.155.74.0/24 maxlen: 24
185.155.72.0/24 maxlen: 24
185.155.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:a6:96:5d:de:c4:90:66:6c:45:09:84:6a:95:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82dfd470782f8c4b359d7b9ffad3f660f6a42c32
Validity
Not Before: Jan 1 13:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2533df942b1ebe95c099d52623115d55c444c1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b3:7b:cd:61:81:33:67:4d:c5:93:4e:3a:f7:
c0:50:b4:45:0c:83:39:9c:72:9c:ab:f7:38:e2:01:
da:30:cc:93:51:4a:46:a0:71:5f:a9:d2:a3:00:05:
26:43:36:77:06:1a:31:65:8a:69:fd:7d:81:25:6b:
ef:ee:6e:04:15:ca:b6:3a:fc:f7:d7:fc:71:da:4d:
ab:7d:52:7a:93:c6:33:32:b8:4e:91:0f:15:65:a9:
37:d2:8e:cd:0c:ee:3d:bd:46:15:46:5f:25:83:3c:
19:d6:ef:c5:64:04:ae:63:b1:b9:3d:1f:d4:36:f7:
23:1a:2d:89:57:3f:9b:3f:d9:5e:2b:9b:32:0e:41:
13:d8:3b:66:eb:7d:cf:0e:66:c0:22:c5:04:d1:3c:
38:da:44:0c:48:89:f7:44:72:bb:ac:ff:10:ac:ca:
10:f8:af:43:d7:34:83:ef:e7:6b:4f:05:81:b8:e2:
e3:c9:97:9e:49:e4:26:60:f0:49:ad:4b:05:b0:d9:
b3:13:c1:fa:86:1b:8e:f2:1c:51:53:60:50:2b:59:
55:e1:cc:b2:98:e7:c4:40:ac:2e:f9:24:cb:e1:d0:
e3:ab:1e:a1:ea:c2:88:88:f2:82:c0:35:f8:ba:3a:
68:04:97:4d:f3:32:68:b3:46:1c:25:e0:b7:24:4c:
af:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:33:DF:94:2B:1E:BE:95:C0:99:D5:26:23:11:5D:55:C4:44:C1:FB
X509v3 Authority Key Identifier:
keyid:82:DF:D4:70:78:2F:8C:4B:35:9D:7B:9F:FA:D3:F6:60:F6:A4:2C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gt_UcHgvjEs1nXuf-tP2YPakLDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5f18eb-0ba1-421f-acd4-ba18060a6630/1/JTPflCsevpXAmdUmIxFdVcREwfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5f18eb-0ba1-421f-acd4-ba18060a6630/1/gt_UcHgvjEs1nXuf-tP2YPakLDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.72.0-185.155.74.255
Signature Algorithm: sha256WithRSAEncryption
46:64:31:20:55:ab:77:6a:3d:05:d3:be:22:4f:c6:78:f8:60:
f5:2c:6e:8e:38:d0:5b:bd:3a:3b:e1:97:96:b5:e1:a2:5a:0b:
bf:24:13:f5:71:97:12:2a:3c:f2:e2:05:03:27:78:cb:f3:15:
96:9c:17:02:44:be:0d:3c:e4:39:44:4c:b4:08:8d:ee:e1:2e:
30:bc:aa:d2:d0:1e:0c:3f:b7:cf:05:ed:9b:d2:6f:42:49:bf:
a9:82:00:ab:5a:5b:72:dc:02:2c:88:ed:c4:93:06:d3:88:be:
9f:67:4c:a4:5d:5f:22:85:72:c7:17:3b:3b:0e:a6:19:b1:93:
a7:29:f6:9c:bd:79:33:54:ec:25:13:04:2a:c9:f7:95:1e:12:
45:f0:a5:59:47:9c:1b:ee:10:aa:58:97:41:17:4b:45:ac:f4:
2c:4d:13:3c:6d:c4:45:a3:c1:cf:7f:47:a4:69:3c:d8:37:22:
23:30:bf:a4:7a:47:2f:66:31:f7:cb:9e:3c:8f:60:42:d1:ab:
8f:19:ca:46:a6:9f:f0:45:34:77:21:83:0a:1b:9e:00:2d:90:
2e:25:4c:7f:a2:25:32:ce:0a:41:7a:63:be:36:6b:be:fb:99:
4c:fc:77:a2:c5:53:87:a7:af:5a:82:39:16:ca:73:11:e0:69:
cf:d0:89:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:38 2024 by rpki-client on console-ams.rpki-client.org