Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ca5e44-080e-4140-89a1-bfed0092f86a/1/_DVBe-OdPran1Y-siZ1Uq3PXSWo.roa
File: _DVBe-OdPran1Y-siZ1Uq3PXSWo.roa (raw, json)
Hash identifier: cgxpi4K8znpv+DSk38q2vqUXFfJemIYTrNkOQOH8pUs=
Subject key identifier: FC:35:41:7B:E3:9D:3E:B6:A7:D5:8F:AC:89:9D:54:AB:73:D7:49:6A
Certificate issuer: /CN=99fea9717c280ec879335273f022e6b0537455c2
Certificate serial: 018CC492B16F9BA9EC20FAEE0C71B5C795CB
Authority key identifier: 99:FE:A9:71:7C:28:0E:C8:79:33:52:73:F0:22:E6:B0:53:74:55:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf6pcXwoDsh5M1Jz8CLmsFN0VcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/ca5e44-080e-4140-89a1-bfed0092f86a/1/_DVBe-OdPran1Y-siZ1Uq3PXSWo.roa
Signing time: Mon 01 Jan 2024 10:29:57 +0000
ROA not before: Mon 01 Jan 2024 10:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398464
IP address blocks: 185.5.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:b1:6f:9b:a9:ec:20:fa:ee:0c:71:b5:c7:95:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fea9717c280ec879335273f022e6b0537455c2
Validity
Not Before: Jan 1 10:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc35417be39d3eb6a7d58fac899d54ab73d7496a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e4:fd:ea:39:c4:79:67:25:eb:e9:ab:e2:4a:
ce:3f:a1:8a:01:9e:08:b1:81:9b:6b:b0:59:41:6d:
08:ad:98:a6:fa:d1:32:38:36:70:d4:2a:e1:b1:58:
1f:9b:d6:e1:d2:87:82:b5:ad:33:45:bf:16:9e:6c:
88:db:bc:97:42:93:f2:56:5a:e3:4b:cb:14:f4:ec:
7e:54:fd:5f:45:f9:6f:89:29:40:6a:b4:c2:88:68:
2c:53:31:e3:2e:6c:07:56:1a:cd:d0:9d:2c:74:4f:
33:af:be:58:20:c6:58:2f:d2:65:25:68:77:dd:fb:
22:1c:85:c3:7c:f5:b1:db:a7:b8:c8:c1:ee:dd:e2:
cd:41:09:b3:63:9f:ac:5a:a9:da:33:a1:83:f1:c7:
e4:87:2e:67:4d:86:0b:2d:28:6b:60:3e:aa:a4:7f:
15:e4:1f:79:b1:54:7c:33:fa:f0:1b:ee:ab:f8:a9:
38:13:d0:51:49:c3:99:d9:be:4d:24:0a:e2:38:68:
3d:22:50:9a:5a:bc:8d:2c:64:7d:d3:d7:0a:e4:e5:
75:20:d3:b7:81:9e:c2:13:b5:a9:40:14:c4:62:54:
50:00:3e:ff:79:47:f0:b0:29:49:45:ae:50:75:65:
b3:23:75:9d:19:9d:71:b7:b0:4e:e7:10:20:e1:9a:
11:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:35:41:7B:E3:9D:3E:B6:A7:D5:8F:AC:89:9D:54:AB:73:D7:49:6A
X509v3 Authority Key Identifier:
keyid:99:FE:A9:71:7C:28:0E:C8:79:33:52:73:F0:22:E6:B0:53:74:55:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf6pcXwoDsh5M1Jz8CLmsFN0VcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ca5e44-080e-4140-89a1-bfed0092f86a/1/_DVBe-OdPran1Y-siZ1Uq3PXSWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ca5e44-080e-4140-89a1-bfed0092f86a/1/mf6pcXwoDsh5M1Jz8CLmsFN0VcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.147.0/24
Signature Algorithm: sha256WithRSAEncryption
55:9f:59:11:f0:f3:4f:fd:15:8f:07:ed:ab:d0:20:d0:c6:e7:
8d:b0:ad:e8:7f:41:02:ef:06:e6:db:f7:ea:8f:80:82:6d:c3:
21:94:e9:80:57:e3:32:c5:37:92:10:9d:82:02:f4:90:87:ca:
af:e5:71:b0:e8:22:4b:92:db:57:c9:0d:fc:35:cf:85:1a:2a:
f9:25:84:0e:44:49:72:70:61:0c:88:2d:5c:a0:e8:35:49:d8:
22:98:69:6d:fd:bf:fb:af:be:13:44:37:c3:5c:a2:4a:e6:c7:
7f:26:50:23:34:4e:19:b1:56:c7:42:3a:dd:66:05:cc:32:9b:
9d:58:90:5d:ae:f2:1d:b6:71:68:12:04:ea:74:5e:f1:3e:f4:
65:f8:83:db:0a:d7:80:10:05:80:c6:91:e0:b4:6d:09:8a:df:
27:a9:57:53:ec:fb:97:3b:63:c6:d8:7a:8b:35:55:1c:cf:fd:
aa:10:97:44:da:2c:fa:34:9a:85:1c:a1:7b:3b:cb:ac:71:4d:
20:06:dd:80:00:4b:e1:ad:13:39:30:fc:0d:0d:af:09:f7:af:
5a:aa:cd:43:72:39:a6:9e:56:c0:13:f1:55:12:da:9c:f2:13:
db:15:2c:80:d4:e9:a4:1c:84:61:32:59:6d:fc:1a:1f:3a:f3:
63:72:44:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 14:03:31 2024 by rpki-client on console-fra.rpki-client.org