Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/_8iW-rQ3mbzU4ghczv2IbPnKZWk.roa
File: _8iW-rQ3mbzU4ghczv2IbPnKZWk.roa (raw, json)
Hash identifier: IdGyKqOVWQvPI3mtLvwv90N5aWgK3eU3e3YZFWG1mTk=
Subject key identifier: FF:C8:96:FA:B4:37:99:BC:D4:E2:08:5C:CE:FD:88:6C:F9:CA:65:69
Certificate issuer: /CN=73588934a0b0d648daf94dd9e629d3dd22ed5abf
Certificate serial: 018CB5929B945BD6A7234C1B6EF0AE8A58E9
Authority key identifier: 73:58:89:34:A0:B0:D6:48:DA:F9:4D:D9:E6:29:D3:DD:22:ED:5A:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1iJNKCw1kja-U3Z5inT3SLtWr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/_8iW-rQ3mbzU4ghczv2IbPnKZWk.roa
Signing time: Fri 29 Dec 2023 12:35:33 +0000
ROA not before: Fri 29 Dec 2023 12:35:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203377
IP address blocks: 185.136.205.0/24 maxlen: 24
185.207.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b5:92:9b:94:5b:d6:a7:23:4c:1b:6e:f0:ae:8a:58:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73588934a0b0d648daf94dd9e629d3dd22ed5abf
Validity
Not Before: Dec 29 12:35:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffc896fab43799bcd4e2085ccefd886cf9ca6569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:22:98:87:87:9d:4b:00:be:e3:d7:8f:d9:fd:
87:64:50:07:23:15:5a:2c:b4:d5:ea:05:46:49:c0:
05:8c:3d:e9:2b:18:6a:ac:c7:e9:47:36:c0:a6:e2:
8a:84:c1:88:1a:40:f6:97:34:8d:a7:f4:e1:1b:ff:
3d:4d:eb:71:84:2b:c0:a8:1c:34:6c:1d:71:28:e0:
bf:cd:cf:36:af:7f:87:69:98:63:89:e6:9e:21:fa:
c6:00:e0:6c:28:55:72:a5:b2:9a:62:ba:bf:34:9e:
ce:67:fb:37:69:e1:ea:c5:18:7c:d9:72:7a:84:64:
fa:10:16:fa:4b:a8:30:e9:da:9c:b4:fa:0c:50:39:
17:dd:44:78:26:50:5c:d6:48:49:20:50:61:5a:de:
4f:15:f6:5b:94:56:49:42:6a:5a:0e:e4:a7:52:4f:
57:45:9f:c0:02:b0:d4:0f:60:44:c6:e8:2f:b6:20:
dd:5c:74:14:a1:4b:96:a7:1a:eb:64:68:b2:f3:c1:
b2:c4:72:50:57:d2:ff:38:8e:59:3b:c2:9f:f1:7a:
e0:74:0b:cd:2a:71:c9:0e:74:22:8b:e6:fa:f9:8f:
47:9b:07:a4:23:4b:9f:1f:0f:38:7e:0e:76:57:e9:
57:df:d9:5a:52:22:3a:b3:26:10:a9:cd:ac:b3:39:
15:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C8:96:FA:B4:37:99:BC:D4:E2:08:5C:CE:FD:88:6C:F9:CA:65:69
X509v3 Authority Key Identifier:
keyid:73:58:89:34:A0:B0:D6:48:DA:F9:4D:D9:E6:29:D3:DD:22:ED:5A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1iJNKCw1kja-U3Z5inT3SLtWr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/_8iW-rQ3mbzU4ghczv2IbPnKZWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/c1iJNKCw1kja-U3Z5inT3SLtWr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.205.0/24
185.207.39.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:a0:f4:a7:fb:78:0e:25:c9:4e:a3:7f:14:af:06:12:84:82:
85:f0:54:75:df:95:4d:5e:88:30:55:48:36:ef:97:be:42:5b:
2b:2f:d9:44:40:7e:e0:df:a6:63:94:97:e6:11:40:ff:7f:65:
c6:ee:06:3f:87:46:62:1d:49:7e:9f:fc:96:45:fa:58:ac:4c:
e9:0e:4d:c9:3a:8a:72:3a:4b:eb:bb:9d:29:c3:34:97:0e:9d:
ef:17:fa:67:7a:06:93:5f:6a:9c:7d:fa:14:76:12:91:39:77:
51:b5:53:21:f5:06:42:ce:07:42:c9:84:9c:99:1c:3d:38:07:
f4:1f:f2:14:4b:b7:13:e5:cc:77:a2:b1:a3:63:72:42:07:52:
fb:f6:45:e6:fe:1e:25:a9:35:04:46:66:50:3c:c2:20:1f:d7:
af:0b:08:50:72:2f:af:07:2b:3e:3b:af:56:30:2f:73:22:ff:
04:e7:9a:5a:8b:72:e3:1f:f4:e7:6f:a1:88:a8:a3:01:19:9d:
12:03:1f:09:5a:22:0c:7e:1c:ef:13:22:3f:19:08:0b:ac:aa:
1b:72:97:fc:74:c5:d4:10:aa:c5:11:52:5d:78:88:9a:a6:8a:
70:a8:80:1a:2a:3a:f7:cb:d5:74:9c:3e:b6:5b:5b:67:92:b5:
67:54:d5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:10 2024 by rpki-client on console-ams.rpki-client.org