Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/DLkzNfgRNyB2xNseBETRzeiZn1Q.roa
File: DLkzNfgRNyB2xNseBETRzeiZn1Q.roa (raw, json)
Hash identifier: UWP7uWmUKMAqCDBB4Aen6oPcCKLkApw+j+tNS49ms6U=
Subject key identifier: 0C:B9:33:35:F8:11:37:20:76:C4:DB:1E:04:44:D1:CD:E8:99:9F:54
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 018BE842EB3F523014DBC90D60D8FD391CAD
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/DLkzNfgRNyB2xNseBETRzeiZn1Q.roa
Signing time: Sun 19 Nov 2023 15:46:21 +0000
ROA not before: Sun 19 Nov 2023 15:46:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49022
IP address blocks: 185.190.25.0/24 maxlen: 24
185.105.238.0/24 maxlen: 24
45.139.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e8:42:eb:3f:52:30:14:db:c9:0d:60:d8:fd:39:1c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Nov 19 15:46:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cb93335f811372076c4db1e0444d1cde8999f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7e:ac:8a:73:3c:59:cb:e3:47:74:a3:aa:4a:
fc:f4:fe:1d:14:5f:70:40:e5:77:8f:88:2d:b9:e4:
a9:38:0e:a4:c8:1f:99:7e:0f:ae:31:df:31:e1:79:
d9:68:1b:b7:d6:ba:14:49:0e:85:82:e8:b6:40:ba:
3e:b6:cc:89:6a:01:3f:8e:01:ba:a5:2e:32:06:29:
37:ca:b9:0a:81:0d:80:61:96:79:59:65:43:62:bb:
70:e2:52:d9:b7:34:81:77:cc:7a:e5:75:35:8b:fa:
1d:c9:1a:d2:4d:75:0c:1e:6f:d9:28:8e:ea:7b:b7:
5d:cf:17:e9:da:f9:17:d1:00:24:b4:29:65:32:ff:
e3:2d:56:71:63:24:fa:57:1b:2e:bb:08:b4:43:6d:
fb:f5:60:5d:a3:1e:b3:36:04:81:d9:2b:fc:56:b9:
b4:16:72:2f:1f:79:24:56:b7:b3:e6:0e:40:46:13:
e4:1d:e1:6f:ac:e5:da:f5:28:f8:f9:28:1b:08:7b:
d5:b8:b1:54:04:0f:31:eb:22:21:af:2c:6b:23:85:
ce:4f:0e:75:ba:bc:3d:3c:b0:4a:a2:43:42:f0:39:
94:54:c9:1c:45:3e:2a:a6:03:cd:22:d5:c0:f5:4d:
19:90:12:1c:60:b7:91:f1:3a:5f:80:77:3e:9d:3e:
ea:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B9:33:35:F8:11:37:20:76:C4:DB:1E:04:44:D1:CD:E8:99:9F:54
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/DLkzNfgRNyB2xNseBETRzeiZn1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.8.0/24
185.105.238.0/24
185.190.25.0/24
Signature Algorithm: sha256WithRSAEncryption
43:b6:11:15:aa:f7:ec:68:ee:2b:ef:29:d1:35:41:a5:e4:e1:
f6:f1:f8:c3:e1:c2:4e:7f:b3:54:35:b2:1d:04:f4:e9:9e:ed:
51:e6:fb:1d:7e:8e:98:94:16:5e:3b:d4:f3:bb:3c:ce:9a:4e:
0e:9b:cd:a4:37:ff:71:1a:19:2e:8e:c8:f4:91:c9:32:5f:1b:
39:bc:8b:b4:95:5d:1a:28:80:d1:aa:13:3f:a3:6a:7b:0b:ae:
ae:ed:3e:e2:c7:45:13:76:1f:9a:59:41:ce:14:79:58:5d:6c:
63:cb:24:eb:73:60:9e:76:9d:03:1d:a3:88:c7:2f:6d:ef:80:
74:02:86:ff:e8:99:a2:4a:db:e7:44:2d:3b:bb:aa:7b:e7:bf:
dd:f3:28:a9:d9:d1:87:4e:0f:c7:38:70:46:2d:9a:e6:bb:fb:
09:d4:e6:0f:bc:69:6b:5e:ed:35:bc:b3:11:88:9c:1d:72:bd:
67:41:f2:cd:f2:1d:a0:72:78:7e:b9:2b:ee:4d:ca:af:22:3f:
8f:74:d2:e3:c4:12:04:5e:17:29:9b:98:a3:03:56:dc:d3:c2:
3c:7b:7d:f6:e1:49:fd:a4:3c:8b:bd:bd:31:73:c8:a1:61:b9:
73:a8:bb:ad:2b:f0:c3:ec:b0:9d:a2:8b:1c:ec:95:b5:54:4a:
d8:88:c3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 12:36:28 2023 by rpki-client on console-ams.rpki-client.org