Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/PmsQYePn-SpC0IUjMzJhHGoehc0.roa
File: PmsQYePn-SpC0IUjMzJhHGoehc0.roa (raw, json)
Hash identifier: 4xtaCSjzBSGteEExQcKD7yWfbtrlp0r3ZATs8Frf3o0=
Subject key identifier: 3E:6B:10:61:E3:E7:F9:2A:42:D0:85:23:33:32:61:1C:6A:1E:85:CD
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 01856F6FFCF84DBA6337B2ACBA7A058DA7DF
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/PmsQYePn-SpC0IUjMzJhHGoehc0.roa
Signing time: Sun 01 Jan 2023 22:24:48 +0000
ROA not before: Sun 01 Jan 2023 22:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200436
IP address blocks: 194.180.224.0/24 maxlen: 24
185.231.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:fc:f8:4d:ba:63:37:b2:ac:ba:7a:05:8d:a7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Jan 1 22:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e6b1061e3e7f92a42d085233332611c6a1e85cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ea:a9:db:cd:71:71:d7:d6:d7:6f:85:3a:a0:
2d:cc:00:c4:2d:84:b8:cb:92:eb:87:2b:85:2e:c6:
6e:92:06:71:66:c3:39:65:e3:b4:06:28:e6:ca:13:
df:5f:7e:32:01:ce:64:64:80:08:ad:d0:75:18:7e:
d0:fe:be:7a:88:72:2d:5c:fd:d4:08:0b:90:74:b8:
6c:a0:c8:43:bc:34:1d:50:5a:e2:b5:d6:c8:eb:61:
f9:1f:6f:2c:e8:9a:d2:ce:3d:1d:9b:bb:6a:4f:58:
1f:8c:0b:db:f6:78:e1:34:33:3d:b9:d9:e2:26:58:
8c:82:a4:5b:d5:a7:6f:ba:3b:3a:a0:38:67:8d:c3:
69:20:ef:7e:07:7b:95:03:8d:7f:d4:ae:dc:35:07:
50:1a:12:8c:6a:6b:96:48:a3:82:ae:e2:34:d7:c7:
63:96:10:66:92:9e:b3:c5:c1:9a:85:79:2c:14:94:
e7:ac:e8:3a:0d:bd:68:17:0c:c7:11:70:30:04:78:
de:56:69:a7:73:b5:3e:06:01:fa:88:23:31:60:e2:
2a:ad:66:8c:6a:39:92:03:82:2f:69:33:e9:05:ca:
fa:a4:97:b2:cd:c0:d3:14:8b:cf:f4:2c:c1:50:50:
08:38:c6:3b:15:86:16:df:8a:05:12:20:ad:e2:84:
c2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6B:10:61:E3:E7:F9:2A:42:D0:85:23:33:32:61:1C:6A:1E:85:CD
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/PmsQYePn-SpC0IUjMzJhHGoehc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.113.0/24
194.180.224.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:7a:4f:f4:5e:ff:eb:6c:72:18:49:cf:01:b3:62:04:07:e6:
e8:3b:38:aa:3b:2a:7a:e4:af:33:09:87:4c:b0:55:26:e5:f3:
e7:3e:09:62:24:6f:14:7a:e5:e8:ad:35:fa:e7:7e:6b:dc:1e:
71:52:9b:6c:1e:39:06:bd:dd:94:da:43:62:5b:54:f8:f4:a3:
3d:af:97:aa:4f:d3:71:b0:a2:c3:17:6c:56:6b:de:1a:50:37:
05:3e:90:53:19:a7:ed:9c:af:45:42:25:82:d9:ff:a5:91:de:
e1:96:40:8a:17:7a:da:de:a2:b6:1a:a9:ae:6a:20:8a:4f:aa:
33:c1:c1:62:d0:38:38:ed:97:7e:17:4a:b7:9c:94:9b:11:e0:
5e:2b:1a:94:a2:91:19:0d:66:86:ff:5c:33:f2:54:be:fc:fb:
7a:43:39:80:ae:3f:a1:55:6e:02:fc:5f:47:87:97:cf:33:59:
21:f9:09:14:13:12:89:55:e9:56:cc:5f:24:66:da:74:66:d3:
6b:d5:f4:84:88:71:ae:93:32:25:9a:2d:2e:e1:02:d9:19:1f:
2c:15:a1:15:38:53:59:59:5a:27:fb:16:5e:0e:de:d3:af:fa:
83:46:58:22:a1:4c:8f:a7:e3:4f:9d:05:f4:b8:66:bf:82:cc:
25:a4:d6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:17 2024 by rpki-client on console-ams.rpki-client.org