Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/oJdale0lT1d6QAZyEEjTKrFoQ1E.roa
File: oJdale0lT1d6QAZyEEjTKrFoQ1E.roa (raw, json)
Hash identifier: MluNdalx2pyNBzxqAsnH1qRxsZrfrN1SNJQZY8iuvZo=
Subject key identifier: A0:97:5A:95:ED:25:4F:57:7A:40:06:72:10:48:D3:2A:B1:68:43:51
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 018BAFE180D6752C252C6EC226A06350E762
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/oJdale0lT1d6QAZyEEjTKrFoQ1E.roa
Signing time: Wed 08 Nov 2023 17:01:13 +0000
ROA not before: Wed 08 Nov 2023 17:01:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60542
IP address blocks: 185.190.25.0/24 maxlen: 24
45.139.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:af:e1:80:d6:75:2c:25:2c:6e:c2:26:a0:63:50:e7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Nov 8 17:01:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0975a95ed254f577a4006721048d32ab1684351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1e:9c:09:ba:c8:de:c1:c4:a5:e2:9b:02:1c:
ae:59:e1:c8:d1:c4:c7:09:29:22:f2:f4:32:ee:1a:
ea:36:36:9b:0d:a5:fb:fa:b9:df:1e:38:b5:0e:eb:
0d:69:90:21:c7:b9:c4:35:c9:be:b0:ca:0d:90:12:
00:19:93:5e:37:ab:f8:74:62:6a:de:00:ed:5f:60:
03:1b:c7:6b:fb:b1:f4:68:df:c0:15:3e:6e:dd:c5:
25:b4:7f:96:d1:c1:20:36:c8:6a:a2:b9:d7:d8:5e:
0b:52:e8:61:76:d0:fa:fb:f9:d9:82:cc:16:7e:70:
6f:bf:f8:08:5c:fb:ef:69:3c:2e:a7:ba:16:95:57:
6d:62:63:2f:0e:f1:a6:f4:d5:68:a8:d1:4a:b4:9d:
b3:dc:a4:20:0f:60:bf:72:06:08:c3:3c:31:61:64:
16:73:da:93:3b:95:c0:47:d2:07:42:e6:06:66:aa:
cf:66:ec:c8:cf:e4:cc:dc:95:a4:4e:a2:96:a8:91:
69:ad:ad:3b:65:3d:e7:14:ea:21:f8:04:f6:eb:22:
2c:95:13:1b:6c:59:ad:a1:00:b0:a0:a6:ef:92:09:
f5:ff:3a:fb:53:47:3c:75:db:93:21:75:d6:ea:b4:
d5:8b:fb:22:10:f3:b9:fc:28:18:b1:61:d8:47:f9:
d1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:97:5A:95:ED:25:4F:57:7A:40:06:72:10:48:D3:2A:B1:68:43:51
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/oJdale0lT1d6QAZyEEjTKrFoQ1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.9.0/24
185.190.25.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:22:75:dc:dc:c7:71:f9:d6:0c:9e:fc:17:35:8a:f9:a1:86:
d7:23:23:0b:e3:9f:47:7f:ad:b8:13:32:5d:9d:eb:cb:fe:28:
8f:2c:7f:4e:7f:f4:6d:84:ff:d5:86:e4:ad:10:23:3c:4a:d3:
76:d6:10:88:3d:35:3e:dc:d6:4e:fe:43:00:23:9a:e6:54:6c:
86:a3:ef:9e:9b:50:47:1e:a4:4b:0d:6e:45:08:cf:a8:67:6d:
b1:4f:fe:48:4e:e7:f9:bc:d5:81:1f:d8:b6:04:92:ee:c7:d6:
83:02:26:8b:45:88:fa:fe:12:ad:b3:63:68:4a:20:2c:bd:06:
11:99:65:9e:e5:61:11:8b:df:0f:3f:0a:6a:fd:91:19:1e:7b:
43:ad:1f:aa:ab:a4:33:8b:51:90:4d:26:6e:cc:8d:5b:3c:94:
94:7b:79:01:5b:da:68:1e:8c:88:48:1e:5e:1d:43:fa:0a:12:
38:ff:0c:65:a4:ff:52:6c:d0:d9:a4:27:53:40:1b:65:b2:cc:
11:87:5c:43:76:e9:78:d0:12:35:60:0c:18:cb:5c:be:5f:9b:
8d:7f:ed:4c:a3:c7:17:40:3f:2d:30:e8:40:4e:70:55:d0:e6:
7b:96:14:ce:0d:cf:46:b3:ff:14:42:19:0e:e2:bd:b3:15:40:
aa:30:7d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 12:36:28 2023 by rpki-client on console-ams.rpki-client.org