Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/43c76a-85b6-486f-9be8-2d53e00ac794/1/mn8f_AtLl_7lSjA_wJfXP2dARNE.roa
File: mn8f_AtLl_7lSjA_wJfXP2dARNE.roa (raw, json)
Hash identifier: 7nYmZjIrO4onWbL+xiYkSrPydEETF49eofTjG9YQiSc=
Subject key identifier: 9A:7F:1F:FC:0B:4B:97:FE:E5:4A:30:3F:C0:97:D7:3F:67:40:44:D1
Certificate issuer: /CN=6472183e4364817f1656ef62400259b5b945e763
Certificate serial: 018CC870F96EDDE1B518F17D6640146B89A0
Authority key identifier: 64:72:18:3E:43:64:81:7F:16:56:EF:62:40:02:59:B5:B9:45:E7:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHIYPkNkgX8WVu9iQAJZtblF52M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/43c76a-85b6-486f-9be8-2d53e00ac794/1/mn8f_AtLl_7lSjA_wJfXP2dARNE.roa
Signing time: Tue 02 Jan 2024 04:31:36 +0000
ROA not before: Tue 02 Jan 2024 04:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205498
IP address blocks: 185.215.140.0/22 maxlen: 22
45.85.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:f9:6e:dd:e1:b5:18:f1:7d:66:40:14:6b:89:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6472183e4364817f1656ef62400259b5b945e763
Validity
Not Before: Jan 2 04:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a7f1ffc0b4b97fee54a303fc097d73f674044d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:21:d4:ca:a8:ca:aa:fe:d0:8c:67:25:64:
07:d4:75:92:f1:c7:31:c4:b4:2b:09:00:c2:10:a3:
c2:ed:2d:76:61:cb:3a:f0:e9:2f:80:b9:85:11:9f:
7c:7a:6e:71:30:95:1f:f6:22:4c:34:e2:4c:27:24:
55:fe:c1:61:2f:5c:42:45:e2:de:97:95:6b:c1:59:
f2:8b:7f:31:74:4d:fe:b3:46:db:1e:14:94:07:89:
ff:2c:c0:f6:5f:f1:99:30:99:c5:4c:99:d4:55:01:
61:cd:f9:5f:9c:9a:6f:3d:fc:74:50:d9:e7:b9:c6:
a1:31:61:16:bb:b0:a6:71:d5:7b:2e:37:2b:3d:76:
a6:83:f4:e3:c4:36:19:8f:f0:b9:06:24:b7:34:48:
6b:96:5c:25:ba:84:5b:1c:8d:e4:2c:06:60:a6:4c:
90:4d:56:2a:e3:c5:f6:81:e8:cb:70:14:f2:67:24:
ee:49:b9:02:c9:fc:cf:05:e7:aa:72:26:e7:82:88:
dc:69:97:79:cd:67:18:1f:e1:c7:18:c1:9f:b2:58:
b0:bb:1e:73:b6:35:0a:c8:3e:06:32:61:a3:ef:43:
a2:f4:7b:0c:2a:c8:e6:76:d7:63:d4:71:6d:f9:54:
9a:34:d5:d8:84:96:6d:c8:70:72:ef:9d:01:a5:5a:
d2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7F:1F:FC:0B:4B:97:FE:E5:4A:30:3F:C0:97:D7:3F:67:40:44:D1
X509v3 Authority Key Identifier:
keyid:64:72:18:3E:43:64:81:7F:16:56:EF:62:40:02:59:B5:B9:45:E7:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHIYPkNkgX8WVu9iQAJZtblF52M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/43c76a-85b6-486f-9be8-2d53e00ac794/1/mn8f_AtLl_7lSjA_wJfXP2dARNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/43c76a-85b6-486f-9be8-2d53e00ac794/1/ZHIYPkNkgX8WVu9iQAJZtblF52M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.16.0/22
185.215.140.0/22
Signature Algorithm: sha256WithRSAEncryption
88:34:61:54:67:cc:c8:52:5e:24:bf:ef:f9:79:13:11:d3:a9:
b2:e6:5a:e6:09:84:2a:6d:7b:44:cd:27:b3:fb:3a:ab:23:d0:
b1:fe:0c:db:10:a6:b8:20:1a:5a:9c:f3:92:64:66:f7:54:28:
25:9e:db:3f:c8:c4:90:4e:bf:c9:3f:05:2c:6f:e3:b2:90:dc:
f0:36:14:82:33:80:32:88:c5:aa:1d:47:ef:70:9e:c9:7d:62:
8e:5d:e9:40:2c:d9:6a:a5:86:ca:3b:9f:42:6d:42:35:d3:e3:
65:74:53:13:6b:e9:20:2a:5c:4b:01:64:19:fe:a6:44:a4:86:
e9:3f:e3:66:b3:5e:3a:42:5d:7a:09:9b:bd:ac:4a:be:50:97:
a0:83:02:ce:00:99:c6:20:96:dc:1b:87:b9:58:8d:9f:51:33:
18:0e:38:81:f0:36:f7:1e:ac:9f:6a:d6:b6:83:6e:6c:5d:4a:
db:63:06:5b:ab:a8:d7:f5:a3:2e:29:e2:82:74:30:32:a3:72:
1a:66:47:76:ee:df:af:a6:66:20:c0:3f:d9:c4:b2:ce:0a:f6:
69:1b:b5:46:8a:cf:42:6a:7e:f5:88:95:d9:35:4a:1c:18:82:
0b:b2:07:d5:8b:36:d5:da:1a:8c:8c:23:79:db:a9:bd:23:44:
74:db:09:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:45 2024 by rpki-client on console-fra.rpki-client.org