Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4054a2-0c9d-49f5-b0c9-36f1ca1c0fa6/1/BBLmLhx23Nv4yYAj3x4a30-sp_0.roa
File: BBLmLhx23Nv4yYAj3x4a30-sp_0.roa (raw, json)
Hash identifier: 9vSFmlBvqhJIk91NXMbpcaVHt/Q0pT/Jwjym4J3SKqw=
Subject key identifier: 04:12:E6:2E:1C:76:DC:DB:F8:C9:80:23:DF:1E:1A:DF:4F:AC:A7:FD
Certificate issuer: /CN=1b2825df1a34551e9cecfef4a959ce65a1c482eb
Certificate serial: 580956
Authority key identifier: 1B:28:25:DF:1A:34:55:1E:9C:EC:FE:F4:A9:59:CE:65:A1:C4:82:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gygl3xo0VR6c7P70qVnOZaHEgus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4054a2-0c9d-49f5-b0c9-36f1ca1c0fa6/1/BBLmLhx23Nv4yYAj3x4a30-sp_0.roa
Signing time: Sat 01 Jan 2022 00:56:53 +0000
ROA not before: Sat 01 Jan 2022 00:56:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 185.123.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5769558 (0x580956)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2825df1a34551e9cecfef4a959ce65a1c482eb
Validity
Not Before: Jan 1 00:56:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0412e62e1c76dcdbf8c98023df1e1adf4faca7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4d:9b:6f:d0:08:af:95:93:a6:f1:6c:7b:99:
fd:6e:3a:f4:02:50:93:50:74:52:8d:f8:71:8e:cb:
d5:37:70:50:5d:01:36:ed:d7:ea:b4:38:c6:f4:ad:
c7:9e:c3:75:c2:a8:f5:ae:da:90:91:8e:36:98:b8:
43:e0:97:1d:d3:2e:e4:c0:f3:2c:a9:64:93:88:56:
9a:47:ae:10:d1:6d:65:62:e2:4d:6b:9d:31:db:5c:
81:04:76:8f:39:84:11:69:ee:73:e0:25:ee:58:7b:
21:88:1a:66:49:db:07:56:31:27:e9:f9:59:d6:cb:
c2:5b:e0:29:b4:92:ea:5e:a4:7d:93:14:da:22:d7:
85:09:5a:35:29:cf:26:29:db:47:4a:13:57:63:7f:
64:42:34:6e:0a:02:52:94:ec:ee:ca:0a:63:12:c4:
7c:2c:66:4e:48:db:60:e1:69:4b:74:66:49:b9:09:
04:58:9e:64:8d:18:ed:40:6a:6d:7e:c3:c2:47:31:
22:3a:4b:d1:85:e1:9e:14:dc:08:8c:09:a8:14:d9:
5f:d9:fd:87:a0:66:2b:c4:fb:43:f0:4d:c2:9e:c9:
74:75:4f:2a:d2:4b:42:21:b7:22:d0:15:27:89:1d:
47:63:1e:15:78:71:cf:ca:7d:6b:45:34:63:a0:14:
d4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:12:E6:2E:1C:76:DC:DB:F8:C9:80:23:DF:1E:1A:DF:4F:AC:A7:FD
X509v3 Authority Key Identifier:
keyid:1B:28:25:DF:1A:34:55:1E:9C:EC:FE:F4:A9:59:CE:65:A1:C4:82:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gygl3xo0VR6c7P70qVnOZaHEgus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4054a2-0c9d-49f5-b0c9-36f1ca1c0fa6/1/BBLmLhx23Nv4yYAj3x4a30-sp_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4054a2-0c9d-49f5-b0c9-36f1ca1c0fa6/1/Gygl3xo0VR6c7P70qVnOZaHEgus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.136.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:58:56:47:2f:3a:74:c8:f1:63:c1:79:3f:36:2f:56:63:41:
c4:af:c4:0f:d8:a8:47:49:50:92:21:b3:f3:ba:dd:df:37:e4:
8f:7e:82:63:c6:5b:c9:fd:99:0d:bc:d0:8b:32:7f:74:19:58:
3a:86:68:41:b3:fe:a9:26:e4:4a:08:fe:db:1b:b6:9a:c1:9c:
44:0c:b8:ec:aa:e3:8b:a8:fa:21:56:8a:bc:7b:0f:1c:7d:71:
ac:79:3b:92:40:71:d8:46:45:fa:66:53:55:61:e6:e0:d9:e1:
5e:c4:b0:83:1e:53:4d:a0:23:be:75:f5:34:e9:14:01:90:3e:
d8:b2:2e:a3:49:88:97:c3:d6:82:70:f5:9c:b3:bc:38:55:bf:
b2:ab:a9:ee:ef:f4:3d:a8:15:75:34:2f:e3:a8:a7:56:a5:12:
c2:42:a8:71:f7:1e:c8:34:0b:0e:de:4a:81:b4:ab:49:2c:c5:
08:0b:f4:00:d8:4f:d9:df:ef:6d:fb:37:46:71:35:a3:4a:7b:
2b:63:93:0e:36:82:dd:61:50:4c:b4:33:68:5f:03:cf:28:04:
05:a7:02:fc:e8:c6:54:50:14:a2:13:ea:25:17:99:7a:ae:f5:
54:a3:e3:9c:0f:e7:2a:54:08:4a:4f:3a:0f:67:95:41:78:93:
04:38:48:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:09 2024 by rpki-client on console-ams.rpki-client.org