Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d1a822-a12c-4381-a0e3-ac43f72a6329/1/R0ClLCWGAQAxBJZVmipMkwU1WqE.roa
File: R0ClLCWGAQAxBJZVmipMkwU1WqE.roa (raw, json)
Hash identifier: F42kvDPqPinv3K4fFVex9+h6PLhXd6VTP2X7B1A+EMg=
Subject key identifier: 47:40:A5:2C:25:86:01:00:31:04:96:55:9A:2A:4C:93:05:35:5A:A1
Certificate issuer: /CN=69a3aeec186ca96321c5cef7fd96b9ab01f5cab5
Certificate serial: 036B7DF5
Authority key identifier: 69:A3:AE:EC:18:6C:A9:63:21:C5:CE:F7:FD:96:B9:AB:01:F5:CA:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaOu7BhsqWMhxc73_Za5qwH1yrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d1a822-a12c-4381-a0e3-ac43f72a6329/1/R0ClLCWGAQAxBJZVmipMkwU1WqE.roa
Signing time: Sat 01 Jan 2022 09:00:36 +0000
ROA not before: Sat 01 Jan 2022 09:00:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39216
IP address blocks: 185.222.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57376245 (0x36b7df5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a3aeec186ca96321c5cef7fd96b9ab01f5cab5
Validity
Not Before: Jan 1 09:00:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4740a52c25860100310496559a2a4c9305355aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:37:1b:ae:68:10:61:5f:8b:4b:e7:3d:ef:ad:
1a:3d:81:1b:77:7a:c9:19:79:f5:4f:0e:20:54:58:
93:14:3a:de:7d:e2:d8:7c:f9:ff:81:30:46:40:46:
47:13:2e:65:99:b6:c3:0b:f2:d5:53:45:18:5a:72:
90:a8:23:e6:e6:67:1d:33:54:aa:18:f3:fe:99:10:
0a:6d:84:ab:58:d5:48:42:b9:d4:42:b1:a3:3f:80:
01:1b:66:96:f2:46:d4:ee:67:bc:28:c7:e3:ee:ea:
ae:37:61:26:69:e2:17:09:53:40:c8:fc:bd:8e:47:
2b:b6:8f:ee:7d:dd:ec:2e:31:2c:af:6a:23:d4:98:
18:ec:3a:d4:a5:12:f4:79:87:e7:1d:b5:12:25:1a:
66:3c:a8:de:7f:56:46:29:3f:49:6c:e3:5e:41:2a:
6d:9c:2a:ba:2c:85:8e:4b:ee:8d:ab:cc:eb:5a:23:
4f:72:d2:c3:78:6c:00:55:fb:6e:dc:b4:0e:d7:48:
3f:03:c4:56:c8:05:62:3d:4a:67:63:9a:95:c3:a9:
5e:53:ad:c3:3e:f1:b1:88:80:f7:49:c3:69:63:df:
ef:e5:aa:9b:48:e5:8f:1c:0f:d6:28:e2:50:84:11:
f4:b5:d5:f4:67:d8:6c:50:46:19:5e:c9:38:a8:ed:
41:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:40:A5:2C:25:86:01:00:31:04:96:55:9A:2A:4C:93:05:35:5A:A1
X509v3 Authority Key Identifier:
keyid:69:A3:AE:EC:18:6C:A9:63:21:C5:CE:F7:FD:96:B9:AB:01:F5:CA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaOu7BhsqWMhxc73_Za5qwH1yrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d1a822-a12c-4381-a0e3-ac43f72a6329/1/R0ClLCWGAQAxBJZVmipMkwU1WqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d1a822-a12c-4381-a0e3-ac43f72a6329/1/aaOu7BhsqWMhxc73_Za5qwH1yrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.20.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:be:c1:e9:a2:94:50:b6:6d:4e:c2:74:27:7a:e6:5f:18:e7:
1a:a0:7b:f9:da:91:d0:15:46:f8:8f:6b:32:45:98:bd:c3:70:
7a:6b:28:d9:24:3a:e0:ed:4d:d0:5e:21:c2:ba:2d:f8:ea:31:
18:c3:70:02:9f:c7:5a:11:71:31:12:73:68:47:5a:b4:99:57:
9e:2b:35:96:0c:58:ee:de:e2:6b:7c:93:bd:be:19:1f:fd:51:
49:12:13:2f:34:b4:cc:0d:28:70:d5:fc:ec:57:50:72:21:4c:
ee:af:f1:bc:b3:2c:ef:89:42:db:4f:92:6c:f2:87:d9:0d:5a:
78:a1:63:aa:1f:2a:27:a4:d2:95:b8:d4:f2:c3:79:42:1f:48:
7a:bb:c1:85:bd:a8:65:6a:3a:a4:df:5b:22:ff:e5:0a:dc:05:
43:c8:c6:ad:f2:45:b6:17:ca:92:f9:88:ad:bc:70:d9:ec:eb:
df:b3:05:60:53:33:e1:50:12:53:4e:f9:01:bf:21:80:ad:01:
b4:bc:82:d2:19:b4:fd:5e:e8:d1:e6:3f:73:05:c2:e1:68:b4:
6e:75:27:4f:02:68:1e:09:0e:af:82:fa:7a:bf:e4:52:63:2b:
4c:67:3f:b6:36:40:c5:0c:41:97:88:1f:3f:14:e3:86:eb:a4:
4e:8f:c9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:29 2024 by rpki-client on console-ams.rpki-client.org