Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5db01f-3f20-49f9-a7de-41400df54b37/1/cEZ1sM4kiv6XtEz7R5t4OL_MLUw.roa
File: cEZ1sM4kiv6XtEz7R5t4OL_MLUw.roa (raw, json)
Hash identifier: Rw3iSHkSaNTToDgRQt++WcRIgmVFFptqP9+R/FJ2hgw=
Subject key identifier: 70:46:75:B0:CE:24:8A:FE:97:B4:4C:FB:47:9B:78:38:BF:CC:2D:4C
Certificate issuer: /CN=f571716c098aa06f4703154b98ab00228b5b7d89
Certificate serial: 018A20DB56DC42897E29B6E7B59B470CBE81
Authority key identifier: F5:71:71:6C:09:8A:A0:6F:47:03:15:4B:98:AB:00:22:8B:5B:7D:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XFxbAmKoG9HAxVLmKsAIotbfYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5db01f-3f20-49f9-a7de-41400df54b37/1/cEZ1sM4kiv6XtEz7R5t4OL_MLUw.roa
Signing time: Wed 23 Aug 2023 05:26:00 +0000
ROA not before: Wed 23 Aug 2023 05:26:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.92.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:20:db:56:dc:42:89:7e:29:b6:e7:b5:9b:47:0c:be:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571716c098aa06f4703154b98ab00228b5b7d89
Validity
Not Before: Aug 23 05:26:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=704675b0ce248afe97b44cfb479b7838bfcc2d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:41:f4:8e:be:37:37:c5:54:24:56:85:69:
5b:88:0c:5e:f1:40:64:8b:99:26:a7:95:a7:b8:b2:
d0:5b:5a:3a:cf:ba:54:04:4d:57:29:14:7d:41:d4:
e6:8a:a0:0e:a8:74:65:6b:15:c8:3c:d3:c1:12:65:
47:47:3b:5e:43:23:4a:0d:75:26:4b:a9:c2:2b:5e:
ce:76:64:e4:a9:ab:82:61:b6:4a:03:97:19:be:10:
e5:42:ba:93:e3:51:36:47:2c:fb:a0:a1:8a:de:ab:
6e:65:ed:e1:74:93:e6:8e:4e:4e:89:0d:a1:89:86:
6f:1c:04:13:6f:9a:24:e7:fb:4d:21:25:51:33:eb:
17:b2:b9:00:ae:58:17:b5:ba:9a:0a:6e:8a:95:73:
ae:ff:e9:c8:c7:ac:c8:c0:43:25:60:b1:52:06:f6:
63:cd:dd:ad:60:42:bc:63:5c:9b:8e:c0:03:6d:29:
68:b1:b2:00:87:a8:80:af:66:6d:96:33:ed:98:5b:
df:2a:8f:dc:1f:1b:8b:ca:08:a8:4f:8b:3a:fc:09:
15:3a:11:2e:5d:57:88:0a:07:f8:c4:93:bc:9b:89:
7d:ab:a0:6b:fb:1b:9d:99:f5:88:0a:94:d9:b2:b6:
bb:a9:c2:a0:1c:c6:23:57:9c:09:7d:39:15:3b:9e:
fa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:46:75:B0:CE:24:8A:FE:97:B4:4C:FB:47:9B:78:38:BF:CC:2D:4C
X509v3 Authority Key Identifier:
keyid:F5:71:71:6C:09:8A:A0:6F:47:03:15:4B:98:AB:00:22:8B:5B:7D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XFxbAmKoG9HAxVLmKsAIotbfYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5db01f-3f20-49f9-a7de-41400df54b37/1/cEZ1sM4kiv6XtEz7R5t4OL_MLUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5db01f-3f20-49f9-a7de-41400df54b37/1/9XFxbAmKoG9HAxVLmKsAIotbfYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.209.0/24
Signature Algorithm: sha256WithRSAEncryption
95:40:5f:c0:98:27:4f:eb:98:9f:8b:b8:71:72:1e:91:3b:34:
c3:d2:87:89:1e:b5:d2:e8:65:5d:5a:26:7b:42:f3:fd:df:91:
06:24:5f:77:9e:35:3d:71:8b:81:f0:76:b7:a0:f6:a3:02:6b:
28:ed:14:f8:5d:05:18:d9:a8:f4:1f:b1:44:f1:2c:c0:94:9b:
82:cf:cd:24:56:5b:77:44:f5:4c:9a:a5:13:70:18:a5:21:d7:
ae:0e:f6:df:ec:de:32:a9:73:e4:df:34:53:a5:d0:a1:6c:32:
a4:17:23:be:a2:93:0e:1c:a1:30:a2:8a:18:7c:20:ab:fc:75:
c1:e2:b7:6e:5e:67:09:66:3e:cc:46:02:82:c8:23:b5:3f:fe:
65:ce:9a:75:f3:02:02:88:14:d0:31:fc:19:13:e4:29:b0:5d:
0a:eb:b5:70:05:d4:6f:cc:b0:2c:4f:d4:7f:2c:9c:ef:fd:1c:
7d:7a:fd:6d:fd:bb:75:fc:cc:74:b9:80:c5:c4:f6:1c:a7:4f:
73:ea:ee:08:c5:86:6b:83:28:84:fd:b0:87:fb:72:59:b0:c7:
62:6b:cb:80:28:1d:bf:59:0f:d3:e7:19:fb:be:ba:56:8c:29:
ee:3a:38:d7:69:51:f0:2d:f0:93:33:ef:90:90:30:85:2c:0e:
93:b7:8d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:30 2024 by rpki-client on console-fra.rpki-client.org