Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5db01f-3f20-49f9-a7de-41400df54b37/1/n4svB6mmkVnWt_fX2AMPFDq16SY.roa
File: n4svB6mmkVnWt_fX2AMPFDq16SY.roa (raw, json)
Hash identifier: v7QzOU2kTYRcoHJ2mf+UXLyeKCOmJXNge4eQMcG7vS8=
Subject key identifier: 9F:8B:2F:07:A9:A6:91:59:D6:B7:F7:D7:D8:03:0F:14:3A:B5:E9:26
Certificate issuer: /CN=f571716c098aa06f4703154b98ab00228b5b7d89
Certificate serial: 018CC3B724D29FA56C3A07EFE106322015D0
Authority key identifier: F5:71:71:6C:09:8A:A0:6F:47:03:15:4B:98:AB:00:22:8B:5B:7D:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XFxbAmKoG9HAxVLmKsAIotbfYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5db01f-3f20-49f9-a7de-41400df54b37/1/n4svB6mmkVnWt_fX2AMPFDq16SY.roa
Signing time: Mon 01 Jan 2024 06:30:08 +0000
ROA not before: Mon 01 Jan 2024 06:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 185.92.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:24:d2:9f:a5:6c:3a:07:ef:e1:06:32:20:15:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571716c098aa06f4703154b98ab00228b5b7d89
Validity
Not Before: Jan 1 06:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f8b2f07a9a69159d6b7f7d7d8030f143ab5e926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bc:4b:5d:76:f3:9d:30:bb:c0:ef:8a:4b:d5:
16:6e:fc:b4:fe:50:ae:e8:1f:36:2b:04:da:98:ec:
5d:52:da:93:cc:f3:32:86:19:5f:1a:4f:b8:ae:66:
95:36:02:04:9e:44:6a:55:f8:66:6b:4a:0b:cd:02:
74:89:a8:ef:4e:89:2b:8f:db:6b:5e:f4:f5:49:40:
b0:85:54:cb:e5:47:ca:e8:e8:bb:b0:92:fc:44:8a:
02:c2:34:f3:07:0b:b7:54:d7:50:f9:6d:5f:7a:74:
d4:28:dd:d7:45:c3:03:27:b9:f0:58:10:32:f7:27:
22:f7:00:61:ab:7c:b2:16:f0:a8:fd:7c:b7:bd:5f:
7c:b0:f5:c7:70:96:a9:71:5f:82:7c:88:6b:ed:fc:
32:56:94:8f:94:9d:de:74:ff:0b:67:cb:64:9a:97:
96:ca:2a:db:4a:14:4d:06:7f:c5:b1:77:7b:df:13:
7c:54:69:d7:92:c5:66:0e:9e:be:51:3d:7a:76:12:
18:0f:f5:79:72:87:ca:d7:48:b9:b5:85:e6:05:55:
ab:46:ce:a3:c8:d2:5b:61:61:46:9c:02:ca:e4:a2:
a6:8c:65:00:69:3f:c0:3f:20:1b:ef:e5:9a:6f:d5:
aa:a8:12:35:e2:07:2f:aa:6b:0b:9f:c0:47:db:63:
22:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8B:2F:07:A9:A6:91:59:D6:B7:F7:D7:D8:03:0F:14:3A:B5:E9:26
X509v3 Authority Key Identifier:
keyid:F5:71:71:6C:09:8A:A0:6F:47:03:15:4B:98:AB:00:22:8B:5B:7D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XFxbAmKoG9HAxVLmKsAIotbfYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5db01f-3f20-49f9-a7de-41400df54b37/1/n4svB6mmkVnWt_fX2AMPFDq16SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5db01f-3f20-49f9-a7de-41400df54b37/1/9XFxbAmKoG9HAxVLmKsAIotbfYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.209.0/24
Signature Algorithm: sha256WithRSAEncryption
18:f7:20:89:5a:b5:84:fb:61:6b:90:a5:61:e8:d0:98:1b:8c:
c3:b3:5d:ae:a2:82:03:78:b8:9a:94:af:2c:96:c8:cb:c8:2e:
9b:b8:df:13:cd:28:09:1c:81:3e:9f:20:c3:2a:27:ac:79:67:
a5:4c:28:c7:fd:79:26:35:5a:3b:ee:0e:6f:4c:9a:01:e1:e6:
ba:d8:e9:b9:06:aa:a3:ae:9a:95:b8:3d:c4:9f:76:d5:b4:ca:
04:84:49:cd:a1:c0:71:4d:4b:24:97:d8:08:f2:8f:bd:f5:98:
74:bf:57:dc:e5:65:1c:2c:cb:06:46:8d:df:f4:e2:65:25:26:
89:07:c6:29:40:26:f0:1e:80:3b:27:29:d3:c2:c6:42:d3:7d:
46:25:3f:6e:d7:62:e4:c1:7e:a0:25:47:52:92:7c:4f:b0:ee:
d8:1d:6a:0f:dc:07:94:6f:cb:ff:91:19:77:2a:82:3a:18:54:
67:80:60:53:9a:de:7f:62:e9:2e:d8:d0:25:28:ca:20:89:7d:
f0:11:d0:34:b8:63:9c:6f:5c:a6:b3:32:c4:1f:39:ae:92:00:
45:3d:7d:64:0e:72:85:03:15:11:d6:a6:b4:0f:e2:26:0f:de:
28:3e:7e:46:d6:df:29:14:c4:75:1d:69:5b:61:79:eb:17:a3:
64:89:ed:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 11:29:14 2024 by rpki-client on console-ams.rpki-client.org