Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5db01f-3f20-49f9-a7de-41400df54b37/1/nSbjE8ZB3PZgeNY6y5RtOqNkymE.roa
File: nSbjE8ZB3PZgeNY6y5RtOqNkymE.roa (raw, json)
Hash identifier: jjhY/xlHlUBHP7poRbZyFdA8a5XnU0BbPV+ndfBrIm4=
Subject key identifier: 9D:26:E3:13:C6:41:DC:F6:60:78:D6:3A:CB:94:6D:3A:A3:64:CA:61
Certificate issuer: /CN=f571716c098aa06f4703154b98ab00228b5b7d89
Certificate serial: 01856F5470AC3D741D045A0EB856099A87D8
Authority key identifier: F5:71:71:6C:09:8A:A0:6F:47:03:15:4B:98:AB:00:22:8B:5B:7D:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XFxbAmKoG9HAxVLmKsAIotbfYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5db01f-3f20-49f9-a7de-41400df54b37/1/nSbjE8ZB3PZgeNY6y5RtOqNkymE.roa
Signing time: Sun 01 Jan 2023 21:54:42 +0000
ROA not before: Sun 01 Jan 2023 21:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 185.92.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:70:ac:3d:74:1d:04:5a:0e:b8:56:09:9a:87:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571716c098aa06f4703154b98ab00228b5b7d89
Validity
Not Before: Jan 1 21:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d26e313c641dcf66078d63acb946d3aa364ca61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:90:c8:13:1b:51:3a:b6:6d:d6:4f:ab:f6:6c:
2d:71:75:00:2c:5d:2c:9f:b0:0a:9c:bc:9f:cd:a1:
e8:c8:5c:f0:3e:fa:a0:ac:92:5a:06:47:e3:ba:32:
a7:8f:54:87:4d:fe:bb:b4:51:ce:c8:78:f6:9e:7d:
0d:5f:9b:5c:2a:ac:33:34:27:de:f9:ba:c4:13:e6:
56:e7:17:05:99:85:2a:28:c1:9d:14:a2:5a:df:20:
6c:c2:3b:b9:3b:e4:d7:fc:49:52:78:05:8e:cf:56:
8f:ec:4c:95:1c:e2:e5:a9:6a:9e:a7:94:c5:7d:3b:
2e:28:b9:24:92:d2:4c:41:05:41:e6:d0:92:3c:00:
2e:ca:df:cc:55:8b:01:02:bc:a9:2b:75:47:89:f8:
7a:39:fc:0c:ec:41:ce:55:54:fe:39:6f:87:ae:06:
18:9e:73:52:7b:f3:1a:f6:39:4a:a2:a5:ae:47:b0:
58:94:29:fc:b3:5d:95:f6:d2:ad:ad:05:88:8d:c8:
11:94:3e:49:e5:b0:cd:48:8f:47:d0:ad:51:fe:5b:
e9:0f:ef:11:32:fd:59:0b:d4:3b:10:6d:fe:60:5e:
4c:67:eb:3a:3b:fb:49:5b:3d:7c:13:d8:f9:e3:73:
8b:2f:7a:03:85:80:90:cd:5e:a8:e9:cb:b4:4b:7e:
7c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:26:E3:13:C6:41:DC:F6:60:78:D6:3A:CB:94:6D:3A:A3:64:CA:61
X509v3 Authority Key Identifier:
keyid:F5:71:71:6C:09:8A:A0:6F:47:03:15:4B:98:AB:00:22:8B:5B:7D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XFxbAmKoG9HAxVLmKsAIotbfYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5db01f-3f20-49f9-a7de-41400df54b37/1/nSbjE8ZB3PZgeNY6y5RtOqNkymE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5db01f-3f20-49f9-a7de-41400df54b37/1/9XFxbAmKoG9HAxVLmKsAIotbfYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.209.0/24
Signature Algorithm: sha256WithRSAEncryption
18:4b:71:ae:cf:62:eb:bd:3d:08:0d:d3:00:74:ac:ee:dc:a4:
14:02:63:c8:a3:30:bf:1e:86:ee:d9:3d:d2:53:f7:07:9e:7a:
a5:02:53:d6:41:d0:d3:c8:75:1a:ef:4a:ce:47:bc:98:9d:db:
6e:b3:4a:2c:75:5b:b5:d1:0d:bf:a6:7a:cf:07:69:e3:6c:54:
f2:f1:4b:c4:4b:4a:ba:2a:72:01:50:59:f1:8b:d5:4b:08:ef:
88:37:bf:49:dc:d4:30:78:57:c5:90:99:bd:18:b7:da:db:98:
74:28:de:2d:1e:09:57:e6:82:04:f5:b9:37:63:b6:41:9a:49:
7c:2f:ee:3e:1a:b8:db:79:7e:74:be:68:35:00:41:bb:f8:b9:
36:e0:6b:01:23:c2:60:77:99:1b:4b:95:f5:b3:e1:37:f0:2b:
c4:96:79:c1:e2:29:a8:a8:95:1a:b0:7f:04:c8:b4:e1:4b:8f:
76:47:61:c8:dc:23:21:6f:f8:c7:2f:fd:f2:86:1d:43:a7:fe:
68:27:8d:10:a3:12:5e:32:20:40:35:03:ed:d2:a4:95:bf:e4:
05:ef:d8:02:88:ef:dc:64:4a:ec:29:26:b9:4c:e2:e8:5f:ff:
b9:0d:fb:80:a9:18:fc:ef:e7:1f:c1:af:12:d1:d3:fd:aa:fc:
fd:ec:d4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:50 2024 by rpki-client on console-ams.rpki-client.org