Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6ac66d-e5ed-4761-b728-9409d67a8579/1/h0R_wKitpMGXo9SXK9Re-l8yEf4.roa
File: h0R_wKitpMGXo9SXK9Re-l8yEf4.roa (raw, json)
Hash identifier: 3W/hf5v8+9Flm8Ajhhv3m5Lyt/VzXu51DhiFQ9h2U4o=
Subject key identifier: 87:44:7F:C0:A8:AD:A4:C1:97:A3:D4:97:2B:D4:5E:FA:5F:32:11:FE
Certificate issuer: /CN=0e28e373b096398145452af627210ae1e36a7882
Certificate serial: 018B6BF31A1D37DE5C02F25D01B8CFE14093
Authority key identifier: 0E:28:E3:73:B0:96:39:81:45:45:2A:F6:27:21:0A:E1:E3:6A:78:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dijjc7CWOYFFRSr2JyEK4eNqeII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ac66d-e5ed-4761-b728-9409d67a8579/1/h0R_wKitpMGXo9SXK9Re-l8yEf4.roa
Signing time: Thu 26 Oct 2023 12:26:15 +0000
ROA not before: Thu 26 Oct 2023 12:26:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8484
IP address blocks: 185.21.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:f3:1a:1d:37:de:5c:02:f2:5d:01:b8:cf:e1:40:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e28e373b096398145452af627210ae1e36a7882
Validity
Not Before: Oct 26 12:26:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87447fc0a8ada4c197a3d4972bd45efa5f3211fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1f:5b:38:60:da:1d:80:7d:d7:14:1d:d8:23:
6c:32:a6:98:49:c7:b6:59:d3:1a:62:41:55:5d:19:
93:c7:5a:d4:23:37:bb:41:b4:89:c7:5c:79:2e:0f:
1f:a7:15:29:e5:88:07:b5:e6:07:4c:3c:e2:a1:bf:
bb:d3:a6:d0:a2:85:ea:53:60:cd:7d:ee:cd:c4:4f:
d4:52:eb:4c:c6:44:2e:43:66:11:d4:54:12:17:50:
ad:66:f8:15:01:4e:b3:0e:c4:ee:e9:45:2c:74:8c:
d3:f4:35:45:58:4a:38:96:72:ea:30:1e:90:3f:4d:
57:e8:ab:80:01:20:09:86:51:ab:df:37:81:45:b3:
cd:04:ac:e8:1f:30:98:15:74:29:f1:2a:77:f1:0b:
18:0d:a9:ca:2f:b1:f9:07:bf:0e:b6:fd:46:cd:38:
d8:b4:d2:f9:6b:d1:b9:6d:9e:fb:70:d1:7c:3b:7f:
a6:43:db:cc:b2:fc:e3:37:2a:96:6b:ce:8d:7e:72:
8f:76:1d:e5:8c:aa:01:57:e5:1f:e3:45:d6:93:56:
52:48:55:69:61:82:be:e0:2d:88:7d:89:04:aa:e5:
f8:c2:13:f3:6e:b5:d7:28:bd:e4:58:c0:fc:5f:d8:
05:3a:d7:ca:83:fa:f5:fb:a0:e4:bc:46:4d:c4:6b:
cc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:44:7F:C0:A8:AD:A4:C1:97:A3:D4:97:2B:D4:5E:FA:5F:32:11:FE
X509v3 Authority Key Identifier:
keyid:0E:28:E3:73:B0:96:39:81:45:45:2A:F6:27:21:0A:E1:E3:6A:78:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dijjc7CWOYFFRSr2JyEK4eNqeII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ac66d-e5ed-4761-b728-9409d67a8579/1/h0R_wKitpMGXo9SXK9Re-l8yEf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ac66d-e5ed-4761-b728-9409d67a8579/1/Dijjc7CWOYFFRSr2JyEK4eNqeII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.49.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c0:5f:3d:6f:9b:02:75:96:50:c4:3a:ef:03:bc:bc:27:2d:
41:fc:5c:fc:af:e1:e5:14:c4:00:c0:94:43:bd:dc:d9:7d:e4:
8d:5e:79:f4:da:65:4c:f4:28:58:50:45:b2:a2:e5:6e:b0:6d:
18:f7:80:24:5f:95:9e:64:f1:e7:62:06:ba:e7:b5:48:ea:22:
ed:ba:03:8d:ad:cc:55:2b:3a:9f:05:50:06:aa:4d:2e:6b:31:
08:d8:21:b8:ae:76:97:dc:2d:c8:eb:6c:b6:12:e9:d0:8e:65:
d6:09:38:17:6d:4b:38:ce:6b:46:29:51:f5:f8:2d:a3:be:f9:
c2:a1:82:ce:50:d0:91:e6:3b:2c:90:54:07:98:c9:c3:a1:51:
dc:8d:f8:a0:25:06:3b:a4:f8:e7:92:0a:69:a6:f5:a4:f5:5c:
10:3d:2b:2e:16:3e:19:61:90:e5:21:d5:a1:fe:af:97:95:20:
f2:7f:3d:da:85:de:9d:90:65:a7:05:a3:9b:0f:b2:a3:83:df:
1b:96:c0:cc:4c:04:a6:c1:84:f6:78:2f:98:1e:b5:7d:22:5b:
aa:29:1c:e3:c0:e5:3b:15:23:75:85:84:26:17:2d:cb:46:d4:
ed:dc:70:3a:0b:86:38:9d:ea:c7:fe:a4:28:7a:94:18:2d:ca:
97:4c:12:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 29 13:23:05 2023 by rpki-client on console-ams.rpki-client.org