Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3c240b-4c9a-452a-9136-e3a42ad1455d/1/5do89C2gxs5BHpCeOw-2wSHLqMg.roa
File: 5do89C2gxs5BHpCeOw-2wSHLqMg.roa (raw, json)
Hash identifier: 9rzZRa9CpT+oku58R4VAceB3c6NgtX10u5t2/m+2OqQ=
Subject key identifier: E5:DA:3C:F4:2D:A0:C6:CE:41:1E:90:9E:3B:0F:B6:C1:21:CB:A8:C8
Certificate issuer: /CN=9a6c0367f6bd34afd0b7543cea0e332661d61c03
Certificate serial: 0189691934644EEFEDBDB0F55F64E87E0F84
Authority key identifier: 9A:6C:03:67:F6:BD:34:AF:D0:B7:54:3C:EA:0E:33:26:61:D6:1C:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmwDZ_a9NK_Qt1Q86g4zJmHWHAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3c240b-4c9a-452a-9136-e3a42ad1455d/1/5do89C2gxs5BHpCeOw-2wSHLqMg.roa
Signing time: Tue 18 Jul 2023 13:03:26 +0000
ROA not before: Tue 18 Jul 2023 13:03:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48433
IP address blocks: 185.201.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:69:19:34:64:4e:ef:ed:bd:b0:f5:5f:64:e8:7e:0f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6c0367f6bd34afd0b7543cea0e332661d61c03
Validity
Not Before: Jul 18 13:03:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5da3cf42da0c6ce411e909e3b0fb6c121cba8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0a:40:a9:06:be:e9:2f:92:80:2e:a2:d8:5e:
9f:c8:5f:dd:87:93:3f:8a:3c:cb:54:92:eb:74:b0:
ac:47:9f:e0:84:aa:dd:26:4e:4e:10:cd:9c:17:5d:
32:84:b2:fc:8b:e1:50:dc:6c:51:e5:cc:5d:35:3d:
ab:4b:83:65:52:13:09:e3:2f:30:c5:af:53:f6:fa:
8e:69:3d:00:9b:96:37:ff:3c:fa:d8:ef:94:f8:1f:
53:d8:29:ca:8d:e1:b3:0a:d3:92:cf:d2:dd:a9:04:
5d:01:0b:6c:e7:26:18:9f:d3:e9:df:d5:99:3e:a5:
47:29:8c:59:9f:0b:2a:80:d0:7e:6b:50:1f:3f:f5:
3b:76:75:e6:c2:a2:56:6d:9f:af:31:dd:23:54:e0:
d9:0b:47:ff:0b:d2:0b:08:dd:41:cd:45:c8:a2:db:
67:4e:c8:31:4e:5e:83:4e:e8:65:c9:b1:73:1f:19:
4d:c7:4c:29:66:00:1f:da:9b:64:fa:46:01:4e:54:
c0:cf:55:ed:d4:af:c2:d6:ea:94:fd:2e:e0:98:90:
0f:9e:a8:ce:16:93:74:16:cb:32:e8:36:13:eb:31:
ac:53:68:6a:3a:c4:5f:31:31:aa:f4:49:a6:b1:65:
c2:3c:ba:eb:4f:f9:69:17:65:65:42:d8:6c:59:2f:
f1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DA:3C:F4:2D:A0:C6:CE:41:1E:90:9E:3B:0F:B6:C1:21:CB:A8:C8
X509v3 Authority Key Identifier:
keyid:9A:6C:03:67:F6:BD:34:AF:D0:B7:54:3C:EA:0E:33:26:61:D6:1C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmwDZ_a9NK_Qt1Q86g4zJmHWHAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3c240b-4c9a-452a-9136-e3a42ad1455d/1/5do89C2gxs5BHpCeOw-2wSHLqMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3c240b-4c9a-452a-9136-e3a42ad1455d/1/mmwDZ_a9NK_Qt1Q86g4zJmHWHAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.29.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b9:4c:eb:ac:a1:c1:e2:72:56:19:1f:48:56:cc:6c:6e:6f:
6a:23:ba:b1:16:c6:20:24:37:c8:cd:f7:bd:45:a8:b2:4a:81:
62:f1:6f:fb:e2:db:ec:af:ca:41:f0:82:85:4b:b4:00:82:85:
0f:00:93:32:c0:cf:72:2c:1e:d9:94:d5:d5:2b:0a:76:6b:e6:
73:5e:91:81:c0:18:92:d8:bb:e1:91:c9:c1:a6:21:9a:dc:8d:
81:21:c6:eb:72:6c:c6:31:98:8e:cc:a9:7f:2c:bd:b5:69:ab:
78:08:85:f7:63:4d:50:fa:8e:65:79:7f:c4:1f:96:0f:93:9a:
a5:6e:a3:fa:5c:a3:50:2a:4d:e5:44:c3:8f:f0:c7:8e:a2:51:
d8:f7:1f:4a:76:7c:05:65:7e:6f:e2:d1:a3:a5:f7:19:35:72:
0d:eb:84:5f:73:5d:18:dc:d9:d1:29:90:e1:71:1c:2e:cf:13:
39:1b:3f:67:9a:8c:dc:30:8b:8d:c9:15:b4:27:26:d6:33:bc:
ec:90:ce:01:6a:eb:cb:ea:d8:c9:d9:ff:ad:4b:2f:fb:31:26:
08:4d:e1:a6:6d:6c:80:97:9c:c0:eb:da:06:b8:63:6e:be:6e:
39:48:7e:49:cc:f3:1f:d0:f2:d8:f2:d1:7f:1a:31:18:59:8e:
89:a0:85:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:09 2024 by rpki-client on console-ams.rpki-client.org