Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3c240b-4c9a-452a-9136-e3a42ad1455d/1/pXum8Ppd6QzYfNz2JV0oWxlCCYM.roa
File: pXum8Ppd6QzYfNz2JV0oWxlCCYM.roa (raw, json)
Hash identifier: bLkx/g602UAFJ2B6GpotC9R9RLGJpp9SzZCZtr52GmY=
Subject key identifier: A5:7B:A6:F0:FA:5D:E9:0C:D8:7C:DC:F6:25:5D:28:5B:19:42:09:83
Certificate issuer: /CN=9a6c0367f6bd34afd0b7543cea0e332661d61c03
Certificate serial: 018CC8015132AA3E3B072E608A2F5AE58242
Authority key identifier: 9A:6C:03:67:F6:BD:34:AF:D0:B7:54:3C:EA:0E:33:26:61:D6:1C:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmwDZ_a9NK_Qt1Q86g4zJmHWHAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3c240b-4c9a-452a-9136-e3a42ad1455d/1/pXum8Ppd6QzYfNz2JV0oWxlCCYM.roa
Signing time: Tue 02 Jan 2024 02:29:38 +0000
ROA not before: Tue 02 Jan 2024 02:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48433
IP address blocks: 185.201.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:51:32:aa:3e:3b:07:2e:60:8a:2f:5a:e5:82:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6c0367f6bd34afd0b7543cea0e332661d61c03
Validity
Not Before: Jan 2 02:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a57ba6f0fa5de90cd87cdcf6255d285b19420983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:36:34:51:54:d8:29:a3:65:4b:83:ff:5c:54:
6b:68:6f:f1:89:b7:d0:8f:81:18:0c:bd:bc:60:b6:
71:c3:1a:0e:ef:c7:d4:3d:9b:b1:9c:55:d0:09:99:
18:24:53:66:b1:45:64:4c:a2:a8:45:f3:2e:b9:6d:
9b:70:18:ce:16:2c:03:d8:a7:4f:cd:f6:d6:42:ce:
81:a8:22:94:8c:f6:82:62:3a:fe:b9:83:ca:b9:59:
d0:a2:c7:24:2c:19:32:aa:ae:0a:78:d7:5d:36:55:
70:9d:c4:78:6a:fd:b3:32:b5:82:28:d6:94:f7:37:
c6:c2:c1:1c:21:50:ec:41:22:f3:a9:aa:98:8e:87:
96:98:c0:50:d8:a6:2c:d6:8b:dc:b8:06:65:34:bc:
b0:55:d0:0b:ea:45:b5:63:b7:a2:8c:d9:66:5c:87:
01:5f:b6:f2:c4:81:42:7a:5c:a1:af:d7:9d:98:4e:
a3:a3:3f:bc:36:28:84:06:85:af:c7:32:28:63:04:
fc:82:f6:5d:e2:69:ea:6b:ba:98:82:b4:83:75:2f:
f5:be:fe:2f:98:ff:7b:09:6d:e0:93:cd:11:5d:99:
cb:08:f5:2e:1c:99:ab:2e:b8:03:d7:3b:01:9a:6d:
72:6a:d4:70:a8:87:45:03:e1:64:b8:95:f1:1a:06:
c4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7B:A6:F0:FA:5D:E9:0C:D8:7C:DC:F6:25:5D:28:5B:19:42:09:83
X509v3 Authority Key Identifier:
keyid:9A:6C:03:67:F6:BD:34:AF:D0:B7:54:3C:EA:0E:33:26:61:D6:1C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmwDZ_a9NK_Qt1Q86g4zJmHWHAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3c240b-4c9a-452a-9136-e3a42ad1455d/1/pXum8Ppd6QzYfNz2JV0oWxlCCYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3c240b-4c9a-452a-9136-e3a42ad1455d/1/mmwDZ_a9NK_Qt1Q86g4zJmHWHAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.29.0/24
Signature Algorithm: sha256WithRSAEncryption
53:ed:4f:f4:84:d8:d9:f5:98:de:51:c5:80:28:8a:88:7e:d6:
2e:e1:63:5f:b1:c8:5c:6e:8e:ab:0e:f0:5f:00:92:38:a6:74:
0c:47:3f:40:2c:78:06:d9:e1:16:3b:7a:e1:d5:e4:e0:65:ee:
8b:07:73:a7:80:d1:3c:50:ab:4f:22:f2:6a:e9:72:cc:c7:a0:
a5:88:7f:8d:a4:38:6f:84:22:10:c8:f1:97:83:a5:dd:cf:06:
ab:62:54:55:a3:fc:f6:44:b6:fd:c8:fd:ed:dd:96:5c:17:e0:
22:d3:c3:98:51:19:5a:db:c1:96:ee:b2:3a:26:ae:74:e3:2d:
4e:a9:5d:ec:00:3b:0a:39:f5:fa:04:1f:5a:99:7a:ed:96:16:
26:c1:7b:17:b3:22:11:54:ee:31:90:2f:a4:0e:25:60:6c:77:
bc:27:63:43:38:83:7b:6b:f8:5d:fd:3b:dc:61:0e:58:18:0e:
4f:e1:a2:a8:d1:cd:f2:cb:54:84:71:1c:de:6e:31:9d:16:8d:
14:f2:e9:e6:87:39:c0:ff:e5:43:5a:9a:2d:f9:8e:3e:60:c7:
ce:73:54:53:b3:e6:49:fd:ca:e0:8d:1a:9a:d4:8c:70:1a:1e:
86:20:84:47:25:b9:a8:2d:8a:09:a0:d9:26:b2:fb:d5:6f:48:
20:2d:a9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:09 2024 by rpki-client on console-ams.rpki-client.org