Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c73c-327f-4da5-b14d-c77f64ab302b/1/tIvIIDarehZl18ri85_K89Kbbmc.roa
File: tIvIIDarehZl18ri85_K89Kbbmc.roa (raw, json)
Hash identifier: f4Lu1kpohkKQ8gOmCsbNUklU/EOdnODh7SbdBKq/I5Q=
Subject key identifier: B4:8B:C8:20:36:AB:7A:16:65:D7:CA:E2:F3:9F:CA:F3:D2:9B:6E:67
Certificate issuer: /CN=671ef78adc0c4fbc70babd3d36b63ce130b90935
Certificate serial: 01856CF87C5A73114CD69191F657956F5137
Authority key identifier: 67:1E:F7:8A:DC:0C:4F:BC:70:BA:BD:3D:36:B6:3C:E1:30:B9:09:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zx73itwMT7xwur09NrY84TC5CTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c73c-327f-4da5-b14d-c77f64ab302b/1/tIvIIDarehZl18ri85_K89Kbbmc.roa
Signing time: Sun 01 Jan 2023 10:55:02 +0000
ROA not before: Sun 01 Jan 2023 10:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.9.37.0/24 maxlen: 24
185.9.38.0/24 maxlen: 24
185.9.36.0/24 maxlen: 24
185.9.39.0/24 maxlen: 24
185.244.145.0/24 maxlen: 24
185.244.144.0/24 maxlen: 24
185.244.146.0/24 maxlen: 24
185.244.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:7c:5a:73:11:4c:d6:91:91:f6:57:95:6f:51:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=671ef78adc0c4fbc70babd3d36b63ce130b90935
Validity
Not Before: Jan 1 10:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b48bc82036ab7a1665d7cae2f39fcaf3d29b6e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e6:ed:76:68:6f:a8:fe:4a:9e:32:ea:d9:3b:
6d:de:98:2c:5a:6f:27:84:f3:1f:09:c4:85:60:3a:
a4:56:f0:35:82:e1:40:2a:0b:44:76:cd:d1:c1:a8:
48:eb:fb:41:25:57:3c:b4:84:69:3d:30:99:63:66:
b8:56:21:5f:5f:a6:ea:4a:05:c5:1b:90:7a:6b:08:
7a:27:43:be:79:d1:6d:97:67:6e:ce:bd:ef:6a:86:
c2:fc:47:2e:ec:3c:9d:26:a1:d3:96:90:26:92:6a:
59:d7:f1:d9:1c:72:31:db:b1:ac:c0:5c:c5:00:fc:
97:e4:f2:54:6f:b7:17:1b:b5:70:72:f5:2c:e9:aa:
aa:60:a2:d2:ab:a9:46:c5:dc:bd:07:4f:4d:70:bd:
b1:3d:9b:18:77:d7:a5:a2:f9:91:5a:8b:3c:72:1f:
78:72:b3:de:9a:36:9a:39:e8:ca:ae:2f:e7:b5:dd:
97:ec:89:ca:27:3b:44:9d:44:a9:7c:ed:f6:18:25:
bb:fe:bc:f5:5f:3b:fa:a9:6c:8c:9b:2e:78:de:e6:
26:0d:39:3b:b6:a9:2d:25:9a:15:e4:49:eb:fd:d7:
9a:db:e5:b1:70:ea:38:69:7a:32:6b:ca:60:28:5b:
42:fd:87:d0:46:a8:4a:56:bd:30:39:3b:05:10:89:
69:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8B:C8:20:36:AB:7A:16:65:D7:CA:E2:F3:9F:CA:F3:D2:9B:6E:67
X509v3 Authority Key Identifier:
keyid:67:1E:F7:8A:DC:0C:4F:BC:70:BA:BD:3D:36:B6:3C:E1:30:B9:09:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zx73itwMT7xwur09NrY84TC5CTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c73c-327f-4da5-b14d-c77f64ab302b/1/tIvIIDarehZl18ri85_K89Kbbmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c73c-327f-4da5-b14d-c77f64ab302b/1/Zx73itwMT7xwur09NrY84TC5CTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.36.0/22
185.244.144.0/22
Signature Algorithm: sha256WithRSAEncryption
86:76:be:4d:e1:f3:f2:53:8a:a5:11:0d:11:fe:c2:5e:b7:4b:
9e:53:62:7d:75:87:9d:dd:fb:bf:01:9c:3a:ab:4a:c2:e4:f9:
5f:64:d4:a3:1a:b9:3d:33:ea:1c:fc:b0:63:c8:44:c6:08:89:
3b:8c:e2:c8:64:56:01:ce:98:c4:3b:37:b1:9b:cc:67:95:b1:
28:11:c7:f0:25:95:44:f4:c0:d9:d2:85:31:3a:c7:34:1f:a7:
74:59:14:af:dc:e6:1f:05:c7:1b:c6:d3:b1:71:9d:71:c7:c5:
d9:cc:fb:a6:5b:d4:9d:80:4c:21:2a:7c:91:a8:4d:08:fe:28:
e7:ee:9d:cc:97:5d:82:db:9c:19:7b:d4:aa:e4:5a:a6:6e:b2:
69:8d:36:39:5b:73:19:8d:a5:b7:20:c3:2e:81:d7:ce:60:3f:
e4:40:4e:86:dd:8c:4a:43:6a:42:c1:ef:90:4d:bb:09:10:8c:
64:a9:88:53:66:eb:f3:30:21:b0:f0:9d:b4:92:5e:14:d7:15:
2e:4d:e1:c2:d7:da:7e:12:69:0b:f3:1b:d6:65:9f:ab:1f:62:
da:2d:cd:2c:13:68:cd:ba:43:b4:01:87:af:f9:3d:30:ae:20:
61:c4:66:f0:0d:13:ef:2a:00:3b:68:11:b7:6c:8b:a1:4e:78:
bd:e5:0a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:20 2024 by rpki-client on console-ams.rpki-client.org