Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/m60d-e--bZ4WXk0eZeIWE6VZQ_k.roa
File: m60d-e--bZ4WXk0eZeIWE6VZQ_k.roa (raw, json)
Hash identifier: CoX8+BklnfoWhpALFQu4nmwVhIAy1YoX8GfMsR0YnwM=
Subject key identifier: 9B:AD:1D:F9:EF:BE:6D:9E:16:5E:4D:1E:65:E2:16:13:A5:59:43:F9
Certificate issuer: /CN=8d29a41e6f507a37458a49643a7be5790758f726
Certificate serial: 0CAA0166
Authority key identifier: 8D:29:A4:1E:6F:50:7A:37:45:8A:49:64:3A:7B:E5:79:07:58:F7:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSmkHm9QejdFiklkOnvleQdY9yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/m60d-e--bZ4WXk0eZeIWE6VZQ_k.roa
Signing time: Sat 01 Jan 2022 05:57:31 +0000
ROA not before: Sat 01 Jan 2022 05:57:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198560
IP address blocks: 185.107.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212468070 (0xcaa0166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d29a41e6f507a37458a49643a7be5790758f726
Validity
Not Before: Jan 1 05:57:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bad1df9efbe6d9e165e4d1e65e21613a55943f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:72:00:12:67:98:48:e1:b9:fc:91:c6:24:11:
25:68:f8:06:9e:12:eb:0e:eb:5a:34:32:34:03:26:
d4:9e:dd:18:66:e1:83:cc:ff:4d:41:ab:a5:99:b3:
b2:ab:96:d3:6e:42:5c:e3:57:61:aa:08:0d:31:8f:
83:fc:f5:bf:9a:55:b6:7d:b0:d1:e0:b8:41:02:91:
05:66:52:64:5e:bd:85:e1:fb:aa:d0:7e:ba:9b:1e:
18:1f:b8:57:c3:37:d7:a1:01:21:f4:90:8c:a2:8e:
4d:1d:4d:21:77:43:67:6b:58:e3:65:87:24:40:06:
b0:54:26:d8:4e:ca:89:cd:6a:83:79:82:eb:d0:27:
c7:bd:83:c8:04:7f:53:02:96:dc:12:e4:b2:cc:1a:
7a:06:f3:cc:45:d2:f5:8c:7a:dc:0f:52:73:8c:c2:
46:00:d8:1c:c9:cd:9f:1e:39:31:94:32:dd:12:52:
1a:72:e0:2e:0b:eb:56:40:14:67:86:1d:10:0d:5d:
c9:bb:ef:0d:19:66:af:32:4a:57:70:e3:1f:0f:dc:
e2:13:d0:3c:fa:45:0d:96:2e:d3:9d:c6:f6:df:2b:
1e:b8:23:7c:a9:8f:3a:af:91:fa:f6:87:d0:0e:71:
fe:db:79:c4:59:ac:9c:c3:e2:10:ed:8b:6b:87:cf:
af:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AD:1D:F9:EF:BE:6D:9E:16:5E:4D:1E:65:E2:16:13:A5:59:43:F9
X509v3 Authority Key Identifier:
keyid:8D:29:A4:1E:6F:50:7A:37:45:8A:49:64:3A:7B:E5:79:07:58:F7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmkHm9QejdFiklkOnvleQdY9yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/m60d-e--bZ4WXk0eZeIWE6VZQ_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/jSmkHm9QejdFiklkOnvleQdY9yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.64.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:cc:d6:c4:f8:62:d6:87:f9:a8:cb:1f:81:09:d4:58:fb:e8:
1b:38:06:57:64:7b:9c:8f:10:88:d1:1a:ab:ae:b7:2d:9b:7e:
1c:33:5e:ac:b3:c9:0f:18:bf:25:a3:e1:52:58:e1:62:8e:5f:
fb:b0:a8:44:d8:aa:a7:c9:cb:44:ec:0b:83:67:eb:72:22:50:
1a:ca:ab:91:fe:dd:aa:98:04:fe:40:49:3f:0b:91:a3:75:4a:
25:ef:ca:76:1e:4a:34:a9:8b:c4:84:c1:d2:af:50:05:fc:46:
7b:36:cc:a8:05:c8:74:4f:6f:75:07:e8:77:56:3b:cd:79:ae:
54:0b:d9:83:a1:1d:74:32:16:8b:07:9e:bf:fa:fc:9b:20:61:
25:19:a6:31:54:29:3a:08:d4:61:c7:5b:c5:30:32:0b:64:d2:
a7:b6:8b:37:b7:e4:3f:ee:2f:12:05:30:f9:2c:0a:bf:de:32:
8a:7a:f4:a2:f5:1e:a8:b5:50:84:da:54:ee:81:f7:cf:b9:77:
5d:44:bb:6b:36:8c:a7:24:e9:eb:ca:ea:4c:64:23:f2:19:fd:
93:6b:f1:4e:5f:59:b9:ee:ec:ab:76:7b:e7:9d:f8:42:f1:e5:
fb:29:c3:3f:22:b4:87:25:e1:17:41:e7:29:90:22:fb:12:53:
bf:9e:59:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:41 2024 by rpki-client on console-ams.rpki-client.org