Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS8100.roa
File: AS8100.roa (raw, json)
Hash identifier: w+QSfOOhSW8yl82LZewyP6E1xezj7aqqNXfDzD4r29Y=
Subject key identifier: 46:CF:F0:43:0D:F3:0C:B0:B7:37:EE:58:4C:B0:35:74:65:40:E9:42
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 53AADEA2A034CBCBDF2E84A24EAEF7F1AE852D0C
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS8100.roa
Signing time: Sun 01 Jan 2023 23:59:13 +0000
ROA not before: Sun 01 Jan 2023 23:54:13 +0000
ROA not after: Sun 31 Dec 2023 23:59:13 +0000
asID: 8100
IP address blocks: 185.121.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:aa:de:a2:a0:34:cb:cb:df:2e:84:a2:4e:ae:f7:f1:ae:85:2d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:13 2023 GMT
Not After : Dec 31 23:59:13 2023 GMT
Subject: CN=46CFF0430DF30CB0B737EE584CB035746540E942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:fb:fa:43:ba:76:b9:33:c9:d7:b4:52:e6:
9b:30:bd:6d:f0:f0:19:8d:ee:5a:90:e9:a2:13:f8:
a0:52:d1:5e:26:77:8f:60:9a:2c:0c:f0:72:58:e4:
62:ba:f1:20:4e:e8:93:d7:f7:be:62:5b:06:b6:87:
1a:35:9d:92:86:4c:4f:6c:a6:89:ec:fc:0b:b2:48:
4b:1a:e0:cf:1f:45:81:4e:6c:23:6a:5e:e1:9f:1a:
ab:39:d4:54:54:5e:a6:77:ec:4a:6f:1c:03:ea:41:
6d:97:2e:ce:a0:b3:e5:a3:62:97:56:df:5f:0b:82:
f8:c7:dc:2d:8e:96:ab:a5:c6:27:f1:39:0a:8c:6b:
3a:a6:d9:4c:52:e3:ad:85:6f:23:0f:c2:b5:0d:2d:
08:f1:c9:0d:50:d5:a6:dd:6a:03:7c:ef:9d:1f:7c:
70:e0:2c:bf:30:f9:e4:2a:e7:f0:fa:d8:e3:69:59:
4a:8f:62:0a:4d:d7:2a:3f:74:9d:ad:fb:ce:db:ee:
25:87:fe:52:98:f5:e8:53:17:66:eb:eb:5f:3a:7e:
4f:72:39:71:55:61:2b:e9:5b:d5:13:4f:0c:9d:6f:
ab:c2:24:2c:2a:6c:68:58:bc:6b:f2:60:22:51:d6:
f6:a7:e0:4f:9a:4c:39:b9:eb:d7:e7:05:65:10:91:
49:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CF:F0:43:0D:F3:0C:B0:B7:37:EE:58:4C:B0:35:74:65:40:E9:42
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS8100.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.176.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:97:d2:6d:1b:61:7c:1e:ac:72:8f:15:d7:1a:2d:82:55:9a:
56:e8:15:14:51:02:77:5e:19:b5:4f:06:19:15:ee:b0:b6:5f:
3b:70:0a:03:61:56:18:69:e0:7d:c9:14:bf:1f:0a:ff:62:c9:
fd:e1:bd:7b:30:b1:d3:78:b3:1f:0c:f1:df:ac:d8:47:e1:2e:
f8:5b:8d:af:4e:cc:48:d1:d3:31:de:a9:b2:4e:82:3a:ff:20:
ed:bd:33:ec:26:33:40:7e:58:51:07:cc:1b:20:93:1f:06:7b:
9d:89:2c:96:aa:bf:3a:f9:e2:72:d4:b7:21:b2:b9:59:95:11:
30:3f:cb:84:9d:fe:81:b1:9c:32:25:11:1d:2f:32:52:34:2b:
4b:05:dc:70:df:bd:e8:bb:22:93:f5:c9:89:7e:ff:1c:0a:3e:
03:d2:a7:d3:6f:89:6c:af:57:6a:d4:c9:14:23:17:c4:9e:b4:
04:b9:16:d0:90:8c:37:36:14:15:0b:26:cb:3e:86:7a:5a:bb:
4b:03:a6:91:c3:84:5c:74:c2:1e:a8:8e:04:4d:42:db:7a:a0:
84:62:87:39:62:b6:56:e5:19:d4:63:49:f2:a9:a7:5a:27:bf:
ba:de:a6:b0:7f:62:18:9e:18:e5:24:f8:1b:5a:12:b4:fb:41:
ba:7d:83:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org