Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/rKaw49KZbo4U660DshWCzj7TdpY.roa
File: rKaw49KZbo4U660DshWCzj7TdpY.roa (raw, json)
Hash identifier: dvP3Fcq3PiN1YNIeQX2wMNM3VrsD+EKoofCzPHairnk=
Subject key identifier: AC:A6:B0:E3:D2:99:6E:8E:14:EB:AD:03:B2:15:82:CE:3E:D3:76:96
Certificate issuer: /CN=cde28f1f18099babf0a19088bea35ba084ec9297
Certificate serial: 018CC26D299944DC71F38272B10D3F6CC4D4
Authority key identifier: CD:E2:8F:1F:18:09:9B:AB:F0:A1:90:88:BE:A3:5B:A0:84:EC:92:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/rKaw49KZbo4U660DshWCzj7TdpY.roa
Signing time: Mon 01 Jan 2024 00:29:43 +0000
ROA not before: Mon 01 Jan 2024 00:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210751
IP address blocks: 185.238.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:29:99:44:dc:71:f3:82:72:b1:0d:3f:6c:c4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde28f1f18099babf0a19088bea35ba084ec9297
Validity
Not Before: Jan 1 00:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aca6b0e3d2996e8e14ebad03b21582ce3ed37696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a4:1e:48:33:d3:44:9a:06:ca:87:b9:a5:49:
b7:0e:31:d8:5b:51:1e:49:43:b4:bb:66:09:40:55:
b4:d3:f9:49:9e:f5:0c:9a:3e:0e:3c:eb:bc:97:8e:
c3:b9:7a:09:63:f6:f1:68:d7:49:c0:68:d4:78:79:
d2:9d:04:87:9e:f8:3a:2d:af:a2:4b:8c:a6:e6:14:
a2:82:e8:db:ee:2f:72:a8:da:b8:e1:09:f9:b0:13:
ae:71:6e:e2:28:6f:58:3c:6c:4c:75:f6:1e:38:e2:
06:55:63:b7:2a:b5:70:65:8d:a0:4b:35:9a:94:18:
ac:56:69:9c:6d:6c:40:45:46:1f:6d:15:99:0e:13:
2f:6d:e0:4c:07:de:36:d7:2a:30:61:d7:27:18:6e:
58:e8:f1:e5:bc:e6:60:3f:9c:e2:64:e5:8e:36:7f:
c6:29:a9:de:a2:9f:42:9b:4d:bc:1f:0e:a0:6f:71:
18:ce:a1:a2:74:f7:48:c1:88:47:35:6e:4c:be:bd:
54:cb:de:e4:a3:f6:fe:2c:4b:87:60:18:bf:0c:50:
23:c3:18:06:f2:75:93:e9:9f:14:64:1a:0a:61:53:
bc:78:02:2e:4f:03:07:9e:3f:cd:83:9d:b5:2f:dc:
c5:13:f2:95:bf:e7:bd:9f:d5:72:82:b3:3e:ef:62:
2a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A6:B0:E3:D2:99:6E:8E:14:EB:AD:03:B2:15:82:CE:3E:D3:76:96
X509v3 Authority Key Identifier:
keyid:CD:E2:8F:1F:18:09:9B:AB:F0:A1:90:88:BE:A3:5B:A0:84:EC:92:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/rKaw49KZbo4U660DshWCzj7TdpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.113.0/24
Signature Algorithm: sha256WithRSAEncryption
81:7b:cd:fc:26:aa:56:0f:17:ab:f0:bb:13:ac:22:f6:16:ca:
f1:d8:70:73:0b:16:ae:a0:2b:86:30:2b:3a:ce:b4:72:33:44:
3e:b5:c8:8c:53:a0:48:2b:ea:18:f3:d2:6d:ef:39:31:bd:47:
51:0a:e5:27:c6:07:ef:52:da:86:2c:a5:e7:93:3b:c7:af:7d:
e3:7c:41:60:0a:1d:c4:5a:95:08:30:dd:8e:fb:9e:db:60:75:
fe:13:8c:12:75:4e:b7:18:8a:49:5e:36:7e:6b:da:af:de:b0:
a5:07:e3:fb:8b:f8:17:93:b6:fd:3a:58:44:a1:d8:a9:9d:f2:
bc:fe:5b:78:23:31:72:32:86:fe:4b:4c:8c:de:e7:c6:7d:c5:
f0:ee:f3:ed:54:b7:99:9a:bc:3b:bd:2b:56:41:7f:ce:f9:66:
93:fc:e8:55:0e:ac:ba:da:da:db:cf:3f:e9:34:cb:00:91:ab:
a2:c8:cd:c7:b8:91:35:52:76:ce:69:72:95:04:f8:78:a5:0e:
f1:42:01:90:66:2f:dd:f3:1f:8c:a9:06:f9:29:60:e5:f0:a3:
fc:5e:7c:b9:d6:48:ca:18:70:d5:3a:45:f3:5f:37:b2:c8:96:
3a:05:52:09:3b:be:cd:bb:25:9d:55:4c:48:12:61:34:f2:f4:
e5:6d:a6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:17 2024 by rpki-client on console.sobornost.net