Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e6e903-f1dc-459f-b5cf-ddcdbd580b2f/1/NIQV3BJmJsDFoP4uU5XU9fmHbGA.roa
File: NIQV3BJmJsDFoP4uU5XU9fmHbGA.roa (raw, json)
Hash identifier: MKkL1gqLfLUL11iOGgQ2j4d2GX2fxaODjYw3pCCNeTw=
Subject key identifier: 34:84:15:DC:12:66:26:C0:C5:A0:FE:2E:53:95:D4:F5:F9:87:6C:60
Certificate issuer: /CN=ceb0fbf6f0325f64dee9d9c2787265b93d6b3f5b
Certificate serial: 03D021D6
Authority key identifier: CE:B0:FB:F6:F0:32:5F:64:DE:E9:D9:C2:78:72:65:B9:3D:6B:3F:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrD79vAyX2Te6dnCeHJluT1rP1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e6e903-f1dc-459f-b5cf-ddcdbd580b2f/1/NIQV3BJmJsDFoP4uU5XU9fmHbGA.roa
Signing time: Sat 01 Jan 2022 10:58:54 +0000
ROA not before: Sat 01 Jan 2022 10:58:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201606
IP address blocks: 185.69.83.0/24 maxlen: 24
185.69.82.0/24 maxlen: 24
185.69.80.0/22 maxlen: 22
185.69.81.0/24 maxlen: 24
185.69.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63971798 (0x3d021d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb0fbf6f0325f64dee9d9c2787265b93d6b3f5b
Validity
Not Before: Jan 1 10:58:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=348415dc126626c0c5a0fe2e5395d4f5f9876c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:55:8d:59:14:a0:7d:3c:c6:b1:8c:f3:49:69:
2b:b0:bd:d3:cc:4e:3a:66:fa:f1:45:71:03:be:4f:
1a:2f:fc:d5:8d:f5:42:4c:b7:a8:8c:25:57:8e:35:
e6:0f:92:4d:e4:41:16:0f:42:60:25:63:5a:47:cf:
ca:1e:4d:04:c9:56:21:38:7d:ea:52:c4:52:a6:e1:
f3:9a:bb:da:54:b8:ca:cd:4a:dc:8a:75:b2:32:51:
b6:73:60:d8:ef:9a:72:dd:6c:d5:5b:d3:e0:85:04:
52:79:96:dc:7a:8a:13:4c:d4:d7:71:e5:5c:e9:3c:
49:a4:0d:29:42:6c:14:38:8c:79:64:c8:45:47:90:
0e:b0:8a:6c:d3:4a:c3:89:77:89:61:fa:b2:9d:f3:
32:5e:39:55:5e:ad:7a:a3:10:ad:cf:f4:07:e1:58:
0f:ac:f7:19:65:db:b8:71:29:3c:83:25:c8:c8:b3:
6b:8c:74:8f:d5:2c:e0:8a:2e:6a:52:45:ac:d3:a4:
e3:38:43:1b:e6:d2:f7:b0:c0:b5:80:85:0f:f3:b5:
aa:fe:7b:88:70:7c:39:29:9b:7b:c8:2e:02:00:09:
0e:ed:9e:c2:ea:1c:be:43:f1:ed:fb:1e:1a:cd:45:
c0:ba:68:e5:f7:13:d3:76:a3:c4:95:b5:37:9e:cd:
1d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:84:15:DC:12:66:26:C0:C5:A0:FE:2E:53:95:D4:F5:F9:87:6C:60
X509v3 Authority Key Identifier:
keyid:CE:B0:FB:F6:F0:32:5F:64:DE:E9:D9:C2:78:72:65:B9:3D:6B:3F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrD79vAyX2Te6dnCeHJluT1rP1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e6e903-f1dc-459f-b5cf-ddcdbd580b2f/1/NIQV3BJmJsDFoP4uU5XU9fmHbGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e6e903-f1dc-459f-b5cf-ddcdbd580b2f/1/zrD79vAyX2Te6dnCeHJluT1rP1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.80.0/22
Signature Algorithm: sha256WithRSAEncryption
d5:3f:11:b5:3c:f9:de:e6:c4:50:dc:36:bd:45:9a:2e:8e:61:
c3:a0:3e:0a:b3:2b:f4:e4:50:ae:2b:18:76:f9:5a:58:72:e6:
59:38:d0:0f:ee:5c:05:5c:7e:cc:e8:2d:9a:60:d8:43:52:a1:
ae:97:3c:35:d2:6a:18:5c:a6:e9:96:d9:74:e0:56:7b:17:84:
2e:40:6d:a3:42:7a:7a:d2:09:7e:ea:ec:b1:6c:4a:91:f8:37:
54:c2:95:65:3f:09:9d:13:b9:cd:99:4b:20:40:7c:c5:77:95:
52:1d:90:78:45:ed:d6:16:04:65:65:f6:0a:d8:61:d8:74:57:
4d:dc:fc:74:fc:1d:06:3b:c1:3f:02:88:a4:c2:6d:39:3f:02:
68:81:04:7d:a8:02:5b:4a:69:c9:a0:a5:84:24:b1:ed:53:7e:
fb:31:ce:13:61:e2:14:db:17:66:28:f2:e6:76:3e:96:f4:7a:
bb:5e:c3:45:07:1d:ed:87:94:45:65:f9:b8:46:1a:db:85:05:
6d:7c:08:74:21:af:da:5d:c5:89:95:b7:8c:02:10:20:a2:78:
80:f9:b1:65:14:3c:61:6b:f5:04:a5:f6:43:1f:bc:07:0a:a3:
ca:22:c7:1c:73:94:59:2b:c5:4d:b7:06:82:58:7c:36:04:b9:
d7:11:42:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:11 2024 by rpki-client on console-fra.rpki-client.org