Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/68e73e-81db-49cf-8abc-ec8e21a3ea49/1/5zMFCqMqy3o7p80wFnJAGfEVL94.roa
File: 5zMFCqMqy3o7p80wFnJAGfEVL94.roa (raw, json)
Hash identifier: NPCH8HT5QzzIk0x27lnyiJuDLwP6K0JZKrmzEOLYiR0=
Subject key identifier: E7:33:05:0A:A3:2A:CB:7A:3B:A7:CD:30:16:72:40:19:F1:15:2F:DE
Certificate issuer: /CN=052c15460fa39c6471496cd18fcc40a18a7949e7
Certificate serial: 0AEEC381
Authority key identifier: 05:2C:15:46:0F:A3:9C:64:71:49:6C:D1:8F:CC:40:A1:8A:79:49:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSwVRg-jnGRxSWzRj8xAoYp5Sec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/68e73e-81db-49cf-8abc-ec8e21a3ea49/1/5zMFCqMqy3o7p80wFnJAGfEVL94.roa
Signing time: Sat 01 Jan 2022 15:05:33 +0000
ROA not before: Sat 01 Jan 2022 15:05:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57751
IP address blocks: 185.238.116.0/22 maxlen: 24
2a0c:3480::/29 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183419777 (0xaeec381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052c15460fa39c6471496cd18fcc40a18a7949e7
Validity
Not Before: Jan 1 15:05:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e733050aa32acb7a3ba7cd3016724019f1152fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:65:1b:54:6a:74:2e:2f:ae:54:08:f0:74:f7:
15:6d:3f:55:2a:bc:df:f2:79:64:ea:bd:8b:91:a9:
ae:79:3d:b5:45:75:b1:db:9a:67:58:73:56:b5:4c:
c7:8c:2f:10:06:8c:be:f3:a8:0c:1e:69:0f:70:7b:
4c:fa:a2:f0:73:25:db:7e:10:ee:18:91:4b:60:17:
dd:c3:a7:3b:89:02:68:19:89:0e:13:6d:1d:08:77:
63:3f:5b:34:e4:4b:1c:d8:29:45:bb:94:87:7b:c5:
9b:70:b0:b3:89:3c:1e:bb:48:a6:c2:c2:ba:02:f0:
d7:41:3e:d1:d9:ab:6d:be:96:95:c6:81:b4:f2:7d:
5c:ce:0b:18:4f:c3:13:51:51:92:54:c2:45:25:7d:
e7:58:08:3c:12:06:80:c0:87:00:99:96:ba:51:c0:
f3:de:59:69:31:33:f1:e7:a4:67:36:da:ee:97:76:
86:29:61:01:a8:d1:c4:11:32:c6:30:f3:33:bb:e9:
39:94:42:72:11:10:39:94:dd:07:11:4c:05:04:6e:
10:12:5d:59:38:10:2a:71:82:73:21:5d:ff:59:1b:
43:df:b3:47:ba:f1:a4:6f:da:c9:f9:66:c8:9f:95:
41:1e:f1:92:43:ad:4d:4c:38:9e:80:c0:ae:18:f6:
ce:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:33:05:0A:A3:2A:CB:7A:3B:A7:CD:30:16:72:40:19:F1:15:2F:DE
X509v3 Authority Key Identifier:
keyid:05:2C:15:46:0F:A3:9C:64:71:49:6C:D1:8F:CC:40:A1:8A:79:49:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSwVRg-jnGRxSWzRj8xAoYp5Sec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/68e73e-81db-49cf-8abc-ec8e21a3ea49/1/5zMFCqMqy3o7p80wFnJAGfEVL94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/68e73e-81db-49cf-8abc-ec8e21a3ea49/1/BSwVRg-jnGRxSWzRj8xAoYp5Sec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.116.0/22
IPv6:
2a0c:3480::/29
Signature Algorithm: sha256WithRSAEncryption
96:6e:92:b3:15:2f:c4:05:a8:90:28:8b:a2:6f:f3:59:3d:df:
35:69:e3:83:2d:36:39:8a:b6:20:98:0d:20:f6:07:d3:bb:65:
d1:cc:b0:f8:bb:33:20:fc:26:b3:6d:d1:b0:cf:08:de:8d:a0:
2c:81:a8:14:ad:8c:d4:23:18:33:a5:8d:f5:8b:1e:b3:fd:11:
35:04:29:27:8e:ce:59:20:8d:a0:f3:c3:5a:72:35:c1:79:4b:
ca:be:aa:bd:e8:e8:eb:92:08:c3:7f:cd:a2:14:b3:b6:df:93:
a4:53:68:c6:84:67:31:b7:d1:2d:53:cd:65:fd:e3:3f:c1:8a:
87:c8:4d:8b:26:18:c5:49:e4:45:a9:ab:4f:eb:7e:28:61:5f:
53:5d:d0:b7:00:34:70:4c:1c:96:e1:bd:46:cd:46:f2:e1:39:
ab:7c:6b:74:d2:1f:48:da:a7:45:58:86:6d:54:01:a2:cc:63:
28:44:9b:bb:3a:03:6a:77:b6:c7:cf:c2:1a:0f:3d:44:33:af:
4c:6f:36:d4:00:34:ca:14:d5:26:df:67:bb:00:0f:c5:b8:37:
f5:ff:7e:06:f3:b3:55:67:ee:40:3a:28:8a:4d:61:ef:bf:aa:
69:37:09:c3:bc:93:d2:4c:22:e2:1b:b6:d3:bf:c8:8e:61:73:
42:79:39:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:54 2024 by rpki-client on console-fra.rpki-client.org