Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/68a895-6021-4ffc-b13b-c673c5093567/1/8vjZZbJthWYJzK0zb4_LOayrhdQ.roa
File: 8vjZZbJthWYJzK0zb4_LOayrhdQ.roa (raw, json)
Hash identifier: H65Dq5m+WiW48HhBbYeNHToieOd28U/BsP0Mi6mTaFE=
Subject key identifier: F2:F8:D9:65:B2:6D:85:66:09:CC:AD:33:6F:8F:CB:39:AC:AB:85:D4
Certificate issuer: /CN=62c4300ec34d6c8df50b18196e6fca58b1393126
Certificate serial: 019AA0BF
Authority key identifier: 62:C4:30:0E:C3:4D:6C:8D:F5:0B:18:19:6E:6F:CA:58:B1:39:31:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsQwDsNNbI31CxgZbm_KWLE5MSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/68a895-6021-4ffc-b13b-c673c5093567/1/8vjZZbJthWYJzK0zb4_LOayrhdQ.roa
Signing time: Tue 26 Apr 2022 11:26:08 +0000
ROA not before: Tue 26 Apr 2022 11:26:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211252
IP address blocks: 85.208.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26910911 (0x19aa0bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c4300ec34d6c8df50b18196e6fca58b1393126
Validity
Not Before: Apr 26 11:26:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2f8d965b26d856609ccad336f8fcb39acab85d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:18:ac:8c:03:d5:d3:6d:fb:71:3d:58:a2:14:
31:4e:2c:a5:70:3f:19:56:1f:dd:8b:9e:58:1a:5d:
6b:8b:07:58:c9:a6:8c:de:5a:cf:66:95:80:60:11:
fc:49:a6:80:ae:f5:58:f5:fb:7d:3b:8c:09:83:1c:
8c:21:a1:96:c1:53:7a:8a:97:70:7a:88:af:fd:e4:
e8:1e:d3:74:de:31:7b:97:fc:0c:e3:2c:6d:c2:12:
d6:58:01:2f:ac:5f:cd:bd:ca:96:bb:df:a5:64:54:
67:1f:ac:72:bb:37:dd:64:f3:b2:e8:71:e3:f9:a6:
6f:a0:39:f6:7d:f5:5c:77:2a:30:79:35:19:7b:e7:
b2:4d:e0:37:19:83:38:3e:ab:99:c8:a7:7f:7a:8e:
3e:94:01:d5:e7:62:2a:4f:a0:97:c9:89:56:10:0d:
6f:00:01:6e:41:9c:95:56:e4:28:8d:a9:98:ee:1d:
e3:0c:fa:dd:50:3c:eb:02:54:fd:51:fc:7e:95:82:
85:09:cb:09:b2:ec:ec:da:4a:8c:7a:6e:de:2d:58:
2d:f4:91:15:83:56:31:5a:65:5b:a0:6a:d9:47:89:
0f:5d:f1:27:28:9a:0d:98:2a:bd:5f:28:c0:c2:9d:
a6:3a:a7:1e:d2:8e:cd:db:35:7f:aa:db:5b:72:11:
4b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F8:D9:65:B2:6D:85:66:09:CC:AD:33:6F:8F:CB:39:AC:AB:85:D4
X509v3 Authority Key Identifier:
keyid:62:C4:30:0E:C3:4D:6C:8D:F5:0B:18:19:6E:6F:CA:58:B1:39:31:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsQwDsNNbI31CxgZbm_KWLE5MSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/68a895-6021-4ffc-b13b-c673c5093567/1/8vjZZbJthWYJzK0zb4_LOayrhdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/68a895-6021-4ffc-b13b-c673c5093567/1/YsQwDsNNbI31CxgZbm_KWLE5MSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.137.0/24
Signature Algorithm: sha256WithRSAEncryption
79:35:10:72:e3:a6:b2:e5:45:41:92:af:7f:a1:4e:5a:5b:40:
16:17:d5:69:fa:9d:69:13:4d:c3:b6:cd:f1:bd:30:1b:27:19:
3b:47:dd:f3:03:64:6f:9b:1e:32:77:50:7e:43:3c:37:9a:b3:
f5:04:4e:f6:d4:7a:67:18:41:2f:a4:a1:e7:22:01:2a:fe:75:
08:3b:b0:91:9a:6d:65:09:8f:35:81:2b:82:7c:6d:de:96:43:
87:03:62:e3:91:31:be:1e:4f:67:0b:35:78:cb:62:be:a2:42:
e3:65:20:a2:81:d7:a7:f1:8e:18:26:7e:e0:76:51:8e:7b:4b:
77:a9:3c:18:f3:3a:59:08:3b:61:d4:0e:d7:3f:55:73:0a:4e:
97:3d:c8:78:dd:41:67:7d:a8:5b:95:80:44:db:c0:e8:1a:da:
03:b1:41:3c:1a:37:ec:bf:7f:27:e3:cd:fe:c6:26:83:32:03:
1a:bd:87:c6:9c:cf:bb:ad:59:e1:64:6c:0a:0b:4c:00:87:1e:
dc:8f:ce:95:da:41:d9:c4:52:f5:ea:04:87:57:d0:94:8c:2a:
4a:75:0f:b0:b9:e2:9e:ef:51:56:91:eb:78:f0:91:2c:12:f7:
cc:96:a6:62:ba:91:16:76:a6:a9:7d:85:dd:da:44:f8:05:1f:
d7:49:4c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:10 2024 by rpki-client on console-ams.rpki-client.org