Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/68a895-6021-4ffc-b13b-c673c5093567/1/pKhqkl0twaWJk7Vjd5P7QDXNq44.roa
File: pKhqkl0twaWJk7Vjd5P7QDXNq44.roa (raw, json)
Hash identifier: e4tK0KT9Ppn5RKfUCOAMsZ5gBc9Vzh3uqsEuaScLRFo=
Subject key identifier: A4:A8:6A:92:5D:2D:C1:A5:89:93:B5:63:77:93:FB:40:35:CD:AB:8E
Certificate issuer: /CN=62c4300ec34d6c8df50b18196e6fca58b1393126
Certificate serial: 0127AFF9
Authority key identifier: 62:C4:30:0E:C3:4D:6C:8D:F5:0B:18:19:6E:6F:CA:58:B1:39:31:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsQwDsNNbI31CxgZbm_KWLE5MSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/68a895-6021-4ffc-b13b-c673c5093567/1/pKhqkl0twaWJk7Vjd5P7QDXNq44.roa
Signing time: Wed 09 Mar 2022 11:20:06 +0000
ROA not before: Wed 09 Mar 2022 11:20:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 85.208.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19378169 (0x127aff9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c4300ec34d6c8df50b18196e6fca58b1393126
Validity
Not Before: Mar 9 11:20:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4a86a925d2dc1a58993b5637793fb4035cdab8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b2:1d:16:fb:f2:e4:2c:d5:a8:0e:0f:69:3c:
80:c6:65:b7:5b:1a:1c:84:f5:a1:d7:d0:64:31:e8:
b2:57:3a:2b:21:9b:9e:f6:39:a3:27:dc:74:9c:fc:
02:41:d4:75:6c:4c:d8:04:05:73:8f:5a:18:fa:9d:
9b:d8:af:81:27:fe:91:69:d7:37:c3:fd:f9:e9:c2:
cf:69:b7:3e:94:da:c2:d6:ae:18:8e:a3:11:91:bb:
7b:bd:12:01:5e:17:0e:08:17:f4:6a:54:fc:31:6c:
7e:15:a8:9f:27:72:a7:e9:94:4b:85:c7:a2:32:50:
6d:c2:08:ca:d0:6e:f5:92:1a:76:c6:1d:0f:dc:35:
79:09:43:19:94:56:26:c0:b5:63:cd:7a:78:34:ed:
54:c5:3d:6f:8b:bd:10:2a:c7:78:ec:70:91:87:c0:
c2:10:2a:b5:14:da:41:40:df:b1:cd:39:93:68:6e:
ed:38:e7:0b:78:87:5d:74:90:39:39:be:d5:9b:a6:
a4:cb:64:c7:a4:29:be:24:d6:3f:e6:b2:c2:4f:1f:
50:7c:31:2a:ab:51:67:bd:51:12:b4:91:8d:47:4a:
ef:41:93:48:ba:28:60:23:33:f6:71:24:0e:c2:9b:
48:d2:ef:e1:08:26:50:67:26:58:90:db:d5:3d:31:
f5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A8:6A:92:5D:2D:C1:A5:89:93:B5:63:77:93:FB:40:35:CD:AB:8E
X509v3 Authority Key Identifier:
keyid:62:C4:30:0E:C3:4D:6C:8D:F5:0B:18:19:6E:6F:CA:58:B1:39:31:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsQwDsNNbI31CxgZbm_KWLE5MSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/68a895-6021-4ffc-b13b-c673c5093567/1/pKhqkl0twaWJk7Vjd5P7QDXNq44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/68a895-6021-4ffc-b13b-c673c5093567/1/YsQwDsNNbI31CxgZbm_KWLE5MSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.137.0/24
Signature Algorithm: sha256WithRSAEncryption
47:fd:cc:56:aa:66:ca:68:4d:ef:13:1f:f7:57:dc:32:02:66:
05:b8:84:cd:c2:24:f5:55:17:3f:08:d5:a3:5c:1b:35:54:9b:
84:41:82:a4:3a:d1:30:86:29:d9:ac:52:06:6c:91:88:f1:cd:
16:e2:ca:8c:9d:b9:ab:e8:c9:57:20:83:b6:d3:d6:66:2a:c8:
54:b5:4f:3d:d9:84:d9:0b:c5:e8:25:e6:c3:c6:db:c2:16:91:
d3:7c:68:68:ee:57:43:be:e3:26:82:68:d5:7a:91:ef:32:59:
25:48:be:db:50:52:4b:95:05:b4:52:35:38:5a:34:4b:0a:c8:
19:8d:84:e0:dc:ff:0a:ec:a8:d2:8f:8a:74:6c:c9:bc:b9:cd:
0b:11:7f:55:c5:a8:c6:19:ca:55:34:55:00:34:d6:b6:4c:b2:
90:39:48:ef:5c:b8:82:2e:57:1e:1c:27:dc:de:c9:45:e0:86:
2f:6a:fb:4c:bd:7c:af:89:13:c6:85:56:d8:c0:d4:af:a4:c1:
bb:1c:79:e3:46:9d:24:96:9d:6f:29:d8:0c:95:df:96:e9:1b:
f7:b4:17:8c:66:6f:f5:53:0b:ea:07:d8:56:04:82:0b:16:d1:
ea:98:53:2b:0e:05:d3:fa:31:c3:76:de:7a:66:3f:65:a3:c4:
7c:4e:59:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:36 2024 by rpki-client on console-fra.rpki-client.org