Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/be4ba4-88ab-4f33-98ae-af6d2bdae087/1/lGy7-mNyzvuEsPIYUdCKaaERj2s.roa
File: lGy7-mNyzvuEsPIYUdCKaaERj2s.roa (raw, json)
Hash identifier: HOn5vcuvg2CI5gcVHXM1IYPoCTv3utcaWObmY1AMR+Q=
Subject key identifier: 94:6C:BB:FA:63:72:CE:FB:84:B0:F2:18:51:D0:8A:69:A1:11:8F:6B
Certificate issuer: /CN=3338a72ed4060ca1597e4dcbcd4de430bc4e1bbc
Certificate serial: 01006105
Authority key identifier: 33:38:A7:2E:D4:06:0C:A1:59:7E:4D:CB:CD:4D:E4:30:BC:4E:1B:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzinLtQGDKFZfk3LzU3kMLxOG7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/be4ba4-88ab-4f33-98ae-af6d2bdae087/1/lGy7-mNyzvuEsPIYUdCKaaERj2s.roa
Signing time: Sat 01 Jan 2022 09:58:58 +0000
ROA not before: Sat 01 Jan 2022 09:58:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 185.252.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16802053 (0x1006105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3338a72ed4060ca1597e4dcbcd4de430bc4e1bbc
Validity
Not Before: Jan 1 09:58:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=946cbbfa6372cefb84b0f21851d08a69a1118f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:be:6c:1d:f4:44:64:05:32:db:96:7b:d1:
70:9d:44:b3:4d:87:0b:ef:a7:04:91:f9:30:dd:b9:
8e:9a:14:5f:79:ba:60:43:43:09:66:70:3b:7d:60:
2b:3b:1b:30:64:55:e7:a1:9f:a1:d8:1f:31:85:c3:
2f:c1:0a:32:24:1d:63:ca:65:c6:2e:d7:c7:e2:19:
e2:76:d9:68:25:dc:5d:9a:6c:bb:20:3f:b7:53:a8:
b1:a0:40:f6:f1:76:bf:a8:a6:87:79:9a:51:58:26:
9e:1f:49:6b:5f:04:67:1c:62:f5:ac:f1:1d:11:5d:
fd:a7:6c:33:c2:7b:86:f3:b0:b6:3e:ec:f2:f6:97:
1e:08:cb:35:e7:27:de:b4:65:f7:3d:5c:0c:74:ef:
b4:7f:66:09:5f:be:6e:70:7f:6b:b5:25:9f:92:1b:
ab:6c:ea:e3:98:e1:2a:de:cc:ab:4f:57:52:e4:17:
67:08:43:b9:6d:68:1e:16:ff:b3:98:ad:17:6b:6e:
41:d3:8e:4e:75:f6:fc:bd:3a:06:7a:98:9c:7a:4e:
37:15:41:12:fa:41:9b:79:33:0c:2e:64:f8:22:b8:
0a:5b:9f:56:02:52:5b:1c:00:0f:2a:85:1f:62:52:
85:8f:93:45:ab:1e:9e:5a:36:df:0c:95:8e:43:68:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6C:BB:FA:63:72:CE:FB:84:B0:F2:18:51:D0:8A:69:A1:11:8F:6B
X509v3 Authority Key Identifier:
keyid:33:38:A7:2E:D4:06:0C:A1:59:7E:4D:CB:CD:4D:E4:30:BC:4E:1B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzinLtQGDKFZfk3LzU3kMLxOG7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/be4ba4-88ab-4f33-98ae-af6d2bdae087/1/lGy7-mNyzvuEsPIYUdCKaaERj2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/be4ba4-88ab-4f33-98ae-af6d2bdae087/1/MzinLtQGDKFZfk3LzU3kMLxOG7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.210.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:23:c0:de:42:53:2e:6c:1d:0a:ad:70:2c:f7:49:50:34:f5:
15:24:78:8a:bd:57:45:de:32:47:ad:2c:c8:4d:42:61:57:38:
0c:60:72:6e:1e:58:1d:2e:23:b3:a8:ca:cb:1c:15:5d:cf:9d:
7a:c0:e6:e0:8a:7f:44:89:64:a0:f9:9d:e2:31:ca:8a:34:ef:
76:86:97:22:52:19:fd:1e:23:29:6e:0f:f8:00:7a:0e:18:ca:
80:f6:4b:5b:81:df:63:df:52:fc:df:7b:67:86:f3:27:fe:43:
cf:f8:1f:79:e8:c3:0f:c8:0e:e1:41:25:5b:ac:df:11:c4:cc:
70:51:89:b2:10:5f:3c:b3:3f:02:3f:9a:fc:ba:43:14:e4:8f:
db:5e:21:ae:e4:80:9c:88:e7:86:a3:31:2c:7e:ad:9d:5f:95:
54:76:64:a2:37:13:ba:63:cf:4a:0d:c2:ae:eb:41:86:a1:6d:
17:f4:85:cc:ab:37:53:1f:b6:c1:0c:12:b6:de:65:f1:3b:68:
b7:90:93:e9:66:ea:38:be:62:73:3e:43:2a:71:81:53:f8:7e:
93:2d:fa:f8:5d:ab:e5:18:3a:94:c5:3a:ae:0f:b6:83:0a:76:
45:19:c7:87:32:5b:30:46:ce:ef:88:10:37:8e:b3:5e:bb:ec:
ba:ac:90:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:39 2024 by rpki-client on console-fra.rpki-client.org