Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a4163d-dfce-4be0-96e9-adf2bac1f02c/1/xDSxDHdLHqxeUXUdtCacQXZH3CQ.roa
File: xDSxDHdLHqxeUXUdtCacQXZH3CQ.roa (raw, json)
Hash identifier: F/3A+gXJWAziVqfCP6ZzfPOI1GwKjHs9byyZXk2COyc=
Subject key identifier: C4:34:B1:0C:77:4B:1E:AC:5E:51:75:1D:B4:26:9C:41:76:47:DC:24
Certificate issuer: /CN=84536fc4c2f44ba70e420bd3bb21ccbd60b4a4a1
Certificate serial: D008
Authority key identifier: 84:53:6F:C4:C2:F4:4B:A7:0E:42:0B:D3:BB:21:CC:BD:60:B4:A4:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFNvxML0S6cOQgvTuyHMvWC0pKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a4163d-dfce-4be0-96e9-adf2bac1f02c/1/xDSxDHdLHqxeUXUdtCacQXZH3CQ.roa
Signing time: Thu 03 Feb 2022 12:42:40 +0000
ROA not before: Thu 03 Feb 2022 12:42:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6898
IP address blocks: 185.155.176.0/22 maxlen: 22
77.220.64.0/19 maxlen: 19
2a02:210::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53256 (0xd008)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84536fc4c2f44ba70e420bd3bb21ccbd60b4a4a1
Validity
Not Before: Feb 3 12:42:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c434b10c774b1eac5e51751db4269c417647dc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:37:7a:a9:2d:2c:9d:7c:da:e5:c5:26:8a:
76:b6:85:ec:d6:3c:e2:62:62:23:55:d3:e1:01:ac:
4b:52:62:f7:e2:3b:b8:73:e2:bc:43:08:56:82:46:
11:55:60:7b:4d:b0:45:15:7e:d6:3b:a2:a6:0d:50:
5d:15:02:56:b5:eb:b5:fa:49:b3:01:ed:c4:1e:55:
6f:66:21:ba:dc:dc:d3:d1:16:db:35:1d:95:fa:9e:
48:51:3e:8a:fe:ac:39:15:8e:73:68:42:85:2a:c9:
4b:a1:e7:b3:a5:36:5c:0a:1c:33:c6:0e:3b:4d:05:
ce:50:92:89:62:49:b0:53:b8:74:f6:f6:3f:1e:fd:
28:bf:4f:6a:0a:2e:26:de:04:c4:2e:f8:a0:1b:d5:
61:d4:28:a5:b8:c8:13:f0:46:78:3b:f1:f0:b4:ea:
f8:3f:00:3c:7b:d8:23:64:1f:33:a2:3d:f4:8b:c0:
ea:68:be:27:ed:05:1a:57:f5:11:28:a4:7d:45:3c:
10:ac:c5:af:f3:ec:6f:91:71:94:23:5e:47:ac:d3:
84:56:b6:6e:1b:07:a8:52:5c:76:6f:46:03:e4:7b:
1a:8e:23:23:41:4f:b6:7c:c6:1d:5e:7d:7a:b1:f9:
40:91:0c:94:5e:0a:b8:bc:b5:99:b4:84:c3:08:d4:
8a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:34:B1:0C:77:4B:1E:AC:5E:51:75:1D:B4:26:9C:41:76:47:DC:24
X509v3 Authority Key Identifier:
keyid:84:53:6F:C4:C2:F4:4B:A7:0E:42:0B:D3:BB:21:CC:BD:60:B4:A4:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFNvxML0S6cOQgvTuyHMvWC0pKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a4163d-dfce-4be0-96e9-adf2bac1f02c/1/xDSxDHdLHqxeUXUdtCacQXZH3CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a4163d-dfce-4be0-96e9-adf2bac1f02c/1/hFNvxML0S6cOQgvTuyHMvWC0pKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.220.64.0/19
185.155.176.0/22
IPv6:
2a02:210::/32
Signature Algorithm: sha256WithRSAEncryption
44:cb:57:e1:1f:a1:12:cf:af:01:d8:d0:b3:8a:8b:65:96:55:
cd:a0:c7:a7:e8:b4:80:d9:5d:d0:2b:fd:81:e3:a2:76:ad:7c:
cb:53:7e:50:a3:03:1b:ad:5c:a7:94:e6:b7:d9:bd:50:11:ed:
96:99:13:04:49:6f:1a:c0:d2:d1:e9:08:b8:4a:6f:66:be:39:
ce:d1:3c:28:10:f3:2c:20:70:04:70:25:21:b0:e5:59:a5:13:
0c:93:8d:9f:eb:be:7b:d6:52:3e:b3:76:26:02:81:45:32:55:
d8:99:bf:d0:cd:40:16:08:50:aa:f7:e0:5f:6e:e5:9c:5b:c4:
eb:49:18:ef:50:6e:8d:5d:16:e1:d1:0a:ee:34:56:bc:6b:e2:
21:dc:2f:c8:5a:77:4e:7f:8e:e7:c3:22:e4:e0:e6:ee:1f:65:
1a:54:31:e8:57:04:37:59:7e:40:e3:4a:71:c1:21:aa:17:56:
47:63:68:e3:52:0f:40:ec:60:39:41:e3:71:9c:83:1f:56:dc:
f2:1e:61:78:c7:53:4f:26:7b:85:89:1e:c8:39:5e:e2:6e:99:
c7:1c:a5:63:84:37:66:26:68:5b:de:1b:7b:ca:16:54:7a:55:
00:ce:0b:0d:eb:76:24:a6:ad:c0:b8:f0:01:9c:67:ae:cd:cf:
82:61:a2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:51 2024 by rpki-client on console-fra.rpki-client.org