Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0cce7d-fcff-4673-b887-1f8604ef3c1c/1/NRn4JFhCCf6cDpefgq8dgY9smmk.roa
File: NRn4JFhCCf6cDpefgq8dgY9smmk.roa (raw, json)
Hash identifier: nR/Qu2McHrVZzdkAdRbmFQen+GD6/A942S99m7Skczs=
Subject key identifier: 35:19:F8:24:58:42:09:FE:9C:0E:97:9F:82:AF:1D:81:8F:6C:9A:69
Certificate issuer: /CN=0d301ad60e7f633ee1744975d8fb157637f2072f
Certificate serial: 08770721
Authority key identifier: 0D:30:1A:D6:0E:7F:63:3E:E1:74:49:75:D8:FB:15:76:37:F2:07:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTAa1g5_Yz7hdEl12PsVdjfyBy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0cce7d-fcff-4673-b887-1f8604ef3c1c/1/NRn4JFhCCf6cDpefgq8dgY9smmk.roa
Signing time: Mon 25 Apr 2022 10:06:08 +0000
ROA not before: Mon 25 Apr 2022 10:06:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47297
IP address blocks: 93.184.176.0/20 maxlen: 24
37.60.168.0/21 maxlen: 21
37.228.176.0/20 maxlen: 24
185.6.96.0/22 maxlen: 22
2a03:b880::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142018337 (0x8770721)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d301ad60e7f633ee1744975d8fb157637f2072f
Validity
Not Before: Apr 25 10:06:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3519f824584209fe9c0e979f82af1d818f6c9a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:4c:81:04:0f:6f:8e:81:b6:9c:6a:2b:5d:
64:e1:0f:47:b0:f8:23:a4:9b:38:23:13:43:c8:41:
c0:3f:4d:ad:ae:f2:56:f7:e8:de:df:d6:55:e1:26:
84:f8:3b:5d:ff:6e:3a:3e:fb:0c:23:b3:94:65:da:
31:44:aa:47:06:07:31:25:a7:21:37:bb:5f:55:93:
a6:49:69:1f:d8:2f:04:4e:3d:41:de:94:7b:6d:82:
6e:c8:51:c7:9c:b6:21:37:3c:ec:65:b9:17:69:16:
4e:11:da:00:d4:b6:4c:60:6a:79:b1:a9:ec:e4:eb:
a3:67:23:aa:90:dc:4b:ca:09:e5:59:b0:d8:ac:2d:
01:5d:14:ad:6f:80:b2:9c:87:99:8d:e8:fc:77:67:
70:10:be:68:56:6c:ca:c3:c0:f6:20:fa:5a:b4:38:
d0:27:6c:80:06:69:21:f5:77:6c:1b:67:25:ae:da:
68:ed:f1:39:78:e2:57:f3:da:16:1a:b9:9f:12:5e:
77:e6:8b:97:64:f0:31:cf:0c:30:43:de:53:7b:ff:
45:49:2e:14:91:75:b4:2e:34:54:08:fb:d7:6b:36:
8a:fa:f0:be:ca:97:59:10:bf:d5:2b:cf:3f:98:bd:
56:24:b9:ee:e4:75:77:3b:e7:b9:72:7b:a2:ad:82:
b7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:19:F8:24:58:42:09:FE:9C:0E:97:9F:82:AF:1D:81:8F:6C:9A:69
X509v3 Authority Key Identifier:
keyid:0D:30:1A:D6:0E:7F:63:3E:E1:74:49:75:D8:FB:15:76:37:F2:07:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTAa1g5_Yz7hdEl12PsVdjfyBy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0cce7d-fcff-4673-b887-1f8604ef3c1c/1/NRn4JFhCCf6cDpefgq8dgY9smmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0cce7d-fcff-4673-b887-1f8604ef3c1c/1/DTAa1g5_Yz7hdEl12PsVdjfyBy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.168.0/21
37.228.176.0/20
93.184.176.0/20
185.6.96.0/22
IPv6:
2a03:b880::/29
Signature Algorithm: sha256WithRSAEncryption
92:a3:07:8b:2d:b4:13:21:5d:19:0a:ea:b6:3d:3d:fa:9d:34:
22:e7:6c:20:d1:47:90:7d:ca:e9:fa:7e:80:3f:b1:ec:9c:e4:
1d:4d:e8:80:c0:e2:98:95:6a:94:b8:02:3c:5f:b7:6a:59:5c:
60:ea:aa:45:00:0d:ac:1e:8b:94:1d:21:e9:95:d6:8a:11:88:
7e:2b:a7:d8:ac:d2:bf:65:34:6e:7d:a3:8a:3e:b0:b4:31:d9:
a7:47:84:89:50:b8:ba:8d:b4:9d:d7:55:72:57:aa:6a:44:f7:
68:b5:75:81:49:ad:20:9d:a7:61:ab:8f:f8:cc:b9:f9:38:5e:
72:ce:23:fe:27:37:ae:b5:f9:15:01:60:88:10:c8:69:c0:b9:
86:35:24:67:80:60:0f:9d:cf:be:ce:3a:e1:ba:93:4b:82:05:
1e:91:2c:9f:3b:04:37:26:c1:4d:e4:ae:01:e3:71:a7:f8:27:
57:5e:bf:da:00:15:af:a4:15:a5:a3:16:95:7e:af:53:ac:0a:
e4:35:0f:d9:43:10:7b:fe:24:e9:fb:a5:b2:c6:70:85:a5:f8:
e8:6a:75:70:30:3d:e6:1a:8f:70:e5:0e:b6:b0:2f:92:81:64:
af:38:55:24:85:5a:9f:b3:8a:44:76:a2:22:2b:18:65:fc:03:
f8:80:1e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:03 2024 by rpki-client on console-fra.rpki-client.org