Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/VtJz2vOjYaKOmJNQPk-vGsZIsQw.roa
File: VtJz2vOjYaKOmJNQPk-vGsZIsQw.roa (raw, json)
Hash identifier: PhqjTIRihD7Es8Ur+xUDsrEN1lHE67A0cNRTC/JhmwI=
Subject key identifier: 56:D2:73:DA:F3:A3:61:A2:8E:98:93:50:3E:4F:AF:1A:C6:48:B1:0C
Certificate issuer: /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial: 018635648977ECB5DEE14F47C6DBDFABF8B8
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/VtJz2vOjYaKOmJNQPk-vGsZIsQw.roa
Signing time: Thu 09 Feb 2023 08:57:06 +0000
ROA not before: Thu 09 Feb 2023 08:57:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 195.184.92.0/23 maxlen: 24
193.37.236.0/24 maxlen: 24
185.2.163.0/24 maxlen: 24
185.2.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:35:64:89:77:ec:b5:de:e1:4f:47:c6:db:df:ab:f8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Validity
Not Before: Feb 9 08:57:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56d273daf3a361a28e9893503e4faf1ac648b10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:00:f3:cd:b1:49:de:51:5d:e6:b0:cc:d4:b1:
33:b5:ec:e4:52:ab:2c:aa:fd:71:6a:57:10:03:d8:
4b:1f:ca:50:68:f6:5e:35:84:85:31:9b:1c:bc:8c:
bd:11:26:e9:e0:8b:8e:74:6f:40:55:2c:50:71:97:
f5:88:ea:a1:3b:9d:09:ae:90:1a:cc:fa:7f:8c:68:
c3:01:b2:10:18:07:a9:5c:6a:ad:bd:b9:d9:f2:9a:
35:2c:b5:b4:55:84:8a:b4:1d:65:07:1c:c8:ef:21:
04:51:11:77:cc:64:85:d5:19:c2:c5:9d:d4:7e:f9:
66:2a:c5:ff:09:d4:99:61:6d:0e:06:c7:82:31:5c:
46:be:ef:d1:9f:93:d5:11:ac:55:c5:95:d9:75:3f:
c4:54:c3:88:57:16:fe:da:99:9b:c7:23:f8:d2:db:
09:39:38:96:c3:48:e2:b8:d5:fd:9a:a6:35:df:ac:
0c:7f:4b:e1:18:51:e3:ac:68:0b:ce:78:53:f9:43:
05:ac:b7:cb:f1:a9:1a:03:41:e2:5a:32:7e:94:7e:
13:0d:2f:fa:35:30:8b:03:f6:f5:9f:bf:74:21:fe:
41:2c:05:0f:ee:02:e8:4f:64:64:6c:8d:17:98:f5:
6a:0e:d0:3e:2f:55:30:68:46:22:cb:98:0c:51:1a:
ea:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D2:73:DA:F3:A3:61:A2:8E:98:93:50:3E:4F:AF:1A:C6:48:B1:0C
X509v3 Authority Key Identifier:
keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/VtJz2vOjYaKOmJNQPk-vGsZIsQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.160.0/24
185.2.163.0/24
193.37.236.0/24
195.184.92.0/23
Signature Algorithm: sha256WithRSAEncryption
74:c4:3d:f5:77:8f:9e:0b:f5:b9:a4:69:aa:c8:c3:90:d8:21:
46:7a:2d:42:7c:3e:f2:f2:ce:79:07:fc:bf:e3:7a:e9:e8:7c:
89:bf:eb:fc:f6:57:60:88:4e:ff:1f:e1:cc:9c:c5:a2:22:e6:
ef:f1:91:8e:78:e2:45:bd:f6:b1:91:db:09:ac:9d:4f:64:93:
e8:32:3f:b6:a9:ef:ef:6b:71:ef:ce:e2:da:d0:7e:63:a6:17:
dd:25:55:ab:55:e8:c7:c5:af:c6:5a:9b:6d:a7:66:a3:3e:c9:
90:bc:94:3a:fb:2e:6a:1c:45:91:60:b5:b3:16:11:11:ba:f1:
2b:1e:a7:0a:e3:94:4d:3b:ef:4d:3f:39:b2:66:46:92:24:db:
9e:42:c7:89:2d:b3:cd:08:04:fa:0f:8e:a7:9a:15:2c:63:28:
dd:61:54:96:ff:a6:9f:46:b2:c2:f8:4a:e2:d3:aa:2c:54:12:
c3:9e:63:48:77:6d:29:e3:c7:e4:3c:37:b5:c4:7d:ea:d4:51:
ad:75:5c:4c:d6:55:94:0e:35:d5:88:20:66:33:cb:59:45:c3:
ff:cf:2c:e3:36:d5:e3:35:be:61:16:4c:cc:21:f7:da:89:c5:
b2:14:fd:5a:51:c9:52:62:29:b8:05:54:a3:9c:a6:81:41:5d:
dc:0d:44:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:46 2024 by rpki-client on console-fra.rpki-client.org