Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e07c29-2c88-468e-9218-858513b006a9/1/Dqs2Qs-vOUUaQ2T4g5qVjbkUyxY.roa
File: Dqs2Qs-vOUUaQ2T4g5qVjbkUyxY.roa (raw, json)
Hash identifier: zNsbYHsf78Kmj2GZY0LUqzZtG679bawzG695c/Cuzf0=
Subject key identifier: 0E:AB:36:42:CF:AF:39:45:1A:43:64:F8:83:9A:95:8D:B9:14:CB:16
Certificate issuer: /CN=265ca77090379a21985d5fe133f143b9568ec311
Certificate serial: 01856FCBA6C3F80541443780C936FCC3DCAC
Authority key identifier: 26:5C:A7:70:90:37:9A:21:98:5D:5F:E1:33:F1:43:B9:56:8E:C3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlyncJA3miGYXV_hM_FDuVaOwxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e07c29-2c88-468e-9218-858513b006a9/1/Dqs2Qs-vOUUaQ2T4g5qVjbkUyxY.roa
Signing time: Mon 02 Jan 2023 00:04:55 +0000
ROA not before: Mon 02 Jan 2023 00:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208041
IP address blocks: 185.222.5.0/24 maxlen: 24
185.222.6.0/24 maxlen: 24
2a0c:8440::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:a6:c3:f8:05:41:44:37:80:c9:36:fc:c3:dc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265ca77090379a21985d5fe133f143b9568ec311
Validity
Not Before: Jan 2 00:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0eab3642cfaf39451a4364f8839a958db914cb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:ba:17:eb:43:1e:9e:65:80:e5:f5:0b:3b:
b8:38:0b:69:c3:9d:88:f3:fa:ca:1a:4a:e8:70:fc:
60:16:c0:4a:a8:93:8f:6b:d5:ee:cb:2e:85:4d:f7:
7a:18:2e:df:94:30:88:0f:d5:c5:5d:28:a4:b5:c2:
05:45:7e:48:51:46:e8:7f:dc:17:da:5f:b9:8f:a1:
78:57:db:a1:00:7e:b8:71:b3:6e:00:f1:b7:31:0d:
ef:a9:6c:fc:35:24:c2:02:96:ea:dd:f0:38:82:05:
e3:82:01:ac:75:8a:7e:3b:26:38:90:27:89:29:c9:
36:bd:bf:38:ed:46:c3:13:85:00:22:c6:8f:dd:47:
20:cb:3a:1a:80:4b:15:47:f8:16:d4:77:14:c7:85:
fc:a7:af:05:c8:d8:3c:f0:c7:dd:74:f1:34:9d:3c:
ac:13:34:92:bb:05:53:ab:c7:0d:15:1d:b5:84:1c:
5b:83:5a:01:32:34:cd:e8:26:10:6a:fe:ed:0e:a6:
2d:ba:00:99:e5:2d:e2:07:e0:6d:65:4b:4d:37:4c:
37:4a:52:51:cf:2c:3c:ab:22:14:ed:45:4f:9c:83:
b8:26:de:26:c4:69:05:ab:7f:3b:f5:f0:4a:ac:12:
33:ed:08:7a:c6:5c:01:be:24:5c:9b:64:f1:c5:1c:
e4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AB:36:42:CF:AF:39:45:1A:43:64:F8:83:9A:95:8D:B9:14:CB:16
X509v3 Authority Key Identifier:
keyid:26:5C:A7:70:90:37:9A:21:98:5D:5F:E1:33:F1:43:B9:56:8E:C3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlyncJA3miGYXV_hM_FDuVaOwxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e07c29-2c88-468e-9218-858513b006a9/1/Dqs2Qs-vOUUaQ2T4g5qVjbkUyxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e07c29-2c88-468e-9218-858513b006a9/1/JlyncJA3miGYXV_hM_FDuVaOwxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.5.0-185.222.6.255
IPv6:
2a0c:8440::/48
Signature Algorithm: sha256WithRSAEncryption
1a:8d:a1:67:fe:5d:4b:74:49:a3:2f:9f:de:53:16:27:cd:6a:
e2:4a:6a:b3:86:1f:0f:8c:2f:fa:54:60:9c:9c:0d:fc:70:cc:
03:32:32:1e:c8:4a:6a:92:97:36:ce:37:ed:62:c8:31:1f:f3:
b9:4c:a0:ec:07:45:df:f5:93:e6:a5:ee:b7:77:4c:87:ae:0f:
6a:cb:9a:4e:99:2c:c2:02:fb:25:19:c0:14:d8:a3:4a:2d:49:
44:b4:e0:6b:b5:b6:bc:a5:49:c7:ef:b2:0c:08:8e:e5:35:c8:
b3:94:4a:8f:d3:22:18:a8:e4:f0:05:47:c1:42:47:e7:8d:35:
3f:8a:fc:9a:6b:ee:d7:6e:d2:48:99:a4:8b:64:e4:58:18:c5:
fa:35:1e:f4:28:c5:b9:ac:53:21:74:17:2b:83:18:47:5f:89:
07:ac:03:a3:79:fe:f5:c1:ae:17:61:f5:14:05:e6:e0:1d:a0:
46:2b:96:49:0c:b7:e6:71:fb:88:6a:63:d5:be:42:e4:58:d6:
06:c1:02:0b:6d:94:d0:37:c3:10:14:a9:7d:4c:4b:ca:ad:84:
47:93:d3:e0:b6:1e:5c:90:23:d5:2f:16:66:65:66:d3:ff:11:
1e:2a:bd:31:a7:88:53:f4:f9:38:68:77:5d:ab:9c:5a:90:46:
ff:58:d5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:19 2024 by rpki-client on console-ams.rpki-client.org