Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9457c7-bdfe-4c8a-8f54-747d88367adc/1/1-e3ZTRWvsuOQKYybrXtPQC7tTkU.roa
File: 1-e3ZTRWvsuOQKYybrXtPQC7tTkU.roa (raw, json)
Hash identifier: zXfWXCvo8LvsYtRDe68sC8fM7r0ajcuCR+NDIJb+rQk=
Subject key identifier: F9:ED:D9:4D:15:AF:B2:E3:90:29:8C:9B:AD:7B:4F:40:2E:ED:4E:45
Certificate issuer: /CN=5fd351e5eb2962fc16fc14e7c6e51b84ad1de8b5
Certificate serial: 1767
Authority key identifier: 5F:D3:51:E5:EB:29:62:FC:16:FC:14:E7:C6:E5:1B:84:AD:1D:E8:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X9NR5espYvwW_BTnxuUbhK0d6LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9457c7-bdfe-4c8a-8f54-747d88367adc/1/1-e3ZTRWvsuOQKYybrXtPQC7tTkU.roa
Signing time: Tue 25 Jan 2022 18:23:04 +0000
ROA not before: Tue 25 Jan 2022 18:23:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 185.140.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5991 (0x1767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fd351e5eb2962fc16fc14e7c6e51b84ad1de8b5
Validity
Not Before: Jan 25 18:23:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9edd94d15afb2e390298c9bad7b4f402eed4e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:71:e6:6e:31:db:b2:1b:8c:8f:3d:43:df:
7a:25:81:12:88:34:2b:5c:b1:00:1e:be:47:0e:f4:
a9:3b:03:49:22:52:01:3c:42:35:50:9d:01:cd:65:
64:ac:e3:17:a8:f5:69:96:91:f2:34:79:2e:af:7b:
a7:ad:60:00:24:a1:3a:d8:c4:f4:50:c0:56:51:a7:
d4:c3:35:6a:72:4a:95:83:5b:16:8d:77:f6:c0:cc:
14:9d:a0:1f:d6:34:13:91:40:cd:9d:39:24:ab:0a:
dc:b5:1e:64:e8:96:97:bb:8e:50:02:8d:3b:4f:23:
42:0e:5f:92:b1:de:24:30:69:a7:ac:12:db:71:52:
44:1e:94:fc:18:e4:1d:d3:73:bb:33:54:a8:d4:a8:
7b:d1:fe:f7:ab:8f:cf:4a:8e:07:5e:83:0f:0b:1c:
92:11:5d:16:0c:d8:61:9c:d6:6f:ff:97:4f:a4:15:
f5:20:17:10:23:f5:84:ca:44:4b:c2:3f:f0:a1:21:
ab:90:e6:8e:43:e7:e5:1e:ab:9d:42:c5:c4:7b:08:
1e:6b:4f:32:0f:1d:19:a2:6c:ed:f3:18:76:58:43:
03:07:91:83:2d:29:d2:74:b5:99:53:6e:e7:a0:2a:
0d:25:52:db:e6:9d:37:3d:f7:c1:e4:85:33:96:77:
4c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:ED:D9:4D:15:AF:B2:E3:90:29:8C:9B:AD:7B:4F:40:2E:ED:4E:45
X509v3 Authority Key Identifier:
keyid:5F:D3:51:E5:EB:29:62:FC:16:FC:14:E7:C6:E5:1B:84:AD:1D:E8:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X9NR5espYvwW_BTnxuUbhK0d6LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9457c7-bdfe-4c8a-8f54-747d88367adc/1/1-e3ZTRWvsuOQKYybrXtPQC7tTkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9457c7-bdfe-4c8a-8f54-747d88367adc/1/X9NR5espYvwW_BTnxuUbhK0d6LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.172.0/24
Signature Algorithm: sha256WithRSAEncryption
26:71:b0:b0:df:73:ee:b9:7b:65:e9:d9:a3:38:0a:f9:43:10:
43:bd:e1:01:b8:77:e1:48:79:f3:21:c6:7e:10:0f:5b:6e:34:
90:a2:b4:20:8c:92:7f:cc:fb:0c:74:7c:1d:34:96:3c:bd:e5:
d8:3c:a2:98:9a:5f:62:03:6c:26:db:17:24:84:21:ae:22:ec:
31:6c:3c:00:a3:86:29:95:33:38:52:38:ee:27:98:44:20:90:
36:c3:4e:91:d0:02:33:0b:70:ee:75:94:04:39:07:5a:ce:50:
c4:a0:16:43:ed:91:65:a1:22:20:1a:b8:bd:7c:6d:fd:10:e3:
31:47:ee:cf:93:b1:fb:55:5d:84:0f:0f:4b:10:33:67:8c:ba:
c2:2a:1b:71:16:8f:12:59:4a:dd:2d:d9:aa:54:6c:65:c8:2e:
65:cb:a8:55:2d:c6:56:1c:aa:bd:91:5b:5a:67:96:a7:c6:4a:
d9:5e:00:28:ab:b8:ea:95:ea:1c:85:f1:01:22:89:90:f9:09:
c3:36:f8:09:eb:7e:37:bc:7a:85:2f:3e:b7:b3:e9:b0:8e:17:
d0:1c:89:d2:04:db:30:ff:bb:4e:99:1d:3b:be:30:20:80:72:
6e:73:ed:56:08:bb:ea:d4:70:24:24:5a:1f:e8:e8:c8:1d:1e:
45:20:83:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:12 2024 by rpki-client on console-fra.rpki-client.org