Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/5b675b-fdd8-496e-aa1e-ba3692e95838/1/OdkB_WXRSHXem1jdgzTkKHZ1LAE.roa
File: OdkB_WXRSHXem1jdgzTkKHZ1LAE.roa (raw, json)
Hash identifier: 4wZeP2LAXPngQNSezV4cBKswooQuQyHgk9Tc+scmix4=
Subject key identifier: 39:D9:01:FD:65:D1:48:75:DE:9B:58:DD:83:34:E4:28:76:75:2C:01
Certificate issuer: /CN=33921860cc42452333aa79a972280d88494b70a8
Certificate serial: 08DC51F2
Authority key identifier: 33:92:18:60:CC:42:45:23:33:AA:79:A9:72:28:0D:88:49:4B:70:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5IYYMxCRSMzqnmpcigNiElLcKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/5b675b-fdd8-496e-aa1e-ba3692e95838/1/OdkB_WXRSHXem1jdgzTkKHZ1LAE.roa
Signing time: Sat 01 Jan 2022 14:08:05 +0000
ROA not before: Sat 01 Jan 2022 14:08:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209390
IP address blocks: 185.108.64.0/22 maxlen: 22
185.108.64.0/24 maxlen: 24
185.108.66.0/24 maxlen: 24
2a06:6280::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148656626 (0x8dc51f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33921860cc42452333aa79a972280d88494b70a8
Validity
Not Before: Jan 1 14:08:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39d901fd65d14875de9b58dd8334e42876752c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:60:ad:47:a7:83:0e:00:9b:fa:29:02:85:fe:
5b:35:05:e8:65:f8:b0:46:47:71:7f:34:03:10:16:
1c:8f:c1:35:a4:53:c7:54:90:05:9e:1d:2f:3c:0d:
6e:2b:4f:a1:be:6d:db:6c:8f:c2:0c:02:fe:02:20:
3b:d3:48:22:db:c9:62:4a:a1:b7:bf:0a:3a:90:f5:
a0:31:a4:52:aa:9b:ed:c9:a0:62:a8:c1:06:36:a4:
c1:f4:c7:d6:87:3b:94:c0:e5:e8:57:4c:b0:06:ec:
35:48:15:1e:76:c5:36:74:c4:80:08:10:ba:b7:f5:
82:2f:68:17:ea:5c:18:64:f2:78:45:93:57:27:90:
45:0f:6a:40:64:c3:8c:d7:43:ed:55:23:7c:e0:55:
be:37:db:00:b6:68:f3:7f:13:b4:1f:c2:70:a2:b4:
e9:c5:1c:89:77:97:e3:38:b5:0b:e3:f7:c4:9b:0f:
0e:e8:96:ab:41:42:6c:0d:e2:34:91:23:30:dc:40:
ac:1a:27:02:41:db:72:74:e2:f1:81:71:fe:07:4f:
9e:e9:25:c3:9b:dd:7f:9f:f3:62:a6:1b:c8:da:7b:
b7:dc:ea:9b:c5:c5:0b:70:e2:67:84:33:19:a3:bd:
6d:06:fc:48:e3:5c:59:22:a0:f0:20:62:db:12:b8:
5d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D9:01:FD:65:D1:48:75:DE:9B:58:DD:83:34:E4:28:76:75:2C:01
X509v3 Authority Key Identifier:
keyid:33:92:18:60:CC:42:45:23:33:AA:79:A9:72:28:0D:88:49:4B:70:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5IYYMxCRSMzqnmpcigNiElLcKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/5b675b-fdd8-496e-aa1e-ba3692e95838/1/OdkB_WXRSHXem1jdgzTkKHZ1LAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/5b675b-fdd8-496e-aa1e-ba3692e95838/1/M5IYYMxCRSMzqnmpcigNiElLcKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.64.0/22
IPv6:
2a06:6280::/29
Signature Algorithm: sha256WithRSAEncryption
8b:ce:b5:0a:9b:0f:dc:b4:24:c4:32:6f:ec:f1:06:dd:8b:45:
10:06:cc:99:4a:4d:a5:62:82:8d:84:96:48:c8:35:71:88:5c:
50:59:06:06:90:38:fe:15:75:fd:e9:85:8a:c0:99:e8:13:6d:
e9:34:b5:c4:6f:76:90:d2:bc:af:bc:f1:79:c5:5c:fb:79:cf:
a4:ec:d2:1d:ba:7d:d4:1b:29:52:b1:cd:94:8b:97:d9:04:c4:
84:0d:1e:3c:de:f4:f8:78:f1:3c:e9:41:1c:e4:b0:c6:0b:71:
28:89:5b:e9:18:3a:49:38:6f:94:f3:64:6f:79:26:7f:93:ce:
52:ab:54:14:8f:d1:59:d2:aa:66:b9:ff:5d:f7:13:4f:ac:8b:
42:d2:2f:4f:43:0c:51:0d:2d:32:ae:97:c1:e1:c3:af:3f:aa:
ab:4a:77:9b:de:99:13:6b:a9:7d:47:d5:20:6a:a2:7b:85:2b:
b1:ba:2e:62:77:47:08:13:32:a0:da:5e:4c:92:d2:3e:59:51:
78:9a:4b:7c:19:bc:bd:47:26:1e:a5:fc:26:10:e8:21:01:73:
1a:65:19:fc:05:59:f6:4c:61:0e:3a:1f:5d:1b:95:51:b9:07:
d0:6a:db:d1:73:bc:84:91:e3:ed:53:2c:21:46:c7:08:7e:31:
72:a4:2b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:38 2023 by rpki-client on console-fra.rpki-client.org