Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/Kj56KcES33vJCYOVvMbVgjsu650.roa
File: Kj56KcES33vJCYOVvMbVgjsu650.roa (raw, json)
Hash identifier: fKWNe0N+WcFr/lb7Gf8W+WXooLInF/qF6Glo0aYKJV8=
Subject key identifier: 2A:3E:7A:29:C1:12:DF:7B:C9:09:83:95:BC:C6:D5:82:3B:2E:EB:9D
Certificate issuer: /CN=ec68368c5d294160f4d2d0ceaf7531e4475fa533
Certificate serial: 08EF0B93
Authority key identifier: EC:68:36:8C:5D:29:41:60:F4:D2:D0:CE:AF:75:31:E4:47:5F:A5:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/Kj56KcES33vJCYOVvMbVgjsu650.roa
Signing time: Sat 01 Jan 2022 14:06:18 +0000
ROA not before: Sat 01 Jan 2022 14:06:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206766
IP address blocks: 79.143.19.0/24 maxlen: 24
138.124.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149883795 (0x8ef0b93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec68368c5d294160f4d2d0ceaf7531e4475fa533
Validity
Not Before: Jan 1 14:06:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a3e7a29c112df7bc9098395bcc6d5823b2eeb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3f:f5:57:bc:20:30:67:52:1a:99:5d:24:94:
a0:bc:e7:e9:b3:85:4c:b9:23:9a:b3:6f:bd:5f:18:
83:4c:da:55:27:fe:51:fd:4c:ec:b2:be:ae:eb:49:
2d:8b:a6:c6:01:e2:b5:c2:d0:64:d0:02:16:fd:38:
40:ba:93:d8:08:bc:71:0c:21:a8:27:1a:13:69:e6:
af:be:8d:9a:05:b6:a5:4f:c0:0d:e4:5f:b9:e8:25:
42:ff:74:cd:da:02:b4:02:8c:19:50:49:98:aa:cf:
0d:bd:8f:5b:ba:93:e2:dc:0d:57:1f:12:16:47:1f:
c1:79:a2:16:73:83:58:05:3a:f0:df:4a:a3:5a:5f:
f8:f6:10:33:d5:44:6a:3c:14:0c:05:1b:d6:cf:af:
5f:4a:e7:be:e0:57:06:ba:9d:dc:3f:13:53:d0:09:
91:a0:d5:66:d9:53:a3:24:33:ed:93:8f:be:a1:b1:
1e:d7:64:08:45:62:26:14:50:94:a8:fa:35:32:63:
bf:b8:79:a9:a7:48:72:d3:33:6f:dc:f3:ef:79:e2:
55:6d:7c:f2:3e:5d:6b:6d:a9:43:51:95:8f:e8:3d:
37:fa:b4:9b:f1:58:25:9e:1e:56:6a:b8:d3:c3:5e:
bd:44:32:81:39:20:a5:5f:ab:e8:3a:0e:19:0e:50:
cb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3E:7A:29:C1:12:DF:7B:C9:09:83:95:BC:C6:D5:82:3B:2E:EB:9D
X509v3 Authority Key Identifier:
keyid:EC:68:36:8C:5D:29:41:60:F4:D2:D0:CE:AF:75:31:E4:47:5F:A5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/Kj56KcES33vJCYOVvMbVgjsu650.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.19.0/24
138.124.185.0/24
Signature Algorithm: sha256WithRSAEncryption
37:a7:e6:2b:52:80:b1:7f:b9:e9:89:5d:8e:83:52:45:05:4c:
c9:dc:4d:da:04:b4:98:d9:f9:0a:8c:ef:77:a7:ad:28:33:9e:
5f:7f:52:a9:85:fa:61:58:30:df:3f:cc:d3:df:cc:4b:88:66:
6f:4e:3a:74:9f:e4:23:f2:02:e9:8d:5c:81:40:13:c1:15:c7:
a2:bf:43:d5:50:3e:9b:d6:ba:c0:ed:98:c7:8d:51:20:63:5e:
af:07:67:c9:52:bc:d7:2b:08:62:e6:de:e2:e2:9f:50:97:f1:
0c:b6:08:47:36:be:d6:e8:2f:96:fc:d5:f3:25:05:00:fd:5f:
45:25:82:d5:b4:c5:3e:f0:e2:89:05:f4:0c:bd:48:90:b0:13:
cf:0b:64:50:f5:b6:66:2e:e8:8f:16:c6:81:f3:f0:85:8f:84:
94:9e:ba:e8:27:21:0c:84:eb:3e:f7:d8:15:8d:b8:b3:a4:54:
09:26:63:e2:73:65:4b:10:00:43:4d:ad:46:86:57:16:82:02:
58:ef:7b:43:3b:c5:a6:d4:17:4b:ee:dc:32:dd:f7:bd:9b:7d:
2d:fa:42:61:08:37:18:a1:e2:16:68:1a:df:1e:f2:28:4f:25:
b0:86:b6:a7:66:39:66:9f:5b:88:4a:67:25:e9:52:8b:c5:99:
4d:6d:37:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:36 2024 by rpki-client on console-ams.rpki-client.org