Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e0d0b2-9b9a-47f8-84ec-1460c78ea75d/1/Cb2gWmUMcMchyCVwmrT-nPqCWEU.roa
File: Cb2gWmUMcMchyCVwmrT-nPqCWEU.roa (raw, json)
Hash identifier: fVrcQTh1FiTH4H+4RuWqBpZU62NFSTCH79TuTvgPmoo=
Subject key identifier: 09:BD:A0:5A:65:0C:70:C7:21:C8:25:70:9A:B4:FE:9C:FA:82:58:45
Certificate issuer: /CN=24c64272b0b3aeb812549dee7ec58a3eaf6fa576
Certificate serial: 03B436B0
Authority key identifier: 24:C6:42:72:B0:B3:AE:B8:12:54:9D:EE:7E:C5:8A:3E:AF:6F:A5:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMZCcrCzrrgSVJ3ufsWKPq9vpXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e0d0b2-9b9a-47f8-84ec-1460c78ea75d/1/Cb2gWmUMcMchyCVwmrT-nPqCWEU.roa
Signing time: Sat 01 Jan 2022 12:00:44 +0000
ROA not before: Sat 01 Jan 2022 12:00:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48990
IP address blocks: 185.210.88.0/22 maxlen: 24
185.235.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62142128 (0x3b436b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24c64272b0b3aeb812549dee7ec58a3eaf6fa576
Validity
Not Before: Jan 1 12:00:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09bda05a650c70c721c825709ab4fe9cfa825845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:d8:cc:71:42:3b:92:79:9e:92:42:ea:32:
77:55:7a:7c:3c:00:c4:70:7a:a1:fd:0d:15:7c:18:
30:0e:a6:da:d0:a4:e0:79:0a:75:42:c3:71:2a:08:
07:90:b7:83:f9:0e:de:85:59:8e:15:bf:9f:c1:b0:
58:cb:4b:8e:24:e7:52:9d:0d:27:c4:09:97:02:32:
d8:4c:e9:db:1a:56:23:1d:c1:f8:bc:4e:71:d7:c7:
44:0c:32:cb:5d:8e:b8:cd:16:82:ea:2b:6f:f1:79:
e8:bc:be:97:eb:bd:4f:27:fc:68:ae:73:bc:a9:48:
12:58:a9:47:3e:42:f5:4e:c7:ca:51:d5:29:d1:9b:
7d:cd:b4:3d:fd:68:fc:23:8f:4b:69:5c:74:e6:92:
c8:29:e5:8f:de:e5:55:9b:3f:a5:4c:b3:cd:c4:44:
be:01:87:cb:7a:36:b6:a4:0c:97:5f:7b:0a:e6:d0:
0b:22:a3:41:94:5e:26:a5:7e:00:22:da:4a:60:ab:
ba:5d:a3:86:33:00:bc:33:a5:f6:f2:5d:d1:71:d1:
3f:d5:72:13:00:c8:ff:29:af:75:2a:56:3d:0d:79:
75:11:1e:9d:ca:c5:d8:37:4b:c3:1c:b1:5d:fa:be:
d9:a5:2b:19:b8:50:18:d7:12:a4:d8:74:95:61:6b:
c5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BD:A0:5A:65:0C:70:C7:21:C8:25:70:9A:B4:FE:9C:FA:82:58:45
X509v3 Authority Key Identifier:
keyid:24:C6:42:72:B0:B3:AE:B8:12:54:9D:EE:7E:C5:8A:3E:AF:6F:A5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMZCcrCzrrgSVJ3ufsWKPq9vpXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e0d0b2-9b9a-47f8-84ec-1460c78ea75d/1/Cb2gWmUMcMchyCVwmrT-nPqCWEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e0d0b2-9b9a-47f8-84ec-1460c78ea75d/1/JMZCcrCzrrgSVJ3ufsWKPq9vpXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.88.0/22
185.235.100.0/22
Signature Algorithm: sha256WithRSAEncryption
63:af:de:e0:18:55:c5:12:6b:d4:1e:f3:a5:eb:5b:c6:b4:ac:
3e:d0:2d:bf:7e:3b:a7:46:19:46:82:1e:2e:d1:80:a5:10:c9:
0b:df:9b:1d:52:ee:b9:a4:1a:9f:f1:68:28:87:b6:d8:7c:59:
6c:3f:e4:35:02:47:c2:d0:b8:83:bf:b8:61:32:67:c3:14:b7:
4a:da:b9:54:bd:06:93:ec:bd:87:4a:48:23:7d:f4:55:81:4e:
e6:7a:64:8d:15:26:54:ca:3a:e0:a3:05:72:1b:ca:ae:f5:41:
bc:5b:c5:8b:3c:68:02:03:73:da:ee:33:fc:ac:64:29:32:7f:
77:f6:4f:fc:bf:33:c1:0d:24:a9:48:45:a8:2e:bc:58:4e:c8:
6b:3e:6f:e2:b1:eb:89:b2:73:93:67:ae:e4:f7:f0:2c:75:7b:
2b:fe:11:4e:cd:2d:f5:67:fb:19:d6:be:c0:0c:1d:ee:55:13:
4d:19:20:f7:50:1d:4e:60:0b:29:66:b1:0c:2b:9d:95:6e:bb:
2d:79:3d:56:1c:81:4f:88:43:f7:8f:85:ed:ed:ac:f2:04:87:
d1:39:c1:83:be:64:8c:da:77:5c:e1:45:aa:01:19:63:3b:69:
82:4b:79:03:9e:47:9b:fb:b9:32:56:43:b2:2d:88:dd:b9:34:
53:ea:ca:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:58 2024 by rpki-client on console-fra.rpki-client.org