Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/_9-f9aEz4YwJ4NGX4CMPpTSlYIg.roa
File: _9-f9aEz4YwJ4NGX4CMPpTSlYIg.roa (raw, json)
Hash identifier: nVc9t5llJPT0MyAS67QOLsMxkvlZals26s+kAA1JoHc=
Subject key identifier: FF:DF:9F:F5:A1:33:E1:8C:09:E0:D1:97:E0:23:0F:A5:34:A5:60:88
Certificate issuer: /CN=56641d162079efd3c560a5de9e9226b2f2f0b097
Certificate serial: CF0C5D
Authority key identifier: 56:64:1D:16:20:79:EF:D3:C5:60:A5:DE:9E:92:26:B2:F2:F0:B0:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmQdFiB579PFYKXenpImsvLwsJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/_9-f9aEz4YwJ4NGX4CMPpTSlYIg.roa
Signing time: Sat 01 Jan 2022 05:53:48 +0000
ROA not before: Sat 01 Jan 2022 05:53:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44853
IP address blocks: 185.93.173.0/24 maxlen: 24
188.214.157.0/24 maxlen: 24
86.105.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13569117 (0xcf0c5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56641d162079efd3c560a5de9e9226b2f2f0b097
Validity
Not Before: Jan 1 05:53:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffdf9ff5a133e18c09e0d197e0230fa534a56088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:7b:86:45:33:3b:8f:73:e2:01:bd:bc:69:
2d:66:11:df:97:cf:ce:8c:49:2e:1b:71:7f:ed:13:
9f:b9:a0:84:6e:c4:37:6a:2f:12:91:53:b8:55:7d:
fd:fb:b7:4c:93:b9:cc:cf:04:d4:1e:9b:26:a8:f9:
13:55:2d:92:da:89:ac:0c:1c:5a:33:a3:ab:58:7a:
c1:74:1f:3c:18:60:12:3d:4a:b7:54:a0:08:53:11:
ca:f5:21:5e:37:51:87:9c:d2:6b:4a:95:a6:8d:8c:
c1:dd:d2:06:7b:96:64:1a:ac:dd:a5:06:62:b2:c4:
de:9e:73:9f:f5:69:cd:b9:55:b0:9b:bb:c2:32:50:
c7:2a:5d:55:86:92:67:13:72:57:8f:b8:d4:fc:a6:
13:41:4e:1e:f8:3a:61:3e:2c:9f:12:5d:89:5a:51:
3f:f7:ce:c8:18:26:79:02:b8:09:27:a7:f1:b3:1e:
dd:7f:39:b6:64:a1:2c:cf:06:ae:bc:4d:9a:bc:e1:
0a:1e:84:d5:31:67:0c:2e:2f:06:fe:63:f8:ad:98:
1a:d5:a5:ea:32:0c:ba:5d:e4:ef:b7:ce:22:ad:50:
6e:83:45:d5:71:74:c9:0d:2c:ef:78:a5:39:5e:c0:
1e:d6:24:f5:ec:bc:0b:bb:84:e6:78:5a:aa:bd:7b:
f3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DF:9F:F5:A1:33:E1:8C:09:E0:D1:97:E0:23:0F:A5:34:A5:60:88
X509v3 Authority Key Identifier:
keyid:56:64:1D:16:20:79:EF:D3:C5:60:A5:DE:9E:92:26:B2:F2:F0:B0:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmQdFiB579PFYKXenpImsvLwsJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/_9-f9aEz4YwJ4NGX4CMPpTSlYIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/VmQdFiB579PFYKXenpImsvLwsJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.182.0/24
185.93.173.0/24
188.214.157.0/24
Signature Algorithm: sha256WithRSAEncryption
86:08:a3:45:90:ef:d7:71:6a:d0:9f:cc:6c:ba:fb:a6:af:36:
db:27:15:55:01:14:c1:30:90:eb:90:a2:f8:6b:44:20:af:c6:
50:9c:bd:a5:87:37:28:84:5d:ff:6c:2d:27:d3:b6:86:a4:49:
09:fd:33:78:99:b2:95:01:fd:25:0f:7b:b3:17:15:aa:d5:f2:
76:de:80:ae:cb:27:b6:df:79:ee:c2:cb:a0:af:29:9f:60:29:
87:fc:3b:b0:dc:f1:ac:ed:49:59:a2:62:60:42:69:51:c0:74:
58:14:f6:1b:84:b8:38:b9:ab:42:f8:cb:f1:e5:58:92:76:8b:
14:c2:f0:42:15:2a:c8:eb:e2:ed:80:98:d3:88:41:54:ca:d7:
dd:92:61:6c:70:c3:ae:71:7c:b5:e6:5f:e8:ce:d1:c4:ac:dc:
42:c1:c2:d3:eb:d8:fc:57:5e:2b:fa:f0:c0:bb:1d:5f:2f:c9:
7d:14:22:ae:c2:ca:57:73:09:94:e5:ff:a3:4b:f9:96:89:f2:
0c:b9:9d:a3:ac:73:99:06:b0:2a:9b:8c:dd:74:4d:14:67:40:
1d:47:40:8c:f3:cf:d7:e7:85:f6:08:df:7c:c7:43:5e:d7:19:
a0:16:9a:a1:03:54:fb:1c:f4:2b:45:b3:ec:eb:de:d0:90:7c:
3e:9c:7b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:12 2024 by rpki-client on console-fra.rpki-client.org