Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/dfEo5djO4Oz2ilqZiauNohyRz50.roa
File: dfEo5djO4Oz2ilqZiauNohyRz50.roa (raw, json)
Hash identifier: Cm5BZA9NvSriKaXZocCBITd1Qi1NqD59zhUm2p7VTJo=
Subject key identifier: 75:F1:28:E5:D8:CE:E0:EC:F6:8A:5A:99:89:AB:8D:A2:1C:91:CF:9D
Certificate issuer: /CN=56641d162079efd3c560a5de9e9226b2f2f0b097
Certificate serial: CCD591
Authority key identifier: 56:64:1D:16:20:79:EF:D3:C5:60:A5:DE:9E:92:26:B2:F2:F0:B0:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmQdFiB579PFYKXenpImsvLwsJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/dfEo5djO4Oz2ilqZiauNohyRz50.roa
Signing time: Sat 01 Jan 2022 05:53:47 +0000
ROA not before: Sat 01 Jan 2022 05:53:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 188.214.157.0/24 maxlen: 24
86.105.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13424017 (0xccd591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56641d162079efd3c560a5de9e9226b2f2f0b097
Validity
Not Before: Jan 1 05:53:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75f128e5d8cee0ecf68a5a9989ab8da21c91cf9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0b:35:19:d2:15:dc:28:ff:a4:4e:73:37:9c:
ce:83:8f:d5:ff:c4:b1:22:c1:f4:f2:e9:55:28:04:
a6:b4:fb:ed:85:05:eb:2d:90:71:e7:9c:74:c8:3a:
fb:3a:a3:a8:ed:4d:10:d2:74:17:9c:49:17:9d:d3:
81:e4:bc:44:3e:0d:b6:29:39:60:4c:77:56:90:58:
bd:37:ff:ad:8d:ae:e4:f8:31:ba:85:f6:e5:7c:92:
b0:c9:f2:55:c8:c5:33:41:e6:ec:c5:2c:70:ed:a6:
a8:3a:62:b5:51:85:e5:5c:12:5a:7d:45:9c:84:05:
62:11:29:98:0e:de:eb:dc:19:79:06:04:4c:38:33:
10:90:0c:49:fd:dd:c7:e1:9f:1f:1d:c8:99:75:29:
5a:ee:cb:74:a7:26:b4:26:83:9b:aa:27:bf:dd:8f:
61:70:ea:65:5c:ff:2e:50:81:81:bc:24:66:72:0a:
f0:7c:a6:82:43:5c:b2:ec:f7:b6:d6:ab:e9:ce:94:
9d:7b:80:f0:eb:2c:67:7a:19:e3:d9:c1:87:3f:f4:
ac:ec:c9:b3:b0:5b:95:c4:92:5e:44:32:e9:ca:af:
bf:92:2b:3c:a6:21:2b:4e:f0:d8:63:9a:1b:b8:90:
07:69:41:3d:d2:81:0f:2f:ee:ed:6e:61:4b:3a:80:
a9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F1:28:E5:D8:CE:E0:EC:F6:8A:5A:99:89:AB:8D:A2:1C:91:CF:9D
X509v3 Authority Key Identifier:
keyid:56:64:1D:16:20:79:EF:D3:C5:60:A5:DE:9E:92:26:B2:F2:F0:B0:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmQdFiB579PFYKXenpImsvLwsJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/dfEo5djO4Oz2ilqZiauNohyRz50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/VmQdFiB579PFYKXenpImsvLwsJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.182.0/24
188.214.157.0/24
Signature Algorithm: sha256WithRSAEncryption
97:b7:d7:4c:4a:ca:19:ef:08:4d:d3:9d:07:90:d0:ac:b3:f3:
d8:e8:e6:f3:26:3a:ae:67:46:03:77:10:ae:30:75:63:a0:51:
46:26:7d:96:e0:6c:fd:98:7a:ae:40:09:e8:28:b1:f8:c3:36:
df:ea:82:22:5b:f3:fd:7a:ba:f3:0d:46:f7:30:bc:21:e3:c5:
50:66:9c:65:d8:6e:f1:e6:35:bd:54:df:7e:d6:37:5f:5f:6b:
8c:14:9c:b9:e8:5e:cc:41:4a:56:68:2a:72:4b:dd:ea:31:74:
d7:45:6f:e6:94:0a:13:c7:6c:5c:dc:00:e1:83:16:ae:0b:62:
d1:45:01:86:1a:71:80:4f:c7:f5:cb:07:1f:15:ee:95:5a:6f:
29:85:98:b7:82:b1:d6:af:aa:e2:be:f2:2b:4c:4c:4e:7a:14:
60:13:39:40:da:7d:57:5d:8d:b6:83:5b:2c:4f:f3:c9:06:7c:
f2:50:f7:bf:4e:ef:8e:fe:47:e1:22:46:e8:33:f4:03:50:df:
e9:76:39:c6:87:95:b7:9e:a0:e4:50:ca:bf:ab:0c:65:5e:3e:
d3:a0:c7:07:81:d9:34:6f:50:d8:cd:8b:2a:77:55:79:2b:43:
e5:33:97:d8:3e:28:13:23:d9:a8:5a:b3:42:58:26:52:51:3a:
e0:89:79:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:06 2024 by rpki-client on console-ams.rpki-client.org