Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/x53_PTbc3PTHOKlvb0g_VQsLPb8.roa
File: x53_PTbc3PTHOKlvb0g_VQsLPb8.roa (raw, json)
Hash identifier: evFCLBtXfyz+qyO1Ag8r6TtUxqWvLlG/TprUHEoDchk=
Subject key identifier: C7:9D:FF:3D:36:DC:DC:F4:C7:38:A9:6F:6F:48:3F:55:0B:0B:3D:BF
Certificate issuer: /CN=e379d83d22a0beeb86c87e15a6cb6c69bd42903f
Certificate serial: 8DE20F
Authority key identifier: E3:79:D8:3D:22:A0:BE:EB:86:C8:7E:15:A6:CB:6C:69:BD:42:90:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43nYPSKgvuuGyH4Vpstsab1CkD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/x53_PTbc3PTHOKlvb0g_VQsLPb8.roa
Signing time: Sat 01 Jan 2022 01:55:53 +0000
ROA not before: Sat 01 Jan 2022 01:55:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.188.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9298447 (0x8de20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e379d83d22a0beeb86c87e15a6cb6c69bd42903f
Validity
Not Before: Jan 1 01:55:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c79dff3d36dcdcf4c738a96f6f483f550b0b3dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:ec:0b:11:81:0a:84:8d:e9:89:5a:96:82:
53:c6:85:72:dc:4d:94:3b:d2:a6:c5:a9:cd:11:95:
6e:b0:48:20:cd:f5:39:a9:f6:03:17:bf:ce:33:f4:
f1:3c:6a:54:93:fd:ba:55:6f:9c:96:94:38:72:8a:
77:dc:e0:a3:6a:22:1a:68:7e:59:fd:68:b9:db:ff:
f2:bb:cf:39:23:c2:13:80:b7:7a:aa:36:c0:1a:43:
e2:56:ef:82:01:3f:e5:24:03:ad:0f:82:b8:07:c7:
bc:bb:79:bd:79:ea:eb:9d:dc:a5:04:59:74:a4:04:
fd:4e:65:d5:72:23:46:38:be:6f:79:b8:a5:80:d7:
a1:dc:f3:0d:1f:e4:08:fb:62:32:87:05:4e:c4:98:
0e:08:49:f5:f3:14:17:c7:12:27:7d:8d:e4:27:5b:
31:ed:07:99:e7:60:61:01:b1:09:28:2c:cf:29:cd:
22:05:90:ef:d4:4e:a3:ac:0a:5f:2a:2d:33:ee:a9:
e5:ce:58:04:ec:8f:f1:89:ee:e2:50:40:3c:54:30:
a1:06:d5:81:83:2b:9c:54:3c:e9:24:f2:53:62:f1:
27:a0:20:b3:3e:ae:8e:2f:e0:d6:83:1c:8a:e1:c4:
56:98:fd:b1:50:b9:e8:11:39:a9:4d:b9:a6:19:6b:
49:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9D:FF:3D:36:DC:DC:F4:C7:38:A9:6F:6F:48:3F:55:0B:0B:3D:BF
X509v3 Authority Key Identifier:
keyid:E3:79:D8:3D:22:A0:BE:EB:86:C8:7E:15:A6:CB:6C:69:BD:42:90:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43nYPSKgvuuGyH4Vpstsab1CkD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/x53_PTbc3PTHOKlvb0g_VQsLPb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/43nYPSKgvuuGyH4Vpstsab1CkD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.28.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:c5:55:76:12:b3:bb:33:f1:ad:a0:f7:33:3b:57:75:1d:f6:
92:06:19:12:f0:f9:3f:f9:0d:fd:b2:9c:3c:4e:af:87:bd:da:
11:f9:2c:73:ca:f5:93:ac:e3:5f:c9:15:77:09:4f:20:0a:9e:
06:84:22:5c:81:34:f6:fb:ed:db:e4:c7:07:93:34:d0:66:c0:
f8:e0:c3:c8:c1:5d:fc:7a:d0:c9:df:fa:9e:ac:02:c8:4d:57:
41:b5:d2:65:df:e6:75:f5:4c:46:f2:a5:c0:4f:0f:88:80:fa:
d5:35:ab:73:c3:f0:07:79:86:f9:7e:b1:b6:09:86:95:42:b1:
45:13:9b:07:9f:f5:74:14:a1:75:65:49:b6:ee:40:a5:8e:23:
38:b3:9d:ba:69:29:a2:20:69:2f:f6:d2:90:d2:5e:b2:bf:89:
84:20:96:6b:7b:0a:9c:d6:13:88:c5:8f:bb:d4:32:3b:cb:25:
d9:0f:ef:c3:0b:1c:cd:0c:13:2f:dc:63:fd:ef:33:b7:63:de:
8e:99:69:8b:df:50:fa:cb:b9:53:db:9d:e7:92:db:0b:59:99:
92:ec:04:57:0e:ff:04:34:e0:4c:1c:0e:b4:1b:9f:ca:b6:f0:
5d:8c:7f:0d:2d:d7:bb:50:7f:fb:32:3f:32:ae:d4:12:d6:c5:
8a:3d:10:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:11 2024 by rpki-client on console-ams.rpki-client.org