Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f4f2bd-9621-4624-89de-e8858fd8b4ca/1/ILS7_ILDjn4M6vFlY6TS6myGhII.roa
File: ILS7_ILDjn4M6vFlY6TS6myGhII.roa (raw, json)
Hash identifier: P6iZR21DMn6g4zaaWhkUWN785YPOXCxnW+v1jzAS3m8=
Subject key identifier: 20:B4:BB:FC:82:C3:8E:7E:0C:EA:F1:65:63:A4:D2:EA:6C:86:84:82
Certificate issuer: /CN=a65e61591857073d7b8766a734c9b566aaab3e95
Certificate serial: 01B14766
Authority key identifier: A6:5E:61:59:18:57:07:3D:7B:87:66:A7:34:C9:B5:66:AA:AB:3E:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl5hWRhXBz17h2anNMm1ZqqrPpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f4f2bd-9621-4624-89de-e8858fd8b4ca/1/ILS7_ILDjn4M6vFlY6TS6myGhII.roa
Signing time: Sat 01 Jan 2022 13:02:39 +0000
ROA not before: Sat 01 Jan 2022 13:02:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43444
IP address blocks: 46.19.68.0/24 maxlen: 24
46.19.69.0/24 maxlen: 24
37.220.84.0/24 maxlen: 24
37.220.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28395366 (0x1b14766)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65e61591857073d7b8766a734c9b566aaab3e95
Validity
Not Before: Jan 1 13:02:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20b4bbfc82c38e7e0ceaf16563a4d2ea6c868482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:50:e3:06:4c:b2:37:d0:67:6e:c7:48:3f:
9f:0c:46:3f:66:e2:b5:b6:f9:e2:b4:3b:fb:41:56:
a3:c0:77:6e:df:ff:72:99:2a:46:41:50:2f:e5:ed:
9c:b5:8f:0e:ef:74:0e:5e:6f:c3:04:61:9f:19:fa:
90:4a:ee:0c:e8:9b:7c:7a:ce:d3:4f:8c:af:7f:0d:
c3:de:5a:db:42:0a:00:dd:4c:b7:b0:cf:2c:c3:f6:
ef:07:d3:57:77:05:e8:c0:2c:4d:74:b5:5d:ec:2b:
e0:23:47:05:31:72:8d:a6:37:f5:7f:5e:70:89:b9:
98:52:b1:6d:ad:30:a0:9b:1d:f4:92:3f:77:83:96:
1c:1a:53:ff:70:a6:c7:08:9e:d3:0f:33:e4:f4:33:
03:3c:f7:97:f4:80:b0:d1:6b:1c:4a:12:75:7d:69:
08:36:16:96:29:61:b5:3f:8d:e0:4d:af:79:6f:c1:
36:20:69:b0:15:02:b8:a7:36:86:b3:f2:0a:d7:8a:
d8:86:cf:d0:5e:80:23:e0:77:c7:c3:0d:ce:6a:b6:
90:c2:4e:7f:31:49:94:89:98:81:55:ca:5a:58:e8:
f9:10:b8:82:56:1a:ea:8f:89:e9:c6:b0:1a:f3:a3:
77:7b:82:2b:f3:dd:e8:18:12:cc:36:bf:3e:0f:77:
9b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B4:BB:FC:82:C3:8E:7E:0C:EA:F1:65:63:A4:D2:EA:6C:86:84:82
X509v3 Authority Key Identifier:
keyid:A6:5E:61:59:18:57:07:3D:7B:87:66:A7:34:C9:B5:66:AA:AB:3E:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl5hWRhXBz17h2anNMm1ZqqrPpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f4f2bd-9621-4624-89de-e8858fd8b4ca/1/ILS7_ILDjn4M6vFlY6TS6myGhII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f4f2bd-9621-4624-89de-e8858fd8b4ca/1/pl5hWRhXBz17h2anNMm1ZqqrPpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.220.84.0/23
46.19.68.0/23
Signature Algorithm: sha256WithRSAEncryption
00:25:80:ca:8c:32:61:1c:f0:37:c8:14:ac:77:ad:d0:bd:2e:
af:df:93:63:30:e8:60:10:46:df:bb:aa:e5:6e:bb:26:fa:04:
74:a9:75:87:3a:1b:53:cb:4c:9d:13:74:b7:d8:a6:29:97:dc:
8d:a3:bb:1c:32:56:49:6c:3c:81:74:e1:21:67:90:ed:c4:31:
a0:7e:71:cc:60:9d:b3:14:92:bd:ac:2c:ef:c4:9b:33:0f:08:
c0:b9:85:5a:02:c3:8a:d5:af:f1:bc:ea:4b:da:c6:67:06:e8:
b5:5a:a5:42:3c:13:92:6b:84:e7:16:c9:d2:34:d7:44:80:04:
b7:06:22:41:06:a8:92:32:23:0b:70:c5:d3:ac:16:95:a9:5a:
33:f3:4a:d2:a9:df:47:8b:de:3d:1e:30:55:63:6b:61:cd:8b:
ae:68:93:77:7c:0e:c4:a0:c1:49:82:58:03:b4:fa:16:c4:b8:
cf:51:4d:8f:ce:ed:7a:2a:e3:81:7d:42:f3:72:72:87:d1:20:
b3:de:49:ac:0b:a7:ba:95:ec:a6:35:cc:67:5d:22:2c:45:36:
7a:95:ff:60:32:ce:25:4d:6b:a7:7b:6f:57:fc:6b:4c:1d:5d:
5e:d0:da:b0:c1:b3:ee:35:09:de:ed:fb:af:a3:40:99:77:51:
e8:b9:67:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:59 2024 by rpki-client on console-ams.rpki-client.org