Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3a803c-872d-4927-afa7-15374177739d/1/0y_J3EblHmelbGVuhha_cWEBxvQ.roa
File: 0y_J3EblHmelbGVuhha_cWEBxvQ.roa (raw, json)
Hash identifier: 5SrXUeFuMPSmJIDykRTUCt3ERuiROdoQlOkSWsUkUMY=
Subject key identifier: D3:2F:C9:DC:46:E5:1E:67:A5:6C:65:6E:86:16:BF:71:61:01:C6:F4
Certificate issuer: /CN=7f65bff64d8a87977e334d89c4e38c0d1095af63
Certificate serial: 01856E8B3A4A9C38F94D3DB1D6DFEA707A6D
Authority key identifier: 7F:65:BF:F6:4D:8A:87:97:7E:33:4D:89:C4:E3:8C:0D:10:95:AF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2W_9k2Kh5d-M02JxOOMDRCVr2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3a803c-872d-4927-afa7-15374177739d/1/0y_J3EblHmelbGVuhha_cWEBxvQ.roa
Signing time: Sun 01 Jan 2023 18:14:55 +0000
ROA not before: Sun 01 Jan 2023 18:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47110
IP address blocks: 185.10.84.0/22 maxlen: 22
212.6.38.0/24 maxlen: 24
77.223.216.0/21 maxlen: 21
92.62.124.0/22 maxlen: 22
2a03:5e40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:3a:4a:9c:38:f9:4d:3d:b1:d6:df:ea:70:7a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f65bff64d8a87977e334d89c4e38c0d1095af63
Validity
Not Before: Jan 1 18:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d32fc9dc46e51e67a56c656e8616bf716101c6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9d:6d:87:66:47:b5:b9:0f:99:43:ae:13:6b:
07:b1:8f:55:e2:0d:25:30:53:f3:7d:9e:42:84:ac:
c0:5e:35:0e:70:23:53:f1:68:de:a1:09:49:60:c5:
30:83:d3:b6:1d:01:d2:bf:82:a2:fc:16:48:74:2b:
fe:37:18:c4:9b:92:77:7a:ff:de:c4:6c:02:4e:00:
3a:f1:5d:61:20:51:81:c9:95:16:fd:77:0f:45:08:
5b:a2:a0:0d:07:07:48:94:2a:a2:0c:b9:20:ee:51:
ee:09:6f:f3:ee:5a:d9:a7:89:c6:00:8a:99:7b:b9:
ac:18:77:78:12:60:9e:70:10:ce:14:a7:ab:5b:a7:
67:79:73:e7:0b:d2:db:0b:08:07:e7:65:ca:78:44:
8a:23:6a:48:25:4a:48:e9:1b:7b:22:24:12:eb:bf:
7e:70:c3:20:45:07:de:42:ab:6f:4c:15:62:63:e3:
c2:49:c3:92:9c:74:21:05:ec:73:31:a8:80:71:8b:
f1:9c:10:32:21:74:3e:c4:13:38:2f:a9:47:4e:fd:
a3:ce:66:52:a0:5d:0c:3e:17:9f:24:7e:7c:ea:9f:
40:b1:b7:36:85:d0:c2:7c:3b:1e:f8:30:77:5f:58:
59:74:1d:e2:29:28:78:d5:b2:59:5f:3b:e3:c7:a7:
9b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2F:C9:DC:46:E5:1E:67:A5:6C:65:6E:86:16:BF:71:61:01:C6:F4
X509v3 Authority Key Identifier:
keyid:7F:65:BF:F6:4D:8A:87:97:7E:33:4D:89:C4:E3:8C:0D:10:95:AF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2W_9k2Kh5d-M02JxOOMDRCVr2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3a803c-872d-4927-afa7-15374177739d/1/0y_J3EblHmelbGVuhha_cWEBxvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3a803c-872d-4927-afa7-15374177739d/1/f2W_9k2Kh5d-M02JxOOMDRCVr2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.216.0/21
92.62.124.0/22
185.10.84.0/22
212.6.38.0/24
IPv6:
2a03:5e40::/32
Signature Algorithm: sha256WithRSAEncryption
5f:cf:9d:07:4d:61:45:bf:5a:45:1a:3c:e0:29:10:06:74:46:
77:96:d1:2a:c6:00:97:71:44:34:d9:bb:b2:50:82:3c:20:9e:
a6:8d:e6:9b:15:d6:96:5b:ba:8c:03:3b:28:aa:dd:6f:10:f4:
26:55:75:70:33:08:c2:69:69:b7:13:5e:7e:43:36:ab:0b:2f:
3f:6c:4d:a6:bf:ca:b3:fc:91:65:7c:45:ae:3f:8b:06:d1:10:
c7:c6:7a:77:38:0c:c5:71:db:0b:e1:df:3b:7f:b4:cc:38:88:
47:e9:5e:71:3d:68:ad:74:37:91:db:06:24:2b:5c:ec:b1:12:
d8:d8:12:4b:70:4c:cd:d8:14:4c:62:24:91:7e:6f:04:26:c6:
c6:e7:03:1c:9b:89:46:20:a6:44:eb:5c:f1:69:d2:25:ce:7e:
8a:69:ea:08:99:bd:d7:b9:63:a6:ca:19:16:24:d5:45:f7:7d:
ac:ef:88:06:f1:d4:a5:fb:7b:39:ba:03:b7:57:67:87:37:8f:
6a:37:89:bc:6e:18:bf:d0:82:24:ae:24:bf:27:d5:cf:79:c2:
9c:66:43:36:bf:18:a8:6e:df:f4:98:f1:be:e5:da:b4:88:b8:
56:71:77:8c:db:dc:dd:6b:ee:c7:e7:64:76:04:06:a5:62:75:
10:a6:f0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:21 2024 by rpki-client on console-ams.rpki-client.org