Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3a803c-872d-4927-afa7-15374177739d/1/9nGnE5XnjBY_9LUtGwIc29s3xqM.roa
File: 9nGnE5XnjBY_9LUtGwIc29s3xqM.roa (raw, json)
Hash identifier: KmqVcyF4Edb/OUan44QUIcuiQdRI/mPLUIBL108OdfA=
Subject key identifier: F6:71:A7:13:95:E7:8C:16:3F:F4:B5:2D:1B:02:1C:DB:DB:37:C6:A3
Certificate issuer: /CN=7f65bff64d8a87977e334d89c4e38c0d1095af63
Certificate serial: 014B3953
Authority key identifier: 7F:65:BF:F6:4D:8A:87:97:7E:33:4D:89:C4:E3:8C:0D:10:95:AF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2W_9k2Kh5d-M02JxOOMDRCVr2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3a803c-872d-4927-afa7-15374177739d/1/9nGnE5XnjBY_9LUtGwIc29s3xqM.roa
Signing time: Fri 27 May 2022 10:43:14 +0000
ROA not before: Fri 27 May 2022 10:43:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47110
IP address blocks: 185.10.84.0/22 maxlen: 22
212.6.38.0/24 maxlen: 24
77.223.216.0/21 maxlen: 21
92.62.124.0/22 maxlen: 22
2a03:5e40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21707091 (0x14b3953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f65bff64d8a87977e334d89c4e38c0d1095af63
Validity
Not Before: May 27 10:43:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f671a71395e78c163ff4b52d1b021cdbdb37c6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cf:be:7b:1b:ad:3f:f9:22:b6:3c:8a:aa:7e:
55:5d:b7:a0:69:01:d1:de:3f:15:a6:dc:e2:e4:fd:
a7:f6:53:ec:d2:b0:7e:ae:30:86:a8:02:32:a2:29:
27:09:ff:df:e2:86:09:98:dc:de:cf:d3:b9:84:ff:
f0:2a:21:b0:64:96:06:b3:27:1f:40:80:52:a1:0c:
fc:5e:59:5f:95:9b:d9:33:1f:5d:df:e7:38:c3:81:
3a:09:d9:d5:94:28:f0:87:e8:51:5e:75:3d:ce:81:
de:9a:e6:c7:e4:40:0e:9a:90:87:fb:97:c5:f4:f5:
7a:f5:17:67:f3:fd:e4:94:ca:e5:e7:d9:3e:38:b7:
5e:f5:a9:62:40:1c:81:ea:29:7a:45:ed:b2:40:59:
94:2f:f5:b3:0c:9a:05:80:e9:0a:74:1f:04:28:e8:
a4:a1:58:7e:7b:a6:08:ec:ad:1c:7a:26:68:2b:b9:
04:78:c0:ff:44:ee:ad:f2:ac:1a:74:2a:93:bb:50:
71:25:da:67:74:d3:1b:67:13:75:7e:1e:b0:1f:b6:
f0:c5:f5:f9:90:3a:07:d0:4c:87:b1:e4:1b:cc:6f:
8e:1d:99:43:d9:cf:36:51:8d:69:58:66:d2:d7:a5:
4b:80:6c:00:bb:c9:ea:9c:3d:d6:81:66:65:8c:70:
09:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:71:A7:13:95:E7:8C:16:3F:F4:B5:2D:1B:02:1C:DB:DB:37:C6:A3
X509v3 Authority Key Identifier:
keyid:7F:65:BF:F6:4D:8A:87:97:7E:33:4D:89:C4:E3:8C:0D:10:95:AF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2W_9k2Kh5d-M02JxOOMDRCVr2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3a803c-872d-4927-afa7-15374177739d/1/9nGnE5XnjBY_9LUtGwIc29s3xqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3a803c-872d-4927-afa7-15374177739d/1/f2W_9k2Kh5d-M02JxOOMDRCVr2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.216.0/21
92.62.124.0/22
185.10.84.0/22
212.6.38.0/24
IPv6:
2a03:5e40::/32
Signature Algorithm: sha256WithRSAEncryption
60:aa:59:6b:bc:7c:a3:7a:47:dc:eb:cf:9d:20:d0:3a:07:ac:
e9:48:a1:56:82:6b:2f:50:35:93:9a:1a:06:3f:dd:63:5d:0f:
9a:d1:2b:85:c1:d8:8f:7a:1c:01:6f:28:d8:5d:e2:43:ef:ea:
14:15:f1:9c:55:f0:ae:7e:f2:4d:2e:f8:56:7c:44:53:3f:bf:
8c:d9:eb:44:9b:b1:0f:eb:ef:33:13:b5:98:f4:24:96:5b:4b:
b6:eb:44:41:bf:f1:c2:a8:7d:bf:d2:c0:33:f7:b1:49:04:3b:
eb:17:59:1f:fa:b3:04:c8:5c:88:1c:7c:b1:c9:f3:f5:bb:2b:
10:6b:ca:11:83:b9:5f:4a:85:2a:8e:27:83:cb:c4:06:ac:83:
86:de:99:90:7b:bc:30:2b:7c:61:a2:49:31:32:7f:ef:3c:4f:
cd:52:e1:6b:a4:5a:ea:7f:5d:cb:53:a0:65:9c:1e:f0:2c:0f:
a8:06:ec:f4:d8:52:c8:63:cd:43:4b:77:d1:47:5f:70:f2:aa:
b0:3a:9a:70:38:23:3b:24:89:5f:95:f4:65:df:83:f1:0d:63:
28:b5:25:fc:eb:59:54:74:c7:2a:c7:98:2a:6e:8c:55:a7:cc:
8b:0b:a1:c6:3a:bd:67:de:99:33:8d:b2:9a:cf:f3:a7:b5:de:
2a:51:a6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:23 2024 by rpki-client on console-fra.rpki-client.org