Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f31d68-ab5f-4113-afd0-69da307ce49c/1/tIoMyD8uZwfXBUhJ19iCZMzNDHc.roa
File: tIoMyD8uZwfXBUhJ19iCZMzNDHc.roa (raw, json)
Hash identifier: yuZTv+epk8FcI792EKRX2Ko7zvde/6B6z2rNyJ2pTrs=
Subject key identifier: B4:8A:0C:C8:3F:2E:67:07:D7:05:48:49:D7:D8:82:64:CC:CD:0C:77
Certificate issuer: /CN=5ef586e9014a65f6007dbd006b062032f5d66e6f
Certificate serial: 166A80FC
Authority key identifier: 5E:F5:86:E9:01:4A:65:F6:00:7D:BD:00:6B:06:20:32:F5:D6:6E:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvWG6QFKZfYAfb0AawYgMvXWbm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f31d68-ab5f-4113-afd0-69da307ce49c/1/tIoMyD8uZwfXBUhJ19iCZMzNDHc.roa
Signing time: Sat 01 Jan 2022 14:55:56 +0000
ROA not before: Sat 01 Jan 2022 14:55:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49565
IP address blocks: 80.253.192.0/20 maxlen: 24
213.250.128.0/18 maxlen: 24
185.8.240.0/22 maxlen: 24
188.119.192.0/18 maxlen: 24
2a02:d5c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376078588 (0x166a80fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ef586e9014a65f6007dbd006b062032f5d66e6f
Validity
Not Before: Jan 1 14:55:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b48a0cc83f2e6707d7054849d7d88264cccd0c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:cc:f0:1e:5d:bc:e5:cf:d1:46:2e:37:d9:
3b:50:69:be:8d:6c:90:d7:2e:62:db:9e:38:aa:b4:
3e:30:8c:e4:63:bf:f9:ea:a7:8a:b7:15:56:d2:5b:
7f:8b:3b:a8:a5:ec:eb:8c:6b:7b:44:4f:9b:a1:5f:
6a:e9:1a:0e:1c:87:0b:52:33:1f:a6:06:d9:3f:8d:
f7:d1:0d:30:6b:40:5a:6b:35:bb:5b:b3:ed:89:b1:
ea:c6:1e:de:eb:34:b1:54:fc:47:19:c7:30:3b:e6:
02:9f:49:fc:0e:3a:b4:40:dd:2f:d5:ab:48:1f:2c:
2a:08:5c:5e:f5:13:b3:1d:dc:2f:e9:a3:97:24:d9:
e0:5e:f0:8d:2a:5e:f8:61:26:da:db:ca:1e:62:6e:
02:ab:59:97:93:86:b1:6c:a6:b7:f3:98:13:8d:91:
2b:22:04:b1:58:3e:b2:85:2b:d7:60:f1:52:9c:87:
36:f3:90:a4:e1:71:12:ac:b8:0c:48:bf:fa:a8:08:
7b:72:73:32:f9:4d:5f:e2:75:db:d4:7a:dc:aa:2b:
0c:4a:c2:55:1c:a4:a8:9a:6f:59:c4:e4:aa:f4:41:
a5:2e:04:8c:c4:6a:cf:a4:cf:bc:5a:7a:d0:9e:12:
f0:14:88:09:3f:79:8b:2f:4e:37:72:ba:9c:3f:db:
3e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8A:0C:C8:3F:2E:67:07:D7:05:48:49:D7:D8:82:64:CC:CD:0C:77
X509v3 Authority Key Identifier:
keyid:5E:F5:86:E9:01:4A:65:F6:00:7D:BD:00:6B:06:20:32:F5:D6:6E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvWG6QFKZfYAfb0AawYgMvXWbm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f31d68-ab5f-4113-afd0-69da307ce49c/1/tIoMyD8uZwfXBUhJ19iCZMzNDHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f31d68-ab5f-4113-afd0-69da307ce49c/1/XvWG6QFKZfYAfb0AawYgMvXWbm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.192.0/20
185.8.240.0/22
188.119.192.0/18
213.250.128.0/18
IPv6:
2a02:d5c0::/29
Signature Algorithm: sha256WithRSAEncryption
02:a8:5f:f8:8d:c9:34:30:94:f9:40:be:28:67:32:80:34:bc:
11:82:9f:21:d0:26:48:21:9a:37:dd:00:af:15:b7:ad:c2:ee:
f0:cf:04:af:d4:e0:b4:04:9d:4e:a3:e4:24:2e:fe:a7:1d:b8:
d8:65:bc:82:93:e9:5f:31:f6:2e:bb:8f:58:96:fa:c3:be:fd:
93:95:04:82:9a:c9:41:67:08:18:52:e6:d6:0c:6f:78:ad:4d:
61:a9:b7:f1:23:0b:2f:5a:dd:86:02:67:f7:76:b8:3b:18:2b:
bd:69:8b:32:b7:51:db:2d:b7:7b:cb:07:35:f3:45:47:05:5c:
88:7f:d3:30:31:ea:2e:04:0f:e2:0b:d3:20:dc:75:54:4f:c1:
2f:76:46:7b:29:de:04:26:3a:22:8e:fa:3c:e5:7d:cc:7c:28:
36:c7:8d:cd:46:9e:19:87:4d:24:18:eb:7b:bd:1f:3f:5f:17:
db:96:df:1e:9a:df:8d:b9:a3:e6:dc:41:33:f1:36:74:dc:24:
13:8a:f0:bc:d0:83:12:e5:10:e3:5e:89:0d:1d:ad:43:78:0c:
45:37:be:4e:53:2d:c1:04:80:e6:fa:99:53:f9:c9:ef:5e:f4:
16:2b:86:7c:48:fa:2b:b2:0c:b4:95:84:78:f5:ec:b7:1b:9c:
07:e3:c5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:26 2024 by rpki-client on console-ams.rpki-client.org