Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/daf25c-1b49-4719-9203-3254e4d7122e/1/UGGeFXddJA_yr3dndTrlli9UuJc.roa
File: UGGeFXddJA_yr3dndTrlli9UuJc.roa (raw, json)
Hash identifier: 2j/tLkEGqF/mHThMOy6JNItJVbylbgUAGDhbaeGuTBk=
Subject key identifier: 50:61:9E:15:77:5D:24:0F:F2:AF:77:67:75:3A:E5:96:2F:54:B8:97
Certificate issuer: /CN=bf174a5833bde6aa7824c34099762d00978857ff
Certificate serial: 3583D65A
Authority key identifier: BF:17:4A:58:33:BD:E6:AA:78:24:C3:40:99:76:2D:00:97:88:57:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxdKWDO95qp4JMNAmXYtAJeIV_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/daf25c-1b49-4719-9203-3254e4d7122e/1/UGGeFXddJA_yr3dndTrlli9UuJc.roa
Signing time: Sat 01 Jan 2022 11:56:09 +0000
ROA not before: Sat 01 Jan 2022 11:56:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199769
IP address blocks: 92.60.149.0/24 maxlen: 24
185.3.12.0/24 maxlen: 24
185.3.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 897832538 (0x3583d65a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf174a5833bde6aa7824c34099762d00978857ff
Validity
Not Before: Jan 1 11:56:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50619e15775d240ff2af7767753ae5962f54b897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:24:7a:35:fc:bc:c9:50:2c:39:66:a0:c0:
ed:67:7c:14:f0:df:3d:2f:1e:8a:15:9d:8a:2a:92:
89:47:85:26:91:7e:3f:94:58:10:ae:22:9c:94:54:
6e:23:ff:c7:7d:d6:74:c9:5f:bf:35:c4:ba:d3:6e:
b6:20:b2:b9:78:32:e8:1e:41:1a:5f:92:e3:95:ff:
02:f9:a4:3c:47:06:68:e9:2e:72:c6:9f:94:79:c8:
7f:d0:a8:12:75:da:cf:f2:79:6f:26:8e:19:4f:a6:
63:12:2c:ec:c1:d0:e4:84:2e:0c:8b:38:b5:24:c4:
cd:56:4a:ae:46:f4:3c:8a:8f:49:0e:39:6d:49:65:
b1:4f:7f:9f:fb:24:e0:99:30:76:43:25:b4:55:d0:
e1:dd:13:bd:2f:39:da:2c:f2:c4:a2:db:d4:30:e7:
8b:2a:36:d3:0e:6e:4d:d3:7f:92:8a:92:c4:fe:0f:
9d:10:cb:8a:6c:a9:83:8b:3d:01:22:9b:00:fb:4d:
9f:80:51:7c:fb:3e:80:11:46:a1:ce:bd:8f:c2:a7:
65:c0:8d:2c:9f:92:d4:64:8a:6b:53:74:ed:0f:9c:
83:43:2e:3f:3e:f1:45:bb:10:bf:13:42:6a:b2:9b:
d0:c3:46:96:f4:35:10:0b:07:4c:fb:b3:a9:53:70:
55:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:61:9E:15:77:5D:24:0F:F2:AF:77:67:75:3A:E5:96:2F:54:B8:97
X509v3 Authority Key Identifier:
keyid:BF:17:4A:58:33:BD:E6:AA:78:24:C3:40:99:76:2D:00:97:88:57:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxdKWDO95qp4JMNAmXYtAJeIV_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/daf25c-1b49-4719-9203-3254e4d7122e/1/UGGeFXddJA_yr3dndTrlli9UuJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/daf25c-1b49-4719-9203-3254e4d7122e/1/vxdKWDO95qp4JMNAmXYtAJeIV_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.149.0/24
185.3.12.0/23
Signature Algorithm: sha256WithRSAEncryption
18:ba:af:b9:06:31:3e:85:ff:6c:ec:69:fc:9b:74:55:b0:a5:
e4:ac:f3:9c:f1:b3:29:7e:0d:f3:b7:c9:7d:98:31:1c:54:e3:
0a:87:67:71:65:f8:25:91:02:30:2e:de:79:81:ae:00:a4:e0:
38:e7:28:b7:4d:8d:cd:d6:e7:1a:15:51:30:2d:f7:80:97:22:
b6:7d:a5:df:6f:97:91:e8:d6:4f:ec:7f:bb:2a:ed:bf:8c:11:
1b:3a:d5:42:95:92:1b:cb:7f:c3:f1:c0:c8:17:68:ba:68:f0:
c6:24:19:0e:20:5b:00:a4:b4:be:dc:40:8e:ce:f6:b7:e8:62:
b6:00:3a:2d:f7:e5:ac:3b:50:50:4e:83:55:3c:56:43:a8:4c:
e1:54:20:ce:45:dd:bf:56:e5:13:7e:8a:ca:ce:85:32:5a:4e:
e5:cf:ed:19:4d:98:84:86:ac:2f:09:83:44:a7:d9:b4:77:4a:
16:7f:f0:4d:cd:9e:79:43:88:87:ba:d5:43:78:6a:9a:3c:d6:
da:f2:88:9b:56:59:4c:2a:2e:19:bd:0a:70:77:93:5f:89:73:
fd:d4:cd:e7:1b:78:fb:18:ed:cd:b5:6d:0c:92:f4:14:b3:89:
aa:25:64:e8:41:64:0a:57:b5:9e:b6:e0:53:94:51:4b:3a:c9:
bb:3e:f5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:33 2024 by rpki-client on console-fra.rpki-client.org