Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/27dad2-e611-4f0c-94f7-eb76f8110c7f/1/HidJG2fCtzADFs-2SVBwlDZMuQE.roa
File: HidJG2fCtzADFs-2SVBwlDZMuQE.roa (raw, json)
Hash identifier: UBtj9KaN33BcEBx6gxtv+vVuZLur1qKMyGUIW6vFELU=
Subject key identifier: 1E:27:49:1B:67:C2:B7:30:03:16:CF:B6:49:50:70:94:36:4C:B9:01
Certificate issuer: /CN=e55dd9da42a7c50bd7689b88d409b576caca4d01
Certificate serial: 018B4949CF7C461D2624099166200F562F98
Authority key identifier: E5:5D:D9:DA:42:A7:C5:0B:D7:68:9B:88:D4:09:B5:76:CA:CA:4D:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5V3Z2kKnxQvXaJuI1Am1dsrKTQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/27dad2-e611-4f0c-94f7-eb76f8110c7f/1/HidJG2fCtzADFs-2SVBwlDZMuQE.roa
Signing time: Thu 19 Oct 2023 18:54:15 +0000
ROA not before: Thu 19 Oct 2023 18:54:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59462
IP address blocks: 185.22.231.0/24 maxlen: 24
185.150.16.0/24 maxlen: 24
185.150.19.0/24 maxlen: 24
2a0e:d487:f000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:49:49:cf:7c:46:1d:26:24:09:91:66:20:0f:56:2f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55dd9da42a7c50bd7689b88d409b576caca4d01
Validity
Not Before: Oct 19 18:54:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e27491b67c2b7300316cfb649507094364cb901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:30:08:75:b3:31:b9:b7:d3:87:84:62:bf:c9:
84:ba:c7:84:fe:e0:3f:c4:76:14:d4:32:ce:45:f2:
7e:c1:32:4b:23:66:3d:7c:4d:8e:22:e6:5b:a6:14:
42:d3:5d:24:a8:59:04:2d:77:9c:aa:04:b4:03:71:
65:10:b4:65:b0:f5:19:1e:f9:a3:f2:82:f9:49:c1:
4e:c3:b2:34:b9:54:d6:f6:84:4c:82:04:f6:8d:c5:
f4:5b:47:f5:08:1a:f4:21:17:85:22:d5:80:1c:c9:
56:a1:5b:18:27:87:f4:a8:6c:52:51:2a:f9:7e:0a:
6d:8b:65:7f:63:da:eb:5b:9e:5a:c1:00:1b:5c:ce:
b8:c8:36:61:c8:11:0a:79:36:48:51:ba:16:da:03:
dd:34:38:29:1d:bf:51:7c:ae:39:b0:94:06:64:3e:
d2:a9:9e:92:23:02:32:70:79:0d:5a:43:d5:aa:53:
f4:f3:6e:ba:24:af:81:75:8f:3d:a8:af:8f:d5:39:
c2:25:11:6c:39:ac:ce:10:bd:ef:62:e1:b0:f8:e0:
d1:c0:06:68:c9:d8:57:3c:e8:35:6d:7e:8e:69:ae:
30:4d:52:ae:79:82:fb:4c:42:65:13:ec:a3:e3:96:
00:dc:69:ca:db:12:b7:67:c2:8b:39:9c:a5:ca:68:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:27:49:1B:67:C2:B7:30:03:16:CF:B6:49:50:70:94:36:4C:B9:01
X509v3 Authority Key Identifier:
keyid:E5:5D:D9:DA:42:A7:C5:0B:D7:68:9B:88:D4:09:B5:76:CA:CA:4D:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5V3Z2kKnxQvXaJuI1Am1dsrKTQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/27dad2-e611-4f0c-94f7-eb76f8110c7f/1/HidJG2fCtzADFs-2SVBwlDZMuQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/27dad2-e611-4f0c-94f7-eb76f8110c7f/1/5V3Z2kKnxQvXaJuI1Am1dsrKTQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.231.0/24
185.150.16.0/24
185.150.19.0/24
IPv6:
2a0e:d487:f000::/48
Signature Algorithm: sha256WithRSAEncryption
5f:1a:b7:ff:1f:7f:d9:73:17:41:23:39:65:65:5e:4b:61:33:
2f:1c:f5:8b:09:23:43:79:eb:87:d8:02:3d:88:52:68:bf:c4:
2f:a1:01:f2:2f:bf:10:e9:11:03:42:23:d0:3f:88:4d:3e:f4:
b1:91:6b:a0:5e:73:b7:88:fa:e6:ad:20:57:2b:d1:73:c8:16:
78:36:ae:88:c6:ab:64:d2:7e:0b:90:c9:d8:8b:14:fd:41:91:
f0:71:43:ab:12:0e:24:3a:09:bf:f3:d3:d2:ba:c7:38:26:fb:
6d:7c:e8:1e:66:e6:20:f4:bd:3a:77:f8:0d:3a:57:1a:87:4d:
c3:01:d1:89:fd:56:32:81:92:6e:bc:9b:bd:b1:6c:01:46:b9:
f3:47:3f:06:2d:b0:08:a7:08:1b:91:6a:3d:34:9c:d8:67:32:
ab:6f:68:77:7e:f5:56:e9:4c:b5:69:6b:32:cf:06:99:8f:5d:
66:bb:30:a3:e1:48:4b:1d:74:6b:81:6b:6d:ff:8f:0b:83:28:
83:df:8d:0e:b8:c2:80:ef:75:b4:20:55:45:fd:88:88:a5:f3:
70:24:92:68:f0:6c:c4:01:92:56:cb:4d:69:45:44:16:64:86:
49:7a:02:91:15:17:df:30:84:fb:88:6f:41:08:21:bf:cb:62:
d1:2d:8f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:44 2024 by rpki-client on console-fra.rpki-client.org