Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/51518c-ebbf-43e8-a30d-52ccd02ec722/1/DTDlufvtIkzNVVZilZurV2_uUJE.roa
File: DTDlufvtIkzNVVZilZurV2_uUJE.roa (raw, json)
Hash identifier: MtgEhCE445ZWswgwhQINL77OgJe0fNMWMplLguyaVac=
Subject key identifier: 0D:30:E5:B9:FB:ED:22:4C:CD:55:56:62:95:9B:AB:57:6F:EE:50:91
Certificate issuer: /CN=4e67a6e4730fdb2b5822306d11f43dbd8c3337dd
Certificate serial: 01856E2F93AA9F377E0D8256FDC9CCAE4F3C
Authority key identifier: 4E:67:A6:E4:73:0F:DB:2B:58:22:30:6D:11:F4:3D:BD:8C:33:37:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmem5HMP2ytYIjBtEfQ9vYwzN90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/51518c-ebbf-43e8-a30d-52ccd02ec722/1/DTDlufvtIkzNVVZilZurV2_uUJE.roa
Signing time: Sun 01 Jan 2023 16:34:49 +0000
ROA not before: Sun 01 Jan 2023 16:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61222
IP address blocks: 185.215.91.0/24 maxlen: 24
185.215.90.0/24 maxlen: 24
185.215.89.0/24 maxlen: 24
185.215.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:93:aa:9f:37:7e:0d:82:56:fd:c9:cc:ae:4f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e67a6e4730fdb2b5822306d11f43dbd8c3337dd
Validity
Not Before: Jan 1 16:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d30e5b9fbed224ccd555662959bab576fee5091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9f:48:07:c4:45:87:01:01:97:96:da:81:e8:
16:35:e7:8d:13:9b:2d:44:22:53:bd:95:14:42:3a:
16:6b:e7:84:8e:4d:ff:e4:3a:3c:f3:dc:f9:e1:4d:
83:e7:92:ca:28:36:09:11:ae:98:c0:f6:e9:f9:81:
81:5b:64:b3:a8:10:3f:1f:35:23:2f:3e:a3:bf:67:
7d:ae:05:6c:e3:32:25:2d:0b:d4:18:ff:c8:94:32:
fd:78:38:df:1c:32:6c:a8:6e:a0:48:87:34:90:e4:
5b:3d:10:62:f8:b5:e2:9c:64:0a:c4:f8:d0:23:1e:
24:6c:c4:ad:aa:e8:74:51:a5:a4:99:53:ad:03:31:
3f:5a:47:48:b5:e1:68:d9:47:c4:49:a6:64:4e:7c:
4c:a8:bd:79:5d:dc:41:78:ca:61:6f:7c:05:84:88:
e6:68:24:8b:8d:c1:54:2b:8b:8a:0f:a5:99:33:f9:
31:50:94:59:27:87:c2:54:d6:ec:e8:20:9c:67:0b:
28:d9:a0:1e:9d:f0:7c:dc:df:b0:d0:ee:e4:8f:62:
79:0c:8d:2e:f2:a3:12:bd:a2:90:45:94:17:e7:a1:
c4:f6:99:a3:72:da:f6:d7:fa:53:cf:a1:95:9b:26:
8d:3e:be:f0:f7:08:4b:4e:1c:61:86:1d:47:b6:b8:
d4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:30:E5:B9:FB:ED:22:4C:CD:55:56:62:95:9B:AB:57:6F:EE:50:91
X509v3 Authority Key Identifier:
keyid:4E:67:A6:E4:73:0F:DB:2B:58:22:30:6D:11:F4:3D:BD:8C:33:37:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmem5HMP2ytYIjBtEfQ9vYwzN90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/51518c-ebbf-43e8-a30d-52ccd02ec722/1/DTDlufvtIkzNVVZilZurV2_uUJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/51518c-ebbf-43e8-a30d-52ccd02ec722/1/Tmem5HMP2ytYIjBtEfQ9vYwzN90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.88.0/22
Signature Algorithm: sha256WithRSAEncryption
12:1c:d8:93:5f:46:c7:0e:18:6e:a6:d8:f7:4e:86:ea:82:fc:
2e:1e:d0:fa:22:95:27:3a:2f:74:32:f4:7c:27:2f:e8:1d:21:
4b:d9:de:e5:d7:d2:76:94:d6:96:2f:a0:18:14:f6:bf:e8:80:
2f:38:b5:4d:5e:2c:2a:aa:41:92:59:b5:5c:26:fe:89:63:2c:
72:6c:e1:34:c1:82:f1:a1:e6:7d:ab:a2:d4:7b:06:d3:8a:f7:
1b:b9:7e:10:97:a7:d0:47:1e:64:d4:dc:00:b5:84:f3:78:69:
df:71:d6:b6:c8:27:9d:a7:67:09:d8:fe:c0:69:1f:86:7b:82:
2a:65:5b:ee:1d:a8:77:5a:30:ac:00:9b:2b:3b:a2:a5:4e:39:
87:e2:b4:8d:d4:ec:a3:fa:ef:fb:c0:f2:07:52:f7:d1:9c:97:
0e:89:1f:d2:e6:84:1a:0d:b7:5d:a7:4d:02:93:7d:46:cb:1e:
97:c5:fa:bc:d3:0f:3f:91:5f:03:34:c1:03:96:88:71:3d:96:
67:66:5a:97:2b:af:c6:87:b4:2d:44:fa:2a:72:9c:86:da:51:
08:52:89:07:91:e5:94:e5:8d:5f:ef:7a:50:16:ea:e2:1a:b8:
45:b1:b7:32:3a:d2:d6:2d:91:82:86:0f:a0:32:ed:20:30:79:
75:03:c3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:53 2024 by rpki-client on console-fra.rpki-client.org