Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/tye5-4v-CSCQn5CEuI5VjYe3p0g.roa
File: tye5-4v-CSCQn5CEuI5VjYe3p0g.roa (raw, json)
Hash identifier: xpVZTWFc/7eloFfD+TfQ/pZWKv26O5V6R+W6EckiMng=
Subject key identifier: B7:27:B9:FB:8B:FE:09:20:90:9F:90:84:B8:8E:55:8D:87:B7:A7:48
Certificate issuer: /CN=43931de6e91b40f4b2bb201253e57a86741105a5
Certificate serial: 0302F1A3
Authority key identifier: 43:93:1D:E6:E9:1B:40:F4:B2:BB:20:12:53:E5:7A:86:74:11:05:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Md5ukbQPSyuyASU-V6hnQRBaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/tye5-4v-CSCQn5CEuI5VjYe3p0g.roa
Signing time: Thu 20 Jan 2022 22:52:22 +0000
ROA not before: Thu 20 Jan 2022 22:52:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 185.227.218.0/24 maxlen: 24
185.227.217.0/24 maxlen: 24
185.227.216.0/24 maxlen: 24
185.227.216.0/22 maxlen: 22
185.227.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50524579 (0x302f1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43931de6e91b40f4b2bb201253e57a86741105a5
Validity
Not Before: Jan 20 22:52:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b727b9fb8bfe0920909f9084b88e558d87b7a748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e6:aa:4b:41:54:7b:ab:b8:5a:62:b0:ea:8c:
d9:d7:0c:c2:d2:71:18:ae:f2:ea:d0:cb:ac:45:02:
7a:8d:dd:16:cf:3e:46:1a:c2:24:5b:d2:d6:a1:f2:
15:fd:e9:c7:d7:1c:73:a5:be:67:fb:6f:ed:fe:f3:
0b:56:ae:de:0d:2e:66:99:09:6f:83:a6:a9:d6:88:
b5:dc:27:d2:92:36:aa:76:97:18:4c:08:dd:25:bf:
cc:5e:36:b0:8a:0d:2c:34:c6:9c:7d:01:7c:b9:3b:
d2:e6:04:9b:e8:04:08:d5:0b:f6:6a:9f:39:cd:cf:
e5:95:e8:26:68:e0:40:1a:ee:84:c7:f2:8c:a4:bf:
f5:1b:e8:87:c9:5e:c0:4a:68:ce:3e:57:df:7d:97:
6a:8e:30:31:46:a1:13:51:ed:7d:2d:db:98:49:3b:
2e:30:6e:f3:5a:34:77:f6:cd:c7:e5:d7:f1:f5:9a:
96:83:f3:57:c3:46:33:0c:96:2a:e8:a4:f5:a4:74:
2c:36:4c:bf:01:79:18:90:de:ad:88:8d:b4:1e:27:
f6:15:3f:f4:c8:79:67:29:cf:88:ca:5f:29:46:8a:
48:4b:d3:93:e8:ee:4f:90:0d:32:d7:62:63:b0:b8:
e1:53:93:a3:90:ee:20:80:c9:c8:f9:b0:2d:a9:f0:
d6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:27:B9:FB:8B:FE:09:20:90:9F:90:84:B8:8E:55:8D:87:B7:A7:48
X509v3 Authority Key Identifier:
keyid:43:93:1D:E6:E9:1B:40:F4:B2:BB:20:12:53:E5:7A:86:74:11:05:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Md5ukbQPSyuyASU-V6hnQRBaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/tye5-4v-CSCQn5CEuI5VjYe3p0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/Q5Md5ukbQPSyuyASU-V6hnQRBaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.216.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:2c:2f:4c:96:ec:a7:f8:c2:40:e0:a7:8d:43:62:04:2a:62:
72:d5:6f:3b:8a:f6:4f:5f:6e:00:e0:9e:62:73:45:8d:45:ed:
1e:e8:2f:77:e6:d1:54:54:ac:01:84:24:6b:4b:6a:6f:e8:91:
eb:35:1f:66:e0:52:ad:e3:e5:18:b9:cc:a4:cb:91:b6:dd:fa:
05:2a:90:4c:ca:b6:b4:d2:5a:d3:7d:2d:62:f8:83:02:77:39:
8a:21:b9:24:5b:13:30:c2:71:65:dc:cc:6a:a6:e9:51:5f:57:
c3:43:b9:29:3d:30:03:75:f5:46:10:8a:48:b5:08:f3:c0:b9:
46:65:35:fd:65:3c:48:8b:6a:30:16:a4:3d:2b:07:d2:cf:88:
3a:e0:1b:36:15:fd:e7:a5:a6:8f:26:27:0c:39:d7:e9:f3:d8:
9c:3e:d0:f3:17:9e:80:67:9f:94:fc:f0:37:3e:8d:29:e8:47:
c1:bc:d0:89:81:a0:99:27:da:5c:b6:01:90:0a:e5:11:dd:50:
d1:df:b4:b2:c6:6f:89:f2:68:cd:ff:7b:02:b4:c9:73:08:a7:
8b:23:8d:79:83:bf:52:61:fa:c7:d5:4e:17:12:35:27:06:ae:
01:44:47:20:73:16:cf:72:7f:75:b2:43:6c:d0:1b:a4:2a:74:
1b:80:09:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:15 2024 by rpki-client on console-fra.rpki-client.org