Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/NK7208z2YWrJX_ApusGWu2BY73Q.roa
File: NK7208z2YWrJX_ApusGWu2BY73Q.roa (raw, json)
Hash identifier: BHCa1v6Ox/GhszBPjVzJIm/YGxXKqbGKYTRxz6+twD4=
Subject key identifier: 34:AE:F6:D3:CC:F6:61:6A:C9:5F:F0:29:BA:C1:96:BB:60:58:EF:74
Certificate issuer: /CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
Certificate serial: 01EAB17E
Authority key identifier: 09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/NK7208z2YWrJX_ApusGWu2BY73Q.roa
Signing time: Sat 01 Jan 2022 08:00:42 +0000
ROA not before: Sat 01 Jan 2022 08:00:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59462
IP address blocks: 185.150.16.0/24 maxlen: 24
2a0e:d487:f000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32158078 (0x1eab17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
Validity
Not Before: Jan 1 08:00:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34aef6d3ccf6616ac95ff029bac196bb6058ef74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:64:c5:15:c1:9b:98:28:b2:97:20:17:53:db:
5d:77:4d:44:b6:e5:94:8b:0d:d7:03:95:21:80:0d:
67:d8:62:9a:0e:03:27:ea:b4:2d:39:6b:63:85:69:
f6:35:76:05:6f:4e:21:90:7b:00:8a:eb:d0:3d:95:
84:aa:80:23:fe:7b:7c:3f:26:df:a9:fd:2f:fe:32:
da:5f:ce:b1:b3:24:f2:48:be:a9:40:d3:92:d6:b6:
65:db:c8:38:26:66:a4:98:83:19:05:80:84:6e:93:
44:95:9e:8e:86:6f:29:46:76:30:22:0b:ef:bd:16:
56:5d:4b:3d:91:91:f0:b6:23:de:a0:76:a8:e6:a6:
5c:be:36:62:83:39:c3:b2:96:74:56:59:82:e9:75:
26:43:7e:b9:03:7c:cb:d0:51:ef:eb:e8:bb:f2:dc:
de:5e:1b:46:11:69:b3:6e:66:1e:8a:db:5a:3a:62:
7a:2e:6c:b7:35:de:64:f0:d8:b8:e1:76:d5:86:46:
a3:b9:13:79:4e:53:e9:ba:aa:5d:98:de:8a:d3:2a:
ce:72:0b:02:8d:59:a6:45:d0:ea:78:2f:0c:9e:c8:
20:a6:b4:2c:cb:ed:f0:94:5d:64:31:fe:e5:eb:90:
07:04:36:d5:d5:98:b9:7c:e4:7f:b7:40:0b:7a:71:
45:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AE:F6:D3:CC:F6:61:6A:C9:5F:F0:29:BA:C1:96:BB:60:58:EF:74
X509v3 Authority Key Identifier:
keyid:09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/NK7208z2YWrJX_ApusGWu2BY73Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/CbnTdFC2KuPxROtCrFLOJDtiino.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.16.0/24
IPv6:
2a0e:d487:f000::/48
Signature Algorithm: sha256WithRSAEncryption
52:80:ad:38:21:42:af:34:0d:8b:9e:c6:36:71:c7:a6:57:f1:
1b:2d:fb:88:64:ec:3f:ed:2d:dc:15:f3:5a:4b:4e:a5:83:35:
54:30:ad:70:7b:21:69:ab:93:d6:88:f4:f2:31:95:05:26:80:
6e:1f:02:29:49:9c:ed:94:d0:61:de:88:1f:f9:43:64:35:d9:
1c:d7:46:dc:ed:27:35:8d:2f:a2:27:fb:ee:5b:69:76:01:2a:
ef:15:07:ca:4b:3e:b0:6c:36:0f:26:8f:6f:42:ef:87:7e:7d:
35:f8:16:5b:ba:19:2f:cd:5b:43:6a:31:cd:c7:8f:fe:0a:21:
5c:03:14:d0:cb:b2:d4:61:a6:4b:e4:d9:37:60:a6:30:46:13:
79:70:d0:d9:46:0d:f4:30:bd:e9:fe:85:6a:b0:e1:b7:28:1b:
1d:53:4e:63:08:60:2b:7a:a4:db:c7:7d:b6:cd:9e:63:a0:eb:
50:08:bd:31:2f:97:40:d6:71:be:6a:ec:5d:80:d1:f9:86:99:
31:04:53:46:ac:2d:7e:33:06:36:b0:93:30:a8:b0:1c:56:ed:
57:9e:ff:54:20:76:52:ce:63:77:ce:bb:fe:25:7d:4d:1a:c6:
73:d1:4e:d8:7e:e1:56:b3:36:19:c2:02:4e:f6:4b:ca:c0:2a:
78:5c:f6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org