Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/VSs87Twy5S0C91bXZRfUhBqQMI8.roa
File: VSs87Twy5S0C91bXZRfUhBqQMI8.roa (raw, json)
Hash identifier: nmPiWB3Fp8wMg+ygW+T8/2dfkiiatU0WzxSsyGrxNOw=
Subject key identifier: 55:2B:3C:ED:3C:32:E5:2D:02:F7:56:D7:65:17:D4:84:1A:90:30:8F
Certificate issuer: /CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
Certificate serial: 030D7C72
Authority key identifier: 09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/VSs87Twy5S0C91bXZRfUhBqQMI8.roa
Signing time: Tue 10 May 2022 16:54:02 +0000
ROA not before: Tue 10 May 2022 16:54:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59462
IP address blocks: 185.22.231.0/24 maxlen: 24
185.150.16.0/24 maxlen: 24
2a0e:d487:f000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51215474 (0x30d7c72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
Validity
Not Before: May 10 16:54:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=552b3ced3c32e52d02f756d76517d4841a90308f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:bd:19:07:7c:39:a4:1a:bc:4f:5f:3d:af:
ae:5a:12:ef:37:81:8c:af:55:ae:7f:17:4b:38:ed:
2e:82:2a:40:fc:03:11:0b:64:05:0f:ff:1d:7a:1c:
7e:07:d2:7d:db:09:ab:e1:24:7d:c4:fc:f8:b9:c7:
1c:ef:7b:ac:4a:16:29:10:5d:86:73:6c:8f:85:2e:
c6:e4:38:e7:35:a0:45:46:fe:0a:52:a8:79:8a:11:
9f:c8:f2:ae:4e:18:cb:c7:03:91:cb:c7:82:bf:db:
89:a6:f7:2b:6d:8d:2e:3d:db:07:4f:fa:cf:1b:5e:
32:12:12:68:1e:7c:cf:6e:06:53:39:0f:ff:0c:c8:
12:b5:3f:1c:e4:4c:c1:34:8e:1c:4a:43:d7:43:37:
84:f6:fd:db:40:bc:6e:54:ea:f5:7d:89:b1:51:56:
6e:b8:73:da:54:98:de:0f:a8:6e:c7:31:77:39:66:
f9:d0:4b:3a:34:56:6e:f2:2c:7c:10:de:f7:03:22:
d6:83:0d:74:65:b4:88:73:d5:3c:ef:ea:b6:f3:dd:
cd:63:73:64:1f:8d:4c:b4:5d:87:0b:eb:09:ae:b1:
e3:a5:02:12:67:ba:22:a7:78:90:9d:89:db:55:2a:
e0:24:e9:e6:07:0e:fd:13:4c:28:a6:bd:32:76:3e:
9e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2B:3C:ED:3C:32:E5:2D:02:F7:56:D7:65:17:D4:84:1A:90:30:8F
X509v3 Authority Key Identifier:
keyid:09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/VSs87Twy5S0C91bXZRfUhBqQMI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/CbnTdFC2KuPxROtCrFLOJDtiino.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.231.0/24
185.150.16.0/24
IPv6:
2a0e:d487:f000::/48
Signature Algorithm: sha256WithRSAEncryption
37:47:3d:e2:fa:3b:9f:5b:b6:56:3f:33:9c:ab:43:e8:8e:86:
2e:f3:0c:30:51:16:8f:ac:14:67:2d:30:99:51:be:5a:98:77:
36:2a:03:63:13:fd:87:b1:00:7c:52:c0:96:30:0a:40:13:c1:
3c:78:44:ac:18:a5:f8:40:7c:ab:9a:81:f3:0c:98:b7:d8:73:
7a:01:a6:02:2c:e6:b2:74:c5:4b:44:37:b3:fc:9c:81:65:7d:
1d:b0:63:37:ea:e5:23:56:ca:c6:48:04:41:1d:d3:74:9f:e7:
80:3e:d2:33:50:86:02:c0:af:3a:51:d4:20:62:07:94:ce:06:
7b:19:e1:89:a3:f7:5f:85:9b:22:29:6e:72:70:5b:71:70:09:
b0:04:68:5a:02:bd:95:c9:a1:c7:60:a6:90:d7:3c:94:fe:d0:
d3:e2:fc:77:3f:4a:e3:89:c5:a1:aa:bf:88:f8:7b:5f:f1:28:
35:a1:09:b4:e2:24:7f:7b:8f:55:e3:26:2d:b4:b2:88:d7:89:
a0:d2:07:bb:36:56:22:0b:85:80:a9:33:32:bd:a2:05:6c:44:
ea:f1:10:77:d1:92:d2:17:6e:0f:1f:b8:83:ac:8b:d6:03:54:
3b:66:94:4d:d4:28:fe:8e:32:80:fe:15:71:78:a1:9a:14:0e:
35:da:8d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org