Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/isGVdBhF5AZX7hftgEmlAsXFBv4.roa
File: isGVdBhF5AZX7hftgEmlAsXFBv4.roa (raw, json)
Hash identifier: /x49UYDdw2Fb3y7a+zOa24D0+Fo0HHa+IHcR35W7VwM=
Subject key identifier: 8A:C1:95:74:18:45:E4:06:57:EE:17:ED:80:49:A5:02:C5:C5:06:FE
Certificate issuer: /CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
Certificate serial: 01E8C200
Authority key identifier: 09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/isGVdBhF5AZX7hftgEmlAsXFBv4.roa
Signing time: Sat 01 Jan 2022 08:00:41 +0000
ROA not before: Sat 01 Jan 2022 08:00:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.150.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32031232 (0x1e8c200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
Validity
Not Before: Jan 1 08:00:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ac195741845e40657ee17ed8049a502c5c506fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:58:c4:57:a6:10:f3:43:2a:74:5b:93:a6:
a7:a2:06:9a:2a:c9:e1:10:bf:3a:d2:fe:0a:96:b9:
7a:01:0b:09:c0:19:3b:c9:36:8e:14:94:3b:f9:cc:
a4:ba:f1:dc:9a:34:94:d6:e4:30:31:59:2a:51:37:
c5:a0:c0:25:d9:a3:1e:2c:79:1d:d9:0f:82:dc:39:
8e:a1:3a:53:bb:f8:38:cd:0e:6e:92:c0:b4:ab:8f:
69:9f:a2:ef:52:92:72:d6:ac:fd:9e:b0:43:3b:02:
da:38:dc:c0:64:45:79:7b:24:54:ec:0e:e8:41:3f:
01:d9:29:1d:d7:0a:e4:e3:c5:f5:89:76:dd:1d:73:
0d:36:e2:5e:23:98:b6:15:40:b6:1c:37:e1:47:47:
9f:3f:85:22:20:47:9b:6d:aa:23:78:ba:d3:b4:dd:
f8:7e:17:60:56:fa:94:a1:d1:ce:29:50:f0:ab:f5:
7d:8c:3c:21:1a:f3:31:73:14:af:c2:db:12:0d:e2:
9f:49:fa:ea:9f:05:d8:74:95:67:73:9d:79:7e:16:
53:97:5f:9f:24:11:19:a7:58:6b:e1:73:a9:b5:ef:
b9:62:3a:b8:a3:40:55:72:40:01:de:e0:1b:56:12:
85:5b:c4:7e:68:36:4f:c1:e9:9b:0e:10:77:08:9c:
cb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C1:95:74:18:45:E4:06:57:EE:17:ED:80:49:A5:02:C5:C5:06:FE
X509v3 Authority Key Identifier:
keyid:09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/isGVdBhF5AZX7hftgEmlAsXFBv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/CbnTdFC2KuPxROtCrFLOJDtiino.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.19.0/24
Signature Algorithm: sha256WithRSAEncryption
34:4f:c1:f1:92:0b:c7:ff:1c:cd:01:87:77:2c:cf:37:6b:4d:
82:f2:ec:9c:bd:e1:7b:4c:43:5a:c8:65:cc:ea:1e:73:de:f6:
f6:4a:a3:b4:9a:ff:6f:78:9e:65:a4:a4:d2:23:e6:5f:d2:7c:
0f:60:a4:21:54:9e:8c:e6:8c:f9:2d:c9:11:40:3a:cd:44:09:
f2:29:34:80:2e:b3:f2:e5:00:93:42:02:c7:0d:b1:d5:28:e2:
c1:02:1e:aa:8c:0a:71:5f:0a:0b:73:ea:1c:f3:9f:25:36:aa:
c2:f5:c5:fd:40:34:3d:68:a5:17:28:f4:57:d2:35:8a:e8:e1:
a1:e7:02:4a:9d:c3:61:1c:50:5f:89:5d:5c:e3:7d:e2:db:c3:
28:91:e1:c5:c8:64:da:c3:10:78:dd:14:29:e6:43:a9:1b:9a:
08:d3:b5:99:b3:42:cf:eb:00:65:03:1c:2c:5d:c3:3a:ab:1f:
be:93:26:72:60:ac:13:8c:37:23:b4:f8:aa:70:80:b0:9c:57:
ca:19:72:b7:55:96:9d:d4:5a:dd:82:42:6e:4f:c7:dc:89:9f:
5d:e0:00:aa:22:34:7b:ba:74:fe:ea:f3:b5:4f:ad:10:bc:69:
e1:f3:a8:13:57:31:d3:47:29:aa:a6:ad:14:3e:da:72:cd:e4:
83:93:3d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org