Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f8aba4-e1cf-4144-9bfa-a8888e58a780/1/mU8JNUVIvsKsEr10uUBRsjm6TCk.roa
File: mU8JNUVIvsKsEr10uUBRsjm6TCk.roa (raw, json)
Hash identifier: 0kJV5CQuvw3TDhlBLRW8EHSgX9x9f9oNKC5eGqKvIiA=
Subject key identifier: 99:4F:09:35:45:48:BE:C2:AC:12:BD:74:B9:40:51:B2:39:BA:4C:29
Certificate issuer: /CN=cccb42889e5ac899c12f3486bda045a90eeff779
Certificate serial: 15FF1D9F
Authority key identifier: CC:CB:42:88:9E:5A:C8:99:C1:2F:34:86:BD:A0:45:A9:0E:EF:F7:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMtCiJ5ayJnBLzSGvaBFqQ7v93k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f8aba4-e1cf-4144-9bfa-a8888e58a780/1/mU8JNUVIvsKsEr10uUBRsjm6TCk.roa
Signing time: Thu 19 May 2022 13:30:29 +0000
ROA not before: Thu 19 May 2022 13:30:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207821
IP address blocks: 185.89.38.0/24 maxlen: 24
185.89.37.0/24 maxlen: 24
185.89.36.0/24 maxlen: 24
185.89.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369040799 (0x15ff1d9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccb42889e5ac899c12f3486bda045a90eeff779
Validity
Not Before: May 19 13:30:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=994f09354548bec2ac12bd74b94051b239ba4c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:48:cd:66:f9:0a:84:26:58:51:47:97:79:a7:
19:4d:a9:9b:f5:52:42:0a:be:b2:26:33:d5:58:ae:
57:4b:4c:05:0e:83:e6:c7:43:79:ae:ff:c3:a3:b0:
d0:4a:01:a4:d0:a2:94:bf:eb:c3:cf:84:0c:ac:a7:
e0:53:89:6b:ac:4d:fe:21:fd:cf:bd:df:b7:49:fc:
45:a1:36:81:a4:a5:bb:b1:24:d8:2b:e1:37:24:d3:
33:5e:8b:7e:7f:4f:00:89:08:8a:02:5e:55:b8:1f:
45:68:89:61:8b:23:f1:60:0e:12:e0:ef:5f:50:14:
25:d0:74:32:1c:47:e6:4a:51:ae:43:f1:7f:af:91:
fa:98:4d:5e:07:b7:50:b1:56:45:b5:94:6c:c5:01:
4c:b2:20:6b:3a:b6:6f:40:95:2d:cd:b4:fc:b3:77:
2a:bc:e6:c5:f1:27:b8:10:a0:fb:0e:14:ad:2f:84:
cc:24:8c:dd:59:f1:c6:75:9b:c1:b5:81:d0:45:b3:
ca:06:d7:bd:a5:4a:10:8e:b9:d0:3b:97:00:d5:59:
f3:54:0a:00:6b:0c:19:99:43:4b:99:e0:be:9d:e0:
bd:9e:69:6e:26:30:3a:4c:d3:e9:4e:5e:27:81:d1:
6e:6c:d7:9e:02:3e:44:38:fd:af:f7:5b:41:2d:32:
90:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4F:09:35:45:48:BE:C2:AC:12:BD:74:B9:40:51:B2:39:BA:4C:29
X509v3 Authority Key Identifier:
keyid:CC:CB:42:88:9E:5A:C8:99:C1:2F:34:86:BD:A0:45:A9:0E:EF:F7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMtCiJ5ayJnBLzSGvaBFqQ7v93k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f8aba4-e1cf-4144-9bfa-a8888e58a780/1/mU8JNUVIvsKsEr10uUBRsjm6TCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f8aba4-e1cf-4144-9bfa-a8888e58a780/1/zMtCiJ5ayJnBLzSGvaBFqQ7v93k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.36.0/22
Signature Algorithm: sha256WithRSAEncryption
27:d2:ec:e7:88:06:75:d3:e0:70:dc:f2:be:c9:11:a2:4d:2c:
79:19:0e:24:b8:bf:c1:5a:1d:0b:6b:0b:db:6f:91:db:c7:7b:
e6:3c:d5:6d:70:82:cc:ce:bd:33:7d:7d:cc:8f:da:99:92:65:
eb:55:58:e0:18:bf:da:9e:f4:30:ea:ac:c9:71:5e:8b:90:94:
11:88:90:c8:19:bf:38:c8:bf:ac:aa:df:76:a5:40:14:0a:83:
b8:b0:20:03:51:72:20:d7:40:6c:41:27:a8:1b:fc:cc:b4:45:
9d:12:63:5d:37:a1:fb:eb:bb:2b:c3:b3:3a:15:01:3f:b6:93:
29:fa:aa:0f:96:20:04:77:7d:bb:32:43:81:ae:a2:b4:83:8d:
d6:70:c1:1e:c1:84:05:1a:b8:f0:7a:5c:93:50:1c:e0:ac:e8:
57:4c:b8:5a:b2:df:c1:95:43:9e:f9:e2:1a:15:e5:cc:a4:05:
f7:07:3d:37:d7:79:c8:26:bf:1e:e6:4b:73:6f:a2:42:3f:c4:
83:ba:e4:9a:bb:89:fb:77:c5:40:91:fa:92:2e:80:15:a5:66:
65:bc:97:6a:ae:b7:c6:5d:b8:90:1e:1a:5e:85:82:23:91:05:
2b:a7:4c:3c:ab:6f:ac:b8:20:1a:5b:1a:bd:70:9b:56:a7:39:
86:61:91:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:45 2024 by rpki-client on console-fra.rpki-client.org