Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/EKVapD8V-h5aMXamPO16yoWlptQ.roa
File: EKVapD8V-h5aMXamPO16yoWlptQ.roa (raw, json)
Hash identifier: lto8Uyt6X8Tc/Sm1unOlaDiE+wLbOsSU7+N/cS/ypN0=
Subject key identifier: 10:A5:5A:A4:3F:15:FA:1E:5A:31:76:A6:3C:ED:7A:CA:85:A5:A6:D4
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0A2C2675
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/EKVapD8V-h5aMXamPO16yoWlptQ.roa
Signing time: Tue 22 Mar 2022 15:45:26 +0000
ROA not before: Tue 22 Mar 2022 15:45:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 85.209.222.0/24 maxlen: 24
85.209.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170665589 (0xa2c2675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 22 15:45:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10a55aa43f15fa1e5a3176a63ced7aca85a5a6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:24:be:21:ab:95:0f:85:b6:cb:92:2e:8d:
cc:63:66:4e:e2:ef:54:1d:9d:3a:55:22:25:64:3c:
b0:90:94:0d:ea:f6:60:cf:48:1d:86:10:c1:01:94:
a1:f0:9f:96:cd:3b:49:c5:ae:f8:e6:c8:6c:0a:5c:
53:3a:74:47:91:fe:2b:8c:b8:8a:dd:f8:2b:32:76:
4d:c3:4f:9f:18:48:b9:7b:04:17:a5:50:05:fc:89:
bc:96:d7:ae:75:9f:28:af:22:b2:d5:d8:b9:eb:ac:
8b:07:31:bf:a7:02:11:f9:f1:ae:1d:64:3a:3d:20:
42:bc:1e:0f:ba:c3:07:bb:87:57:ca:0f:61:d1:84:
00:55:92:31:47:60:38:a9:e0:a2:10:13:f8:61:91:
8b:c4:3f:4c:ba:2d:84:6a:1d:2a:43:25:98:f5:38:
8c:1b:88:91:d0:11:0c:f7:f2:8c:c8:93:00:89:02:
87:0b:b4:af:aa:d1:86:87:2f:75:6c:36:62:9b:a5:
a9:b3:bb:2f:93:77:0d:2c:86:a6:f7:6d:0d:19:c3:
7e:4b:57:65:43:f5:fb:a7:83:ea:95:ed:77:57:70:
0a:1a:e2:94:9d:d7:2a:06:33:cf:9e:0c:41:a9:23:
08:99:df:94:8c:76:92:60:fd:ce:5c:ac:c8:82:eb:
35:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A5:5A:A4:3F:15:FA:1E:5A:31:76:A6:3C:ED:7A:CA:85:A5:A6:D4
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/EKVapD8V-h5aMXamPO16yoWlptQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.221.0-85.209.222.255
Signature Algorithm: sha256WithRSAEncryption
04:f1:7c:c4:ed:aa:dc:cc:ef:0e:90:0c:a9:63:a3:bc:59:de:
00:68:a0:52:7a:50:bb:00:c3:a7:5c:67:af:2a:a9:c3:ac:6e:
8b:1a:60:46:eb:0f:14:17:8d:46:ff:fc:e5:0f:c7:26:fd:4f:
7c:92:87:22:58:61:88:5b:4a:8b:94:c9:24:0a:f8:df:15:d4:
74:9f:3c:a0:35:ad:9f:11:93:3e:65:fc:e6:26:c8:c0:5f:36:
8a:1b:87:14:5f:2d:e1:ab:e8:d1:9f:ab:f1:b9:8f:52:50:65:
d1:36:d8:9a:d3:89:64:e5:56:c7:af:a8:94:6a:3a:95:8b:ed:
fc:49:5c:8d:64:d1:7c:72:d8:9b:7c:b3:b0:db:4b:84:35:c4:
17:b0:87:24:7e:0b:16:46:00:60:90:01:4e:6a:a3:ac:0d:d9:
bb:82:08:2c:87:44:93:df:85:dc:b5:1c:f0:ec:89:34:f7:01:
bd:ee:2d:8d:c6:e2:4e:20:98:58:e3:be:46:5e:f4:b6:8d:51:
fe:19:a8:91:7a:7b:80:2b:7c:e4:b0:dc:4a:99:b2:f2:a2:9f:
db:c0:52:01:8d:09:0c:d5:68:f3:15:e7:7c:b2:91:e1:dd:b3:
e2:f8:27:6f:f5:a3:7f:14:5a:0c:4a:9c:8c:07:5a:98:76:98:
ed:f6:5f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org