Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/htnZsAYRybvjkdrNhLj9dcMYv9U.roa
File: htnZsAYRybvjkdrNhLj9dcMYv9U.roa (raw, json)
Hash identifier: klJlxt02iPhpRje5hKYRN2H0PCY2pk1njFhYhkqnd4Q=
Subject key identifier: 86:D9:D9:B0:06:11:C9:BB:E3:91:DA:CD:84:B8:FD:75:C3:18:BF:D5
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 097D178D
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/htnZsAYRybvjkdrNhLj9dcMYv9U.roa
Signing time: Tue 18 Jan 2022 19:38:16 +0000
ROA not before: Tue 18 Jan 2022 19:38:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 85.209.222.0/24 maxlen: 24
85.209.221.0/24 maxlen: 24
85.209.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159192973 (0x97d178d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 18 19:38:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86d9d9b00611c9bbe391dacd84b8fd75c318bfd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:f3:26:85:28:d3:52:8b:97:06:34:be:e3:
5b:98:84:e7:49:61:e2:50:30:85:2b:73:80:40:3b:
45:8d:3d:b8:7f:c3:4d:c1:22:11:d4:13:02:5d:cd:
a2:18:85:38:4e:af:f2:83:e1:e9:d0:e6:ff:db:85:
0b:d8:c7:ec:9c:7c:12:1f:37:d0:5c:40:c4:bb:a8:
f7:7c:c4:d0:13:98:75:31:c3:d0:ac:57:68:04:cd:
1b:99:c9:fe:71:1d:07:64:6b:ea:29:d9:07:0d:18:
8c:27:a4:04:58:fa:3d:b4:53:12:e5:ae:14:05:99:
6b:14:4a:33:eb:8a:57:2f:32:27:70:37:84:7d:c8:
32:40:16:85:1e:64:f4:e7:af:ef:a7:da:51:40:4b:
b5:d6:6b:a4:e1:83:9c:b5:76:73:73:1a:68:0a:13:
24:df:3c:0d:fa:16:28:72:fa:d1:05:4f:6e:be:80:
47:f2:db:71:40:04:81:56:95:4e:68:f7:7b:20:7a:
8d:f6:e3:0a:f0:54:8e:c3:42:02:c8:f2:84:df:f6:
3f:fb:ed:1b:4e:ba:da:82:b5:19:3c:f1:ba:e6:5c:
0f:ee:4f:fe:e1:c9:07:2e:c1:59:98:86:f3:83:0d:
e6:d7:e0:51:a3:3b:d3:21:3a:0d:94:37:7a:f3:80:
19:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D9:D9:B0:06:11:C9:BB:E3:91:DA:CD:84:B8:FD:75:C3:18:BF:D5
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/htnZsAYRybvjkdrNhLj9dcMYv9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.221.0-85.209.223.255
Signature Algorithm: sha256WithRSAEncryption
b6:04:b5:c3:f8:57:d5:01:53:13:55:ce:28:e5:20:2d:14:80:
b0:63:8d:94:da:b4:19:e9:3a:2c:31:f7:02:04:b6:44:26:2f:
83:04:f0:a4:13:cf:3a:76:96:82:42:2d:0f:e2:1b:94:8a:ea:
48:8c:19:62:78:dd:fb:86:81:d8:1f:69:d6:43:e8:ab:6c:c0:
2c:b1:ea:93:f5:8e:03:7d:64:e2:e8:c9:ce:5e:f0:29:e6:03:
23:7e:26:8c:51:77:9f:19:d2:4a:be:d0:66:98:4e:48:55:d1:
b3:5c:1a:f1:91:77:df:5d:75:71:aa:20:ed:2e:71:01:cf:ee:
04:73:c7:1b:61:83:ef:d1:c9:d2:45:36:10:94:43:00:f7:a7:
85:9d:70:68:8f:e5:12:d7:d5:08:f0:5d:e9:82:18:ce:6a:10:
e1:83:6c:e5:a7:ab:40:d7:37:dc:0b:11:e1:01:75:aa:b4:9b:
64:03:bc:70:33:69:5c:57:cf:35:8b:81:fd:f0:92:57:6a:e1:
b9:c6:4e:06:57:9e:6a:d6:08:96:92:cb:91:25:ad:5d:c7:ad:
99:eb:29:2f:d4:ec:71:c2:7d:6b:b2:a2:fb:ee:4d:c4:42:c2:
73:63:78:a3:8a:9b:f3:33:23:e7:7d:5a:cc:35:78:4e:c1:78:
6e:08:c3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org