Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f81e7e-a594-466d-b926-813d6a6355e6/1/k5IHZh-r3E3warP-GCKyWj2VOrk.roa
File: k5IHZh-r3E3warP-GCKyWj2VOrk.roa (raw, json)
Hash identifier: 9SLmU8V46FOFW1hTygoq98EZmm6n0amnVpsnOU9TkI8=
Subject key identifier: 93:92:07:66:1F:AB:DC:4D:F0:6A:B3:FE:18:22:B2:5A:3D:95:3A:B9
Certificate issuer: /CN=be21aeaabecaac83ba86847e1598eea838f2039c
Certificate serial: 0183C6F2D35BE15C80F79D5BE2CD61E49C42
Authority key identifier: BE:21:AE:AA:BE:CA:AC:83:BA:86:84:7E:15:98:EE:A8:38:F2:03:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viGuqr7KrIO6hoR-FZjuqDjyA5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f81e7e-a594-466d-b926-813d6a6355e6/1/k5IHZh-r3E3warP-GCKyWj2VOrk.roa
Signing time: Tue 11 Oct 2022 12:09:06 +0000
ROA not before: Tue 11 Oct 2022 12:09:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.149.80.0/22 maxlen: 24
185.253.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c6:f2:d3:5b:e1:5c:80:f7:9d:5b:e2:cd:61:e4:9c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be21aeaabecaac83ba86847e1598eea838f2039c
Validity
Not Before: Oct 11 12:09:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=939207661fabdc4df06ab3fe1822b25a3d953ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:54:d5:e7:11:fc:a2:a0:c6:ca:0f:ca:f6:
79:a8:57:8f:35:c7:cd:18:da:20:c5:6a:c8:1a:e3:
e4:13:7e:9e:a5:12:82:dd:ad:ff:03:b9:73:63:44:
b8:bf:3b:d6:f4:45:7b:77:45:2d:09:03:45:39:4e:
72:db:54:35:cb:19:4d:0d:33:a4:cf:25:c8:b2:5a:
81:80:04:04:25:66:ef:30:51:ad:ee:93:8f:2a:5d:
8f:c0:a8:4d:13:c9:7f:9f:77:9f:13:29:c9:0a:14:
44:d9:04:07:18:69:16:2c:ac:06:72:7d:3f:b6:07:
d8:2d:b2:6d:c1:62:9a:8c:78:f1:b6:7d:7a:03:40:
fa:3a:00:db:63:05:1f:f1:db:fc:e4:c4:9e:9f:06:
c8:7c:b7:3b:fe:10:c4:ee:ca:43:84:2d:f2:36:1f:
f2:b1:54:42:2f:97:13:4f:a4:9e:49:fe:70:93:fc:
0e:ca:5c:43:3a:4d:7b:a1:97:c9:65:4d:68:ae:4e:
90:26:a0:75:6a:55:b5:81:fe:c9:fa:4f:0e:32:a9:
8e:ca:5e:2d:f5:41:17:8e:7b:aa:f7:fe:85:dc:06:
af:ee:d2:74:e4:e0:3f:87:e1:03:aa:01:09:77:b8:
8f:15:4a:87:2d:cf:71:4c:47:07:31:f7:48:78:f4:
25:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:92:07:66:1F:AB:DC:4D:F0:6A:B3:FE:18:22:B2:5A:3D:95:3A:B9
X509v3 Authority Key Identifier:
keyid:BE:21:AE:AA:BE:CA:AC:83:BA:86:84:7E:15:98:EE:A8:38:F2:03:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viGuqr7KrIO6hoR-FZjuqDjyA5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f81e7e-a594-466d-b926-813d6a6355e6/1/k5IHZh-r3E3warP-GCKyWj2VOrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f81e7e-a594-466d-b926-813d6a6355e6/1/viGuqr7KrIO6hoR-FZjuqDjyA5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.80.0/22
185.253.224.0/22
Signature Algorithm: sha256WithRSAEncryption
52:e9:99:1e:a7:1c:52:6f:9a:13:08:70:87:0c:c1:9c:b6:bb:
bd:eb:aa:4c:37:a9:00:15:e1:76:f1:22:3f:ed:7a:a2:d1:39:
6f:36:6c:b1:c1:f0:fe:75:57:cb:5c:9c:2f:39:a5:3d:97:15:
ac:13:08:42:dd:b8:fc:93:2a:30:fc:a7:25:87:c7:fc:aa:4c:
10:80:f1:e6:b4:6d:ab:12:e8:5e:13:0b:3e:af:e6:f2:fc:32:
80:6b:9c:19:6c:d1:70:1f:20:ee:87:c5:dd:47:1c:e6:72:bc:
a5:af:ba:a5:fe:a3:c3:36:3d:23:55:e7:0a:6a:bd:11:c8:b7:
57:28:a5:62:be:09:bf:d5:12:68:f0:6a:a0:cf:68:7a:d2:6c:
77:38:d6:e6:96:2a:d1:ac:a7:8b:d4:40:4f:46:88:27:b9:0b:
99:fb:16:c0:e3:01:1a:9c:75:c7:19:f5:ce:59:85:04:bc:49:
41:4c:e4:c7:5b:da:de:19:b4:95:4e:27:4e:7f:bf:ca:a5:76:
5c:2c:24:b8:20:30:d6:b3:ab:c3:90:28:e8:0c:ba:40:48:92:
5f:72:53:98:96:94:d8:a2:5c:1f:6b:90:81:80:38:f8:14:58:
f0:0b:8f:a9:7c:da:44:72:e0:6c:5e:d0:c4:b0:f8:64:e8:fc:
50:09:1c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:19 2024 by rpki-client on console-fra.rpki-client.org