Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3495b4-7b60-4a83-8c68-93c444668034/1/B015Z5k7ZDrxakOq2-WfgDm9KrU.roa
File: B015Z5k7ZDrxakOq2-WfgDm9KrU.roa (raw, json)
Hash identifier: W2eQsULWwch6aBTEEQKnV65zrLIJI+I+wt0CszeZf5c=
Subject key identifier: 07:4D:79:67:99:3B:64:3A:F1:6A:43:AA:DB:E5:9F:80:39:BD:2A:B5
Certificate issuer: /CN=992be8d0a80d0665d8c6af41834665c88d6dfe76
Certificate serial: 01856E1D44A9B5FFD99A529E71A708D7C576
Authority key identifier: 99:2B:E8:D0:A8:0D:06:65:D8:C6:AF:41:83:46:65:C8:8D:6D:FE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSvo0KgNBmXYxq9Bg0ZlyI1t_nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3495b4-7b60-4a83-8c68-93c444668034/1/B015Z5k7ZDrxakOq2-WfgDm9KrU.roa
Signing time: Sun 01 Jan 2023 16:14:49 +0000
ROA not before: Sun 01 Jan 2023 16:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203448
IP address blocks: 185.134.172.0/22 maxlen: 24
2a0d:40c0::/40 maxlen: 40
2a0d:40c0:8000::/40 maxlen: 40
2a0d:40c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:1d:44:a9:b5:ff:d9:9a:52:9e:71:a7:08:d7:c5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992be8d0a80d0665d8c6af41834665c88d6dfe76
Validity
Not Before: Jan 1 16:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=074d7967993b643af16a43aadbe59f8039bd2ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:de:ce:8a:64:33:d9:9a:5d:dc:07:6a:f8:c8:
34:57:7b:5e:6c:2a:e9:ce:9a:95:40:09:5a:1a:50:
96:66:51:58:d9:9d:5e:4c:1c:b9:fd:5c:2a:c9:25:
c4:19:53:8a:c8:58:7e:06:16:51:a5:a2:eb:73:16:
a2:c1:ca:8e:22:90:bc:a4:a6:6e:65:7c:81:44:10:
04:ff:38:66:54:41:37:32:42:4c:1e:30:c1:fb:fa:
63:64:6d:23:2d:6b:64:ac:d1:72:9e:9b:f5:1f:49:
0a:10:d9:a3:0c:1a:c0:d7:19:f2:5e:41:f8:97:ab:
9d:0b:59:b9:7e:ef:4b:c2:8a:cd:05:f0:58:2a:68:
10:2d:ea:f5:54:63:b4:38:3e:83:71:67:26:19:50:
3a:63:70:8f:fe:38:9e:ae:6f:02:e4:57:54:57:6d:
ee:da:d7:0f:1f:05:ad:75:63:4f:9a:46:ee:58:db:
b5:90:8f:08:b5:38:ed:f1:21:7f:94:d9:86:2d:0b:
0d:16:24:40:50:91:33:15:79:bc:72:12:73:b4:e0:
74:9e:2f:be:b1:e9:bc:63:8f:7c:8d:74:a8:b0:08:
b8:f4:dd:4e:58:4c:fd:b8:23:18:8b:5e:4e:1f:2c:
fd:d9:d9:1d:ad:89:a2:ac:06:20:f2:ef:7a:77:45:
19:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4D:79:67:99:3B:64:3A:F1:6A:43:AA:DB:E5:9F:80:39:BD:2A:B5
X509v3 Authority Key Identifier:
keyid:99:2B:E8:D0:A8:0D:06:65:D8:C6:AF:41:83:46:65:C8:8D:6D:FE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSvo0KgNBmXYxq9Bg0ZlyI1t_nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3495b4-7b60-4a83-8c68-93c444668034/1/B015Z5k7ZDrxakOq2-WfgDm9KrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3495b4-7b60-4a83-8c68-93c444668034/1/mSvo0KgNBmXYxq9Bg0ZlyI1t_nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.172.0/22
IPv6:
2a0d:40c0::/32
Signature Algorithm: sha256WithRSAEncryption
48:69:c6:b3:65:2f:de:ed:1b:69:77:c3:1d:8b:50:40:64:7b:
f8:1f:dc:82:29:a2:a7:15:92:13:74:6d:ba:ed:8c:94:67:54:
a3:0a:5e:d8:6f:06:72:be:0d:c7:c3:7c:2d:51:69:d8:db:f8:
4d:e9:a6:57:44:5a:04:1a:ec:c3:dd:81:65:2c:3a:35:30:47:
fd:d2:68:49:79:03:95:c4:2c:1c:dc:89:14:fe:ee:07:7e:57:
16:bb:9a:4b:af:e6:d5:ab:c6:d8:9d:0e:52:c3:83:e2:5a:97:
ae:4a:b1:f7:c6:31:57:83:d7:8e:7d:bf:9c:c1:61:82:d7:33:
c1:01:0c:6f:e4:3d:b8:1a:3b:27:89:c9:82:6d:b7:73:97:86:
66:90:7d:29:9b:32:f0:6d:01:53:d5:03:c5:17:18:a8:1c:1a:
c3:96:cd:33:be:b5:f3:11:ed:46:62:2c:68:62:11:03:be:b1:
7a:3e:5f:33:75:9c:99:7b:f2:86:3f:fd:0d:0d:49:55:df:a6:
9e:7a:0f:a2:a1:55:4e:24:d2:04:38:ea:ab:e8:01:05:4e:0a:
21:2e:70:57:59:ea:65:7e:91:75:01:d6:1f:b1:ee:49:ca:9d:
6e:50:6a:45:42:3d:57:b6:f8:a5:9d:cf:e2:23:b0:43:b3:86:
04:88:5c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:29 2024 by rpki-client on console-fra.rpki-client.org