Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3495b4-7b60-4a83-8c68-93c444668034/1/OaPl-OlWMFdnQ8Rk2kCuMTli2ao.roa
File: OaPl-OlWMFdnQ8Rk2kCuMTli2ao.roa (raw, json)
Hash identifier: RgrqECCDcJKfJOD3wvmjwfNLXhogfUKOW3M5p8gOXvM=
Subject key identifier: 39:A3:E5:F8:E9:56:30:57:67:43:C4:64:DA:40:AE:31:39:62:D9:AA
Certificate issuer: /CN=992be8d0a80d0665d8c6af41834665c88d6dfe76
Certificate serial: 047B914F
Authority key identifier: 99:2B:E8:D0:A8:0D:06:65:D8:C6:AF:41:83:46:65:C8:8D:6D:FE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSvo0KgNBmXYxq9Bg0ZlyI1t_nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3495b4-7b60-4a83-8c68-93c444668034/1/OaPl-OlWMFdnQ8Rk2kCuMTli2ao.roa
Signing time: Sat 01 Jan 2022 11:03:27 +0000
ROA not before: Sat 01 Jan 2022 11:03:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203448
IP address blocks: 185.134.172.0/22 maxlen: 24
2a0d:40c0::/40 maxlen: 40
2a0d:40c0:8000::/40 maxlen: 40
2a0d:40c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75206991 (0x47b914f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992be8d0a80d0665d8c6af41834665c88d6dfe76
Validity
Not Before: Jan 1 11:03:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39a3e5f8e95630576743c464da40ae313962d9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fb:48:35:58:8b:47:f2:d8:21:47:8d:11:97:
11:73:cd:92:db:16:05:6d:c5:08:34:35:93:3a:f3:
e0:4e:0d:90:e1:31:e0:96:16:22:f4:dc:39:0b:bf:
c2:f7:52:59:95:87:0a:ee:ee:d8:52:3e:28:64:b0:
6f:d3:72:56:29:f0:c7:5a:dc:52:13:19:ba:22:9d:
23:0b:99:0f:d2:3d:8d:3c:80:d6:99:11:b3:a3:da:
54:bc:fa:9f:69:87:cc:48:b4:72:0c:c7:c9:e0:18:
e6:82:2a:13:59:7f:31:d8:62:ab:c0:75:15:3a:1e:
f5:09:21:8d:39:71:a5:57:b9:43:9b:18:8b:d2:7d:
69:a7:84:e3:ee:3b:e9:cb:32:89:47:06:d6:8a:f5:
de:ac:0e:71:1c:9d:b3:c9:43:d1:a4:13:29:80:14:
ae:56:af:de:e0:94:60:28:35:21:b0:77:59:82:4a:
ba:5c:4b:1f:aa:da:9e:18:16:21:36:68:9c:f3:7e:
b2:71:0a:a8:a6:19:aa:8f:a7:68:1b:e2:75:6f:08:
f6:a0:a0:51:fc:a0:75:cd:92:12:7b:8d:6d:b1:9a:
74:59:5e:5e:bd:cf:cb:9c:fc:a5:f6:cc:19:8f:6d:
5b:0d:a1:f6:ac:9b:f8:9c:46:5b:dd:90:a8:fb:2d:
88:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A3:E5:F8:E9:56:30:57:67:43:C4:64:DA:40:AE:31:39:62:D9:AA
X509v3 Authority Key Identifier:
keyid:99:2B:E8:D0:A8:0D:06:65:D8:C6:AF:41:83:46:65:C8:8D:6D:FE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSvo0KgNBmXYxq9Bg0ZlyI1t_nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3495b4-7b60-4a83-8c68-93c444668034/1/OaPl-OlWMFdnQ8Rk2kCuMTli2ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3495b4-7b60-4a83-8c68-93c444668034/1/mSvo0KgNBmXYxq9Bg0ZlyI1t_nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.172.0/22
IPv6:
2a0d:40c0::/32
Signature Algorithm: sha256WithRSAEncryption
2d:f7:08:9c:b3:f1:e3:79:71:d0:bd:d8:ff:e0:b5:a1:9a:f2:
0f:80:06:1e:15:9a:f2:c4:21:ef:1c:64:04:95:bd:36:1a:34:
fb:6a:1d:43:ef:50:03:2f:bd:da:db:b0:90:44:ae:90:17:44:
15:83:89:ae:3b:0f:34:0a:ed:6f:4f:db:6b:05:3c:cd:29:fa:
86:d8:e8:a9:62:1b:88:53:fe:d6:0a:cd:60:b1:20:4a:5f:20:
0e:da:4f:43:ff:f2:d8:e0:37:5c:6d:8a:8c:fc:f7:01:37:1d:
15:66:98:b5:de:9b:de:a8:26:1c:d9:5b:a1:17:95:00:c8:4d:
4f:90:65:8b:44:20:aa:b1:21:ac:66:1c:64:42:83:1c:90:d5:
2c:0d:00:a4:dc:3a:cc:0b:63:e3:4f:a5:21:2a:74:b4:cf:2c:
86:fb:53:64:da:e5:67:22:ba:90:02:9d:13:12:33:5a:9d:77:
ee:55:7b:b1:18:1d:74:b9:56:d2:12:58:84:07:c8:ae:14:42:
58:d7:6b:3b:43:e6:02:b6:68:9f:51:50:8d:fa:e2:b3:4f:30:
bf:ac:0a:08:40:6c:5d:09:99:60:5a:a9:f0:88:25:fd:83:17:
85:0b:71:e9:e9:d4:f6:1b:08:28:f2:cc:10:d6:df:d9:1e:95:
8d:86:89:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:29 2024 by rpki-client on console-fra.rpki-client.org