Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/BBC9NNgPOyTm2NAvIzF8McZKFLU.roa
File: BBC9NNgPOyTm2NAvIzF8McZKFLU.roa (raw, json)
Hash identifier: EzAW1mBk/E7KJRPcZllEQ+eldsfQfne2rVt4T6LVQZQ=
Subject key identifier: 04:10:BD:34:D8:0F:3B:24:E6:D8:D0:2F:23:31:7C:31:C6:4A:14:B5
Certificate issuer: /CN=5af2bf191ffd62b9f27475009c8fb3e0a14a2237
Certificate serial: 08D0A2BE
Authority key identifier: 5A:F2:BF:19:1F:FD:62:B9:F2:74:75:00:9C:8F:B3:E0:A1:4A:22:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvK_GR_9YrnydHUAnI-z4KFKIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/BBC9NNgPOyTm2NAvIzF8McZKFLU.roa
Signing time: Sat 01 Jan 2022 01:52:57 +0000
ROA not before: Sat 01 Jan 2022 01:52:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205053
IP address blocks: 185.226.64.0/24 maxlen: 24
185.226.64.0/22 maxlen: 22
185.226.66.0/24 maxlen: 24
185.226.65.0/24 maxlen: 24
185.226.67.0/24 maxlen: 24
2a0c:5e00::/64 maxlen: 64
2a0c:5e00::/32 maxlen: 32
2a0c:5e00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147890878 (0x8d0a2be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5af2bf191ffd62b9f27475009c8fb3e0a14a2237
Validity
Not Before: Jan 1 01:52:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0410bd34d80f3b24e6d8d02f23317c31c64a14b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:65:ce:73:42:a9:a7:8a:83:75:e7:86:80:
d6:58:19:f0:12:33:2a:22:61:b5:84:8a:37:c3:e1:
58:b5:0c:ec:ca:00:98:37:d6:d9:03:f3:57:c2:6b:
94:3e:56:f9:d5:09:ec:97:bf:67:91:33:9c:90:2f:
4c:49:12:b0:28:06:df:57:6e:ed:dd:99:d8:a0:f5:
c6:df:f8:66:b3:52:d9:5b:58:6d:1b:fe:99:dd:9e:
3d:5e:3f:e7:14:ad:e1:ca:be:48:80:db:12:64:75:
37:ae:c5:00:dc:89:a1:6b:b0:70:b3:ad:72:86:6a:
ef:d0:01:12:8f:db:74:6d:bd:92:e6:4d:62:05:07:
b8:27:3b:db:95:e2:ab:04:0a:a8:41:e1:87:bb:16:
87:95:06:ad:9e:0a:f5:aa:01:b0:80:48:33:87:b2:
99:d6:a0:ed:bc:96:2c:30:a7:4f:d8:5e:59:66:bf:
c0:2f:04:88:6a:46:7d:13:b8:7c:a9:8a:02:79:90:
d4:34:7e:fa:1d:8f:44:06:c2:92:49:14:c1:21:3a:
2f:1c:41:f4:b5:29:16:d1:9c:d7:a7:71:fd:7b:95:
62:01:5e:ce:f8:d6:ad:90:cc:12:d5:9d:49:e8:e1:
58:d3:31:f0:69:15:4d:b4:79:5d:f4:ee:a3:71:cd:
0a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:10:BD:34:D8:0F:3B:24:E6:D8:D0:2F:23:31:7C:31:C6:4A:14:B5
X509v3 Authority Key Identifier:
keyid:5A:F2:BF:19:1F:FD:62:B9:F2:74:75:00:9C:8F:B3:E0:A1:4A:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvK_GR_9YrnydHUAnI-z4KFKIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/BBC9NNgPOyTm2NAvIzF8McZKFLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/WvK_GR_9YrnydHUAnI-z4KFKIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.64.0/22
IPv6:
2a0c:5e00::/32
Signature Algorithm: sha256WithRSAEncryption
57:d3:fa:1b:73:93:c2:d2:34:e2:6d:52:94:4c:f3:36:cf:27:
d2:a7:fa:26:b1:09:22:d8:79:04:a1:ae:ae:41:07:10:ff:e1:
a9:f8:8e:af:0e:f4:4f:01:41:44:b8:93:01:c9:c2:f5:09:a5:
21:53:dd:f9:a7:7a:1e:63:43:7e:f7:63:3b:58:d6:43:30:89:
cf:c9:80:86:5c:a3:ee:e5:8e:44:6d:0a:a9:8e:7d:e7:dd:72:
ab:eb:8d:80:b9:f0:9a:77:43:8a:42:e0:24:5d:86:0e:3e:7f:
21:3e:7d:dc:40:af:0e:9c:42:f3:e7:7f:58:e5:d6:fd:5e:ff:
70:41:0e:c3:ce:4f:c5:88:01:27:e2:1c:48:dd:35:29:bd:75:
9a:78:f1:3c:c2:ac:c1:79:a0:96:f3:a8:d0:67:3b:8e:b4:ed:
c0:79:04:42:8a:a6:35:b0:bd:30:72:db:ee:89:71:0c:29:b7:
b5:e2:74:34:21:46:96:b3:76:45:42:1f:f1:e1:96:90:ce:c7:
ca:36:44:21:b0:fb:f3:ad:18:2c:0e:26:8d:2e:2f:14:05:79:
1c:9d:7b:20:6c:b3:52:e9:64:36:f8:8c:19:27:2e:31:ef:3a:
33:32:4d:7a:da:06:41:3a:58:a1:c8:e2:ec:0e:9c:3a:5b:ec:
9c:f8:00:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:28 2024 by rpki-client on console-fra.rpki-client.org