Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/48689e-58c1-4ddd-b6bb-6d5d03f59fd7/1/i8IR_V8cwswHdSVfbbOUCm9PHQI.roa
File: i8IR_V8cwswHdSVfbbOUCm9PHQI.roa (raw, json)
Hash identifier: EaSqGFdVSS9T5AY/olnnoRdMzczPdRKBRZB1wP95VqU=
Subject key identifier: 8B:C2:11:FD:5F:1C:C2:CC:07:75:25:5F:6D:B3:94:0A:6F:4F:1D:02
Certificate issuer: /CN=d30575afe58917430b3b566af3d9cbc9ced4a56b
Certificate serial: 022BC8E0
Authority key identifier: D3:05:75:AF:E5:89:17:43:0B:3B:56:6A:F3:D9:CB:C9:CE:D4:A5:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wV1r-WJF0MLO1Zq89nLyc7UpWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/48689e-58c1-4ddd-b6bb-6d5d03f59fd7/1/i8IR_V8cwswHdSVfbbOUCm9PHQI.roa
Signing time: Sat 01 Jan 2022 05:51:36 +0000
ROA not before: Sat 01 Jan 2022 05:51:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48704
IP address blocks: 185.171.221.0/24 maxlen: 24
185.171.220.0/24 maxlen: 24
185.171.223.0/24 maxlen: 24
185.171.222.0/24 maxlen: 24
2a0d:9d40::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36423904 (0x22bc8e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d30575afe58917430b3b566af3d9cbc9ced4a56b
Validity
Not Before: Jan 1 05:51:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8bc211fd5f1cc2cc0775255f6db3940a6f4f1d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:60:9f:b1:5c:65:68:6c:94:c1:72:7c:2e:75:
59:f5:f6:4c:4e:51:c6:fe:12:21:57:a4:35:de:70:
b6:8f:09:43:ea:3b:35:ef:bc:4a:bf:c0:dd:33:dd:
f9:d1:ab:b7:7e:4c:e2:84:2f:07:d4:1d:45:ac:bb:
0b:bc:f2:58:bd:52:df:a1:84:3a:0c:4f:4f:35:4f:
e8:27:59:01:94:da:bf:49:f0:8e:e7:0d:83:66:77:
57:44:7b:80:bc:ff:e4:e1:c9:10:de:2f:1b:9c:8e:
24:c7:ee:f7:5c:6d:20:c3:a3:69:51:e7:f2:4c:f9:
b0:b3:61:63:99:ec:eb:2c:bb:f2:1a:25:88:ea:7c:
ea:c4:7c:56:0f:db:44:91:f3:42:16:d1:a1:3c:25:
7a:d7:bc:f2:76:4a:7d:c1:08:07:6f:49:30:d9:95:
f2:1c:76:38:7d:3c:c5:86:97:6c:fa:bb:eb:5a:2b:
e2:4e:5e:d3:ed:e6:7f:5f:56:a8:be:13:a7:e0:d2:
c6:9b:06:c7:28:4d:87:bc:18:89:fe:f2:fb:7d:0b:
ea:32:d7:c7:e6:48:5c:7f:34:7c:04:61:b5:58:b7:
32:17:77:68:63:71:ed:1f:b1:e4:38:ca:74:09:47:
d8:1d:e3:7c:c2:fe:5b:5c:9f:a6:b7:ac:3e:ce:be:
00:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C2:11:FD:5F:1C:C2:CC:07:75:25:5F:6D:B3:94:0A:6F:4F:1D:02
X509v3 Authority Key Identifier:
keyid:D3:05:75:AF:E5:89:17:43:0B:3B:56:6A:F3:D9:CB:C9:CE:D4:A5:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wV1r-WJF0MLO1Zq89nLyc7UpWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/48689e-58c1-4ddd-b6bb-6d5d03f59fd7/1/i8IR_V8cwswHdSVfbbOUCm9PHQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/48689e-58c1-4ddd-b6bb-6d5d03f59fd7/1/0wV1r-WJF0MLO1Zq89nLyc7UpWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.220.0/22
IPv6:
2a0d:9d40::/29
Signature Algorithm: sha256WithRSAEncryption
4e:12:f2:50:6f:22:3f:59:99:45:44:e3:d2:35:d4:ea:c5:fc:
8b:d1:cc:ae:59:18:fb:2e:32:b6:f7:d4:f4:49:1a:53:20:c6:
d5:0e:99:32:b3:25:b8:6a:73:c0:77:56:52:a2:3a:29:ec:56:
84:fd:25:5d:11:ea:22:33:42:65:52:42:8a:31:61:d2:f1:43:
aa:57:1c:a6:29:d7:4c:ea:9d:31:db:b1:e8:52:39:fd:ab:8d:
d7:c8:e1:15:ff:a6:ef:ab:54:de:d9:1d:4f:45:c2:ac:4a:59:
97:6e:d5:b8:8f:c8:a3:e0:84:40:b5:a0:01:20:b9:a9:a9:46:
a8:7c:33:4b:93:11:e3:43:5d:3f:1c:8c:0c:2b:00:dc:d2:31:
06:9f:93:3d:0d:fe:f8:c6:f3:4c:69:f4:93:87:c7:d8:15:d6:
5e:30:d7:a5:f4:60:81:d9:06:cc:47:5f:b6:02:c7:08:7f:b5:
33:fc:30:9b:b4:e6:41:3d:a9:4a:ba:6e:67:1f:06:87:af:ac:
72:27:07:fe:be:7f:a9:01:c9:5f:be:74:08:44:81:ed:0c:3c:
48:42:be:54:a7:1a:3b:e3:c8:9d:de:9f:ef:18:97:24:0a:df:
1e:6c:ff:a2:c9:5d:78:ea:21:90:03:43:ca:4d:a5:81:93:3b:
a3:c6:cd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:13 2023 by rpki-client on console-fra.rpki-client.org