Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/82Dmza5k1H0AD3RKGP5sJLdCNXo.roa
File: 82Dmza5k1H0AD3RKGP5sJLdCNXo.roa (raw, json)
Hash identifier: LqFbvXNL+XxLnQ56c7fIE7GLWjdFuKkQJ84xbgWIRqA=
Subject key identifier: F3:60:E6:CD:AE:64:D4:7D:00:0F:74:4A:18:FE:6C:24:B7:42:35:7A
Certificate issuer: /CN=a663abd479cbff76082304bf60d03adc3187d936
Certificate serial: 0F3C2658
Authority key identifier: A6:63:AB:D4:79:CB:FF:76:08:23:04:BF:60:D0:3A:DC:31:87:D9:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmOr1HnL_3YIIwS_YNA63DGH2TY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/82Dmza5k1H0AD3RKGP5sJLdCNXo.roa
Signing time: Sat 01 Jan 2022 11:03:47 +0000
ROA not before: Sat 01 Jan 2022 11:03:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 53889
IP address blocks: 185.198.91.0/24 maxlen: 24
185.198.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255600216 (0xf3c2658)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a663abd479cbff76082304bf60d03adc3187d936
Validity
Not Before: Jan 1 11:03:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f360e6cdae64d47d000f744a18fe6c24b742357a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:08:36:75:a9:a4:fa:ca:5f:34:26:99:64:88:
a4:f6:9e:7b:6c:20:af:b7:8c:f9:bf:10:ad:4d:39:
6c:df:de:97:eb:85:63:c8:98:9a:d8:94:fb:06:ee:
77:2b:25:ed:f7:03:9a:1b:c6:b6:06:74:67:b1:20:
4f:66:50:0c:28:6d:1a:97:1a:d3:14:9c:23:62:0a:
7d:e6:eb:ee:31:a8:a1:e9:68:a1:63:cc:2a:53:d3:
32:f4:47:be:7a:9b:ba:6e:8c:74:c8:68:6e:24:1f:
ff:28:64:93:5e:e2:4f:42:4b:4a:23:84:32:64:fd:
bb:78:63:f6:0c:c2:78:92:fb:52:11:f5:e8:d1:1d:
9f:47:e6:1d:05:15:a8:10:ce:d1:f7:6a:1a:39:ea:
85:45:11:cd:19:6b:2e:16:70:54:71:c9:f7:ce:3b:
88:11:96:99:2d:b1:c4:aa:f3:0c:20:dc:4f:15:c9:
e2:65:8d:59:a8:a4:1a:1c:b1:69:6a:ff:4b:da:aa:
38:1b:52:13:ad:56:64:58:62:e4:da:bb:cc:63:e5:
b1:da:11:ca:ff:8a:be:60:32:ef:c4:29:79:32:81:
30:46:7e:e1:e7:29:07:4b:ec:a1:25:37:12:15:de:
da:53:c1:43:08:d6:3f:e3:54:7a:8b:55:23:8d:4c:
a3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:60:E6:CD:AE:64:D4:7D:00:0F:74:4A:18:FE:6C:24:B7:42:35:7A
X509v3 Authority Key Identifier:
keyid:A6:63:AB:D4:79:CB:FF:76:08:23:04:BF:60:D0:3A:DC:31:87:D9:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmOr1HnL_3YIIwS_YNA63DGH2TY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/82Dmza5k1H0AD3RKGP5sJLdCNXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/pmOr1HnL_3YIIwS_YNA63DGH2TY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.89.0/24
185.198.91.0/24
Signature Algorithm: sha256WithRSAEncryption
58:d3:f2:9c:fc:c1:f1:26:7b:40:14:ab:a8:bf:bf:ab:3a:f8:
2d:cc:4a:53:ea:8a:98:9b:9e:53:2e:60:d7:ac:00:15:05:17:
ba:4b:fa:58:ab:99:08:8a:44:50:51:02:42:e0:f5:0d:6e:1e:
9e:9b:4e:55:7e:03:8b:74:1e:9e:7e:f6:03:87:33:30:c2:fa:
f0:41:c6:3e:1d:ee:46:d0:8c:9c:cd:33:b1:84:88:66:41:53:
5f:f9:6d:a3:c3:11:74:cf:27:60:06:95:c0:e3:bd:dd:91:f1:
1c:6e:1b:de:9d:3d:3d:62:b4:fa:46:b5:ce:ce:de:1c:a2:4a:
cd:63:9c:b9:5f:3a:6f:36:84:6c:36:92:81:61:55:71:5d:58:
25:a6:d6:bb:b0:c9:aa:f6:71:5a:bb:ed:35:d1:ac:7e:be:4a:
d6:3e:c4:c3:eb:fd:98:a4:d1:9d:8a:fe:61:08:f7:6a:ba:cc:
42:51:a7:50:91:97:04:ab:72:87:e9:9d:f2:13:72:be:64:c7:
fe:3c:d4:77:1b:88:c0:b4:47:01:26:85:66:d7:59:86:36:13:
6f:71:90:d4:ce:cd:01:a4:98:7b:78:c2:96:6c:f4:8b:4e:ef:
d7:78:04:5b:ad:0c:a6:c0:fa:06:d7:b3:e3:c9:98:2a:7f:fb:
8e:d3:46:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:48 2024 by rpki-client on console-fra.rpki-client.org