Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/6UDVH1nZ_HtwiJFu38OnQ_ouVDw.roa
File: 6UDVH1nZ_HtwiJFu38OnQ_ouVDw.roa (raw, json)
Hash identifier: DN/qCP0DDGBYiGnIiHDfsWbZl2iBm/xiYZSSBkM8Vow=
Subject key identifier: E9:40:D5:1F:59:D9:FC:7B:70:88:91:6E:DF:C3:A7:43:FA:2E:54:3C
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 01856D93EDA27A586B807DFAE83DE3A0C254
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/6UDVH1nZ_HtwiJFu38OnQ_ouVDw.roa
Signing time: Sun 01 Jan 2023 13:44:49 +0000
ROA not before: Sun 01 Jan 2023 13:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 85.255.112.0/21 maxlen: 22
176.113.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:ed:a2:7a:58:6b:80:7d:fa:e8:3d:e3:a0:c2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: Jan 1 13:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e940d51f59d9fc7b7088916edfc3a743fa2e543c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:62:99:d6:a2:fc:24:31:44:00:89:1a:43:05:
2b:2c:e4:49:5b:2c:c0:f8:af:bf:08:25:cc:f4:83:
2f:61:cf:70:14:4c:3b:66:88:0a:d6:6c:2f:b0:1c:
13:d7:00:69:85:46:1a:57:0f:2b:6c:d5:d4:f3:c4:
6d:15:a6:45:cc:8d:c3:39:c6:90:8f:01:b1:05:12:
49:c8:19:fb:41:0e:04:e2:b7:48:0b:57:39:a0:ba:
42:ca:c1:f2:c9:36:62:2d:d2:49:26:53:77:bd:62:
52:0d:ac:08:3d:29:3e:01:0a:94:88:d4:21:ae:a5:
5b:96:a2:74:e2:2c:b4:7c:98:f3:02:1e:c9:03:12:
8a:ee:bb:1c:1d:2b:2c:44:ff:3d:37:3a:9f:6f:98:
ea:43:b8:c7:2c:6d:9c:5d:c5:45:f1:bb:b1:d5:62:
b8:0f:af:ad:34:83:38:3b:78:f6:24:59:a5:db:53:
0a:c4:d2:4e:00:03:36:42:b3:64:8e:d0:1f:e3:eb:
98:7f:d5:90:28:0e:80:4f:80:32:7f:fb:96:cf:09:
f6:78:6c:be:9d:1a:93:c1:5b:a3:4a:b7:d0:4b:16:
9a:81:65:4a:71:9e:f5:4f:d2:85:92:f6:dc:14:bb:
aa:f7:fc:d2:30:61:9d:df:de:fd:f8:56:d8:b4:e8:
87:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:40:D5:1F:59:D9:FC:7B:70:88:91:6E:DF:C3:A7:43:FA:2E:54:3C
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/6UDVH1nZ_HtwiJFu38OnQ_ouVDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.112.0/21
176.113.100.0/22
Signature Algorithm: sha256WithRSAEncryption
09:93:0c:df:15:fd:fd:56:c4:81:f1:16:94:8b:2e:4d:a0:36:
3a:00:9a:58:4f:35:01:d2:b2:9e:87:8f:b6:1d:ae:2a:41:ae:
60:84:44:ac:41:33:6d:f8:6d:d1:f5:9a:ee:33:fb:92:7c:2a:
86:73:df:82:dd:d5:84:5f:e1:cb:52:66:b2:1f:1a:7a:31:0e:
4b:13:c3:a6:c2:15:02:84:9a:a0:7b:de:a7:65:bc:de:b5:f2:
7f:77:b9:69:58:0b:99:ba:cf:17:f2:35:e5:a3:da:26:71:b8:
4c:78:e8:55:03:09:08:28:70:ed:dd:c5:c2:08:ca:62:9d:d6:
6a:89:9f:94:28:d4:f6:99:51:29:0c:f4:5a:e5:98:d6:a2:90:
6c:6a:96:6a:1f:7c:c5:50:63:5b:26:61:28:7b:79:29:20:bd:
31:b8:53:93:ca:cd:c0:5d:93:fc:dd:0a:5b:9b:89:d1:af:3a:
8b:b8:03:bf:c2:99:98:ec:0a:f4:eb:29:5b:8f:a6:40:80:47:
89:16:f9:85:37:c5:a3:43:54:f3:6e:94:2f:06:0a:16:c2:72:
5c:63:70:38:1a:56:8a:76:96:4a:50:49:83:30:5c:fc:68:f1:
6e:ba:ed:7e:dc:e1:53:63:67:aa:f6:b3:c0:d4:03:78:21:14:
50:a2:01:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:45 2024 by rpki-client on console-ams.rpki-client.org