Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/F6D521xBCD_CHhpswKrr5cyEfPM.roa
File: F6D521xBCD_CHhpswKrr5cyEfPM.roa (raw, json)
Hash identifier: q05ZW7B2+7Tyz4kUEy1zCWM0l/kWAryMWTC67gvdm18=
Subject key identifier: 17:A0:F9:DB:5C:41:08:3F:C2:1E:1A:6C:C0:AA:EB:E5:CC:84:7C:F3
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 0181EE125E8A2B2DFA8F9EC854A39E4E9095
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/F6D521xBCD_CHhpswKrr5cyEfPM.roa
Signing time: Mon 11 Jul 2022 16:23:09 +0000
ROA not before: Mon 11 Jul 2022 16:23:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45671
IP address blocks: 85.255.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ee:12:5e:8a:2b:2d:fa:8f:9e:c8:54:a3:9e:4e:90:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: Jul 11 16:23:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17a0f9db5c41083fc21e1a6cc0aaebe5cc847cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:47:32:fe:db:20:2a:ff:c3:42:49:48:66:12:
ab:76:ba:2c:b5:3e:d9:22:78:2f:c9:ef:a4:c1:81:
37:1a:69:6c:a9:b4:c0:80:bc:b3:ed:ee:9f:00:e7:
32:34:be:90:1c:88:68:88:b9:ec:70:14:5a:ce:fe:
1c:84:36:6a:68:b8:70:62:2b:5e:06:6e:0a:9d:1d:
c1:a7:ba:05:d6:87:66:42:db:02:b4:5d:ff:d3:b2:
d6:d2:74:16:a9:85:d2:af:ac:98:61:d2:f5:dd:e5:
87:0a:b4:a2:1f:8a:21:c1:0e:ef:f0:bf:95:51:19:
5a:de:86:2f:33:c5:9c:11:7c:22:ab:93:0e:d2:b4:
01:7b:66:d4:a8:47:77:21:cc:0b:47:6e:92:83:2c:
30:11:7f:af:cc:3f:b2:c9:53:39:75:41:1b:60:69:
8d:83:a7:1b:36:6e:d3:14:20:ab:1b:24:86:c2:e2:
08:65:a4:79:8f:20:d6:45:b8:91:f2:ec:2c:eb:f6:
9f:3f:00:66:cb:c8:27:7e:0a:d3:f6:8c:7d:39:db:
0d:2b:92:93:6b:a2:fe:b9:9c:be:2d:bc:e5:11:dd:
61:82:12:ef:85:ac:08:20:71:d3:54:ef:95:ee:ed:
6f:2b:89:96:cf:fa:4a:bc:d0:ef:41:19:f9:60:86:
53:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A0:F9:DB:5C:41:08:3F:C2:1E:1A:6C:C0:AA:EB:E5:CC:84:7C:F3
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/F6D521xBCD_CHhpswKrr5cyEfPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.124.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:15:22:8e:f4:5b:88:d9:6f:95:ed:8d:e3:e3:f7:d3:6e:fb:
d5:cc:8f:ca:54:11:b2:65:ce:25:33:4f:c8:73:e2:29:98:25:
8f:6d:b9:cc:aa:bb:c7:8f:fa:2e:d8:a1:a4:a1:57:ee:37:e2:
3e:67:91:3d:fa:2f:e9:05:c0:8f:43:e1:74:8b:b3:ff:34:c5:
e1:b5:45:7b:62:15:ac:ef:5d:6f:a9:9f:42:34:e7:96:b5:6f:
d0:ef:90:46:ae:5c:09:da:84:90:07:b4:e5:ed:51:34:87:09:
e0:65:3d:b1:f1:50:f0:1e:db:8f:16:49:0e:05:80:dc:e9:5c:
dc:8e:57:32:a6:96:73:6a:63:a4:38:41:69:4a:46:b4:2e:7d:
2e:bf:73:86:c9:f5:38:f7:05:13:bd:30:07:71:f7:0d:34:c6:
08:82:e9:ac:d4:72:1c:6f:c3:a2:dc:7c:fe:63:f1:00:59:91:
6c:72:79:fe:52:a2:e6:60:25:ff:02:94:15:7a:a2:33:42:d1:
3f:12:3a:f7:1a:4d:15:be:3a:ef:87:1a:1f:3e:26:a2:b2:ea:
eb:e1:21:2a:aa:fa:f7:5f:db:cf:02:12:cb:00:af:1a:54:6a:
68:24:e9:91:a4:72:4d:80:fb:62:99:d2:68:f6:b7:09:4a:62:
41:53:71:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:52 2024 by rpki-client on console-fra.rpki-client.org