Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/IKERqUNLYgnJalWPKcNUqPpgK70.roa
File: IKERqUNLYgnJalWPKcNUqPpgK70.roa (raw, json)
Hash identifier: B7EIo4AqPaGcdq71dXIolntVwLwKrJjgfMenYNsxdP8=
Subject key identifier: 20:A1:11:A9:43:4B:62:09:C9:6A:55:8F:29:C3:54:A8:FA:60:2B:BD
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 0386C54A
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/IKERqUNLYgnJalWPKcNUqPpgK70.roa
Signing time: Thu 17 Mar 2022 16:38:07 +0000
ROA not before: Thu 17 Mar 2022 16:38:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 85.255.120.0/21 maxlen: 21
176.118.80.0/21 maxlen: 21
176.113.100.0/22 maxlen: 22
178.212.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59163978 (0x386c54a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: Mar 17 16:38:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20a111a9434b6209c96a558f29c354a8fa602bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:70:ed:6b:6c:a9:7e:df:0c:0e:29:6f:09:a1:
5b:02:52:81:81:0c:16:8d:ba:19:bf:32:f1:57:bf:
f0:a1:f3:62:09:ba:30:ee:2a:28:81:38:86:20:8a:
23:f3:34:ec:ac:42:6b:e7:e2:0a:5a:ef:dd:47:46:
93:d5:f4:aa:01:ce:fd:ee:23:a8:22:05:db:7c:d6:
34:bf:4f:24:7f:54:0d:f0:f4:63:2e:40:42:f9:10:
0c:58:02:79:b6:e4:0b:68:08:cc:36:fb:d8:84:31:
d7:b2:13:67:dc:d0:71:eb:79:2a:8b:b8:09:1a:1e:
3d:1f:73:65:da:a7:aa:76:39:d2:d8:5d:64:44:bc:
ef:e3:68:8d:f3:10:da:c7:5d:74:20:11:e8:9b:f6:
ff:83:50:a0:1e:f3:08:f3:37:01:7c:76:96:65:58:
1f:13:b9:6e:a7:dd:4b:2c:7c:ae:bc:9b:1b:fd:aa:
bd:c3:1f:7f:48:a9:2a:29:5b:f0:fe:b9:8a:aa:f0:
44:02:20:48:b9:17:3e:5d:2d:58:d0:49:4b:05:5c:
f5:29:00:e9:40:b1:d8:b8:4e:c9:e5:05:ff:56:1e:
b4:66:d9:5d:46:c9:68:1d:19:26:ca:33:e0:8a:a1:
98:44:ba:3a:aa:57:c3:b1:4e:ef:55:bb:85:52:88:
f6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A1:11:A9:43:4B:62:09:C9:6A:55:8F:29:C3:54:A8:FA:60:2B:BD
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/IKERqUNLYgnJalWPKcNUqPpgK70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.120.0/21
176.113.100.0/22
176.118.80.0/21
178.212.204.0/23
Signature Algorithm: sha256WithRSAEncryption
79:ae:09:03:02:ab:48:76:7d:e6:10:ac:49:c8:3f:2c:6a:eb:
7f:20:31:a7:17:76:a3:b9:75:45:1d:ca:1e:93:16:34:e7:e8:
47:3b:ca:28:31:e1:02:61:a5:8f:d6:c8:98:ed:9b:d2:fb:1e:
8c:d0:4d:d9:b5:66:19:e9:b4:30:e3:fd:51:d1:5c:0e:26:02:
e1:80:70:64:d5:99:fe:c7:55:33:38:47:c8:2a:56:26:bc:2f:
99:e3:4d:21:58:4a:ff:62:74:5c:86:2e:5f:87:5d:1f:02:95:
46:6a:53:46:62:5d:b8:a9:e8:57:d8:c0:e6:d2:ab:37:ec:71:
49:2c:9c:b6:ac:5f:45:20:e6:b9:8e:f8:10:14:4a:84:20:c3:
38:e6:f9:ac:0f:54:ba:5b:ea:43:0c:38:8b:bf:0b:70:6e:1f:
d3:a9:d7:99:11:f5:83:05:ab:25:b7:af:5b:22:fc:f2:49:c0:
d2:fd:ad:c2:1f:ca:df:d7:52:e0:85:18:d8:ae:03:32:ed:b2:
e4:da:8d:b9:20:08:a4:4f:62:60:03:cf:36:24:7b:5a:ec:af:
1c:51:f9:30:3a:1b:8a:d1:e2:84:69:f3:50:9b:b3:12:00:3f:
27:3e:06:3b:b1:5d:6f:6c:f6:81:2b:d9:bb:93:b5:00:5a:7a:
f8:c1:5f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:52 2024 by rpki-client on console-fra.rpki-client.org