Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/_6V-wlEPNAz8BNrhDlNCcvjcXdo.roa
File: _6V-wlEPNAz8BNrhDlNCcvjcXdo.roa (raw, json)
Hash identifier: OEp2GP3L3AaMFmckK2DAE+4lAXG1T0QJEIu5FMOCQQU=
Subject key identifier: FF:A5:7E:C2:51:0F:34:0C:FC:04:DA:E1:0E:53:42:72:F8:DC:5D:DA
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 0184629558EABD21528607CB71E613061CB5
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/_6V-wlEPNAz8BNrhDlNCcvjcXdo.roa
Signing time: Thu 10 Nov 2022 17:27:45 +0000
ROA not before: Thu 10 Nov 2022 17:27:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 85.255.112.0/21 maxlen: 22
176.113.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:62:95:58:ea:bd:21:52:86:07:cb:71:e6:13:06:1c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: Nov 10 17:27:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffa57ec2510f340cfc04dae10e534272f8dc5dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8d:d2:56:ac:0d:a6:d5:f9:78:fb:c9:6e:01:
41:35:63:b4:39:0f:86:3e:e1:f3:18:f5:c6:ab:68:
b8:11:b1:15:50:33:4e:d8:9e:ed:ee:1d:a1:da:e6:
d5:9f:01:4e:5c:0d:30:bd:2a:49:b1:fc:a5:0f:3c:
2d:cf:0a:22:40:fd:0e:0a:2c:c2:a6:81:01:ec:79:
2a:2d:53:74:e9:7c:04:b2:40:de:6d:9f:fe:f9:d0:
51:ba:60:d3:16:b9:78:90:98:53:7c:fd:9d:46:3d:
77:9c:f2:1a:5b:96:86:dd:76:bf:24:63:c0:47:92:
cd:9a:38:9e:d8:ef:34:e4:a9:3a:e6:01:69:e9:c6:
f8:cf:84:89:7b:8e:ef:b8:be:51:56:06:84:3c:d4:
f7:a1:75:82:9d:9f:2e:f5:59:d2:18:b7:2c:44:9d:
b0:7a:4d:69:f4:8d:12:68:ca:b8:25:81:eb:a9:50:
d3:91:da:22:97:c9:35:c2:ea:50:76:c1:ea:a1:25:
68:91:be:f4:87:e3:26:88:30:94:b9:b5:bf:e7:e8:
dc:cf:11:8e:f8:3e:a3:5c:82:d6:6f:02:1b:45:7c:
aa:04:b9:7f:a3:45:5f:a4:20:a6:8c:f9:8c:f3:e5:
6c:38:e6:45:f4:07:8b:0a:95:b8:ca:9e:35:75:77:
98:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A5:7E:C2:51:0F:34:0C:FC:04:DA:E1:0E:53:42:72:F8:DC:5D:DA
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/_6V-wlEPNAz8BNrhDlNCcvjcXdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.112.0/21
176.113.100.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:e6:eb:7c:d4:82:c8:6a:86:da:6e:5e:cd:bc:fa:94:65:94:
77:1d:33:31:92:af:cb:aa:b4:99:17:8c:71:ae:db:ec:63:e3:
cd:0b:d0:44:4f:18:6d:60:c9:e2:32:61:63:ee:1f:86:6e:a6:
7d:25:9f:33:28:24:bc:65:26:d6:02:e6:5a:d3:62:e5:03:72:
f1:48:fb:14:86:14:03:c8:97:18:a6:6b:12:84:79:81:26:ce:
ca:14:b4:2a:bb:6d:a4:46:a8:aa:9b:a9:f3:f9:f6:cf:47:8f:
4d:d7:1e:6f:a5:09:09:71:04:de:f8:72:0a:25:ba:07:fa:7c:
9e:48:2c:80:0a:c8:29:80:6d:c5:36:b2:a2:c2:cb:b1:9d:63:
b2:dc:0e:a3:f4:24:75:8b:ca:44:4e:87:b5:1e:e6:58:7d:4f:
d9:d7:89:e7:fb:52:26:8b:59:b9:46:c8:fa:78:8b:b6:7e:08:
38:68:ef:72:4c:c2:d6:22:37:b7:06:62:b8:7b:2f:31:56:9e:
15:0c:94:8a:85:27:6a:6c:ce:5c:30:d8:41:ed:fb:1c:7b:33:
01:92:ee:71:68:ba:3a:30:5d:d9:5e:28:a2:9b:c3:20:8d:a0:
72:01:7c:05:ee:f9:be:42:c6:78:99:e1:9a:74:ef:f5:b8:72:
6a:c4:f4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:52 2024 by rpki-client on console-fra.rpki-client.org