Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/fJMxjK8cQjFsatm0dz_0PJwgsto.roa
File: fJMxjK8cQjFsatm0dz_0PJwgsto.roa (raw, json)
Hash identifier: 43FcoHw1b/8La5rDdDoi2kMwMi4zCWM49y5yknkIuWw=
Subject key identifier: 7C:93:31:8C:AF:1C:42:31:6C:6A:D9:B4:77:3F:F4:3C:9C:20:B2:DA
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 03D9FD4E
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/fJMxjK8cQjFsatm0dz_0PJwgsto.roa
Signing time: Wed 20 Apr 2022 09:08:19 +0000
ROA not before: Wed 20 Apr 2022 09:08:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 85.255.120.0/21 maxlen: 21
176.118.80.0/21 maxlen: 21
178.212.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64617806 (0x3d9fd4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: Apr 20 09:08:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c93318caf1c42316c6ad9b4773ff43c9c20b2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:ad:35:c3:a5:4f:1f:40:62:f4:e5:e3:c5:
12:58:c2:9c:bf:01:7d:44:71:39:0d:48:c2:a8:54:
52:76:d5:4b:18:79:33:ec:42:c3:7d:e1:c5:d8:06:
5c:4c:40:ea:4a:6c:72:e1:d4:88:c5:07:ca:81:c0:
a7:ee:a9:31:17:3d:84:e5:58:f1:48:cd:35:47:a6:
f2:a0:6c:6f:77:63:9d:58:c9:a8:81:0f:5e:74:c2:
fb:5d:73:8c:d9:3f:a4:91:58:96:60:a6:d6:4e:54:
24:aa:c1:4f:9c:bc:76:90:91:14:31:04:39:be:f7:
69:29:a1:fb:15:ac:7e:c4:fd:3e:c0:24:0e:41:78:
b8:be:08:3d:54:ba:fe:b2:1e:2e:06:e5:29:62:20:
7d:32:68:25:8c:cc:64:49:5c:82:65:ba:ee:fd:b6:
e8:df:6f:27:f7:90:ca:f6:95:d2:b0:90:d0:8e:dd:
20:f7:59:9d:a0:89:c6:25:95:ce:d2:7f:34:2a:d5:
bf:3c:06:1e:c7:b2:b6:83:9d:27:ff:28:1b:0b:a4:
ae:a5:4b:83:eb:b4:4d:2e:98:b2:fa:19:30:1c:0a:
1f:bc:61:14:01:ed:c8:f0:81:f0:fc:f6:17:e0:5e:
b2:79:d9:0a:fc:dd:0e:a0:0f:e6:94:51:33:b8:02:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:93:31:8C:AF:1C:42:31:6C:6A:D9:B4:77:3F:F4:3C:9C:20:B2:DA
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/fJMxjK8cQjFsatm0dz_0PJwgsto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.120.0/21
176.118.80.0/21
178.212.204.0/23
Signature Algorithm: sha256WithRSAEncryption
70:61:ab:d5:7b:6a:28:15:5e:2d:7d:11:e6:ef:94:32:35:ac:
1b:e3:52:2e:b2:b5:90:58:9b:ac:38:ce:f8:24:03:58:36:8c:
66:1e:ab:0c:61:e1:02:73:04:70:53:03:63:83:bb:ac:bd:c1:
1b:1b:9f:ad:24:ab:33:be:06:6e:20:23:a7:fe:8e:cc:f3:f3:
ed:e9:66:f4:17:08:cb:d6:57:6d:12:db:81:be:c8:36:a5:ef:
76:6c:51:85:f2:21:b8:fb:ce:26:4a:50:94:a3:20:f3:43:fb:
ab:e1:72:3e:f2:e5:90:51:20:95:89:97:69:28:f0:b8:c9:d5:
b7:f1:56:1e:76:e1:13:76:be:18:65:7b:a6:93:72:4e:ca:3c:
ee:ed:99:1e:4b:27:35:7f:28:87:0e:02:25:82:16:52:6b:3d:
f5:18:45:0d:85:ca:6d:4b:42:b4:1b:13:81:a8:b0:cb:b4:a9:
08:df:2e:f8:72:b4:87:b2:f1:53:d8:1c:09:e8:d4:89:4b:c7:
92:89:e1:ba:23:50:78:4f:61:18:1f:7d:4f:d7:ae:13:ab:6c:
ac:1b:c3:22:e0:92:97:a5:41:df:93:e2:91:50:4f:6d:56:eb:
f0:95:54:15:dc:5b:4c:96:25:a0:d9:bc:e2:f7:ff:8f:cb:fa:
d3:10:c7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:52 2024 by rpki-client on console-fra.rpki-client.org