Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/081be5-22fa-4b0b-af5d-0bedb52856b8/1/ACjaHhACd-2MyUs0d790UOf3FDE.roa
File: ACjaHhACd-2MyUs0d790UOf3FDE.roa (raw, json)
Hash identifier: 60Zbvi8JkYuqVXbudDvv3d3A5hWuWt02/oU7OkzzjMg=
Subject key identifier: 00:28:DA:1E:10:02:77:ED:8C:C9:4B:34:77:BF:74:50:E7:F7:14:31
Certificate issuer: /CN=65da12eedf7cd0e0a6afb72786c4c852e0205245
Certificate serial: 03BADFC4
Authority key identifier: 65:DA:12:EE:DF:7C:D0:E0:A6:AF:B7:27:86:C4:C8:52:E0:20:52:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdoS7t980OCmr7cnhsTIUuAgUkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/081be5-22fa-4b0b-af5d-0bedb52856b8/1/ACjaHhACd-2MyUs0d790UOf3FDE.roa
Signing time: Sat 01 Jan 2022 04:02:07 +0000
ROA not before: Sat 01 Jan 2022 04:02:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30742
IP address blocks: 185.139.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62578628 (0x3badfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65da12eedf7cd0e0a6afb72786c4c852e0205245
Validity
Not Before: Jan 1 04:02:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0028da1e100277ed8cc94b3477bf7450e7f71431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:fd:d5:f8:89:ac:26:75:d4:6d:1b:09:7a:
0e:25:fb:02:94:24:7b:1f:03:73:00:cc:ce:e3:8a:
82:ea:fd:dd:0e:d9:1e:07:86:2d:34:6f:47:6b:44:
5d:5f:22:6a:c9:4d:c7:75:34:02:94:19:46:2a:4e:
78:29:ec:b3:c7:56:01:a2:d2:c2:7e:b5:ba:2d:65:
db:ac:3d:02:50:05:86:bc:d3:81:fa:bb:c4:2e:e0:
9b:75:22:b4:cb:b0:94:d0:a3:f8:70:19:63:38:de:
48:02:ce:b0:f5:66:98:c0:92:a0:b0:a2:7c:5b:4a:
48:1a:38:f6:b6:54:f8:e2:75:c7:56:a4:38:0e:46:
ef:4e:f7:2f:76:67:4f:bb:97:99:67:10:9a:f1:ed:
6a:8b:ef:24:a4:f9:1d:3f:3c:4e:a8:c0:00:43:b2:
57:18:19:20:fe:59:98:f8:22:d6:53:ce:9d:ac:b8:
ec:e0:0c:12:fc:27:61:03:fd:22:2d:07:57:20:36:
83:cf:82:86:73:92:0d:8a:6a:c1:e9:9e:63:b4:7c:
f5:0b:a8:c9:de:3e:e4:5b:57:cb:de:9f:03:46:e4:
e5:e1:78:39:f1:e4:a9:32:5c:3f:13:11:bd:07:0a:
34:0a:1a:a4:a8:ce:e9:b5:94:6d:1c:b8:ec:8f:88:
4f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:28:DA:1E:10:02:77:ED:8C:C9:4B:34:77:BF:74:50:E7:F7:14:31
X509v3 Authority Key Identifier:
keyid:65:DA:12:EE:DF:7C:D0:E0:A6:AF:B7:27:86:C4:C8:52:E0:20:52:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdoS7t980OCmr7cnhsTIUuAgUkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/081be5-22fa-4b0b-af5d-0bedb52856b8/1/ACjaHhACd-2MyUs0d790UOf3FDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/081be5-22fa-4b0b-af5d-0bedb52856b8/1/ZdoS7t980OCmr7cnhsTIUuAgUkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.112.0/22
Signature Algorithm: sha256WithRSAEncryption
77:9b:ad:ad:33:d6:8f:28:86:9a:e5:9a:2b:d1:d8:c1:82:a9:
b9:ac:33:0e:25:33:7e:63:41:10:62:fb:c0:59:89:06:6a:fc:
9b:0a:34:a0:96:97:ac:10:39:a1:74:0d:b4:3c:e2:d7:19:b7:
2d:26:cc:a3:51:f3:b3:d7:2d:34:8f:e0:c0:8f:4a:3e:72:7f:
93:e0:ca:f9:a8:0d:7c:08:f7:9d:8b:87:28:c7:5c:cf:95:1f:
77:f5:c3:1e:23:8c:fd:a1:06:46:8e:81:b5:7e:31:35:75:26:
43:c3:f2:f8:63:24:03:4e:60:97:9f:b1:de:ae:c5:31:35:87:
75:3c:5f:34:47:81:1c:bb:4e:15:c3:f2:8b:c4:26:62:be:bc:
c9:e5:09:19:10:3b:e4:0b:99:ce:ca:bd:01:e7:ef:92:04:8e:
e7:bd:66:83:17:1e:39:16:a8:08:fa:91:6e:01:19:cc:f2:90:
d7:b9:46:a0:3b:38:7d:dc:f7:ce:a3:6f:0d:58:b5:2b:ab:02:
db:f3:69:02:a4:95:77:2d:9d:a1:66:75:b0:63:45:cd:d3:f0:
70:7b:df:94:4e:6c:9c:6b:93:5d:d9:c6:a5:2e:d3:1f:32:32:
5b:36:ca:47:31:e1:0d:30:f9:be:83:c2:27:58:fe:cc:19:f8:
34:f0:18:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:56 2024 by rpki-client on console-fra.rpki-client.org