Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/5trdPshFggKiVYT7tfzq5z2BmPw.roa
File: 5trdPshFggKiVYT7tfzq5z2BmPw.roa (raw, json)
Hash identifier: xTKp5JPOJrcYORrdFks5pRDeUm0abp7htt8jTpjIMj8=
Subject key identifier: E6:DA:DD:3E:C8:45:82:02:A2:55:84:FB:B5:FC:EA:E7:3D:81:98:FC
Certificate issuer: /CN=a38bb1292f74d990ad3594c285c4ef0811c9e38d
Certificate serial: 018387F9099EF5F1D69C3424C7623196B92D
Authority key identifier: A3:8B:B1:29:2F:74:D9:90:AD:35:94:C2:85:C4:EF:08:11:C9:E3:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4uxKS902ZCtNZTChcTvCBHJ440.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/5trdPshFggKiVYT7tfzq5z2BmPw.roa
Signing time: Thu 29 Sep 2022 06:39:48 +0000
ROA not before: Thu 29 Sep 2022 06:39:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21073
IP address blocks: 185.94.92.0/22 maxlen: 22
80.85.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:87:f9:09:9e:f5:f1:d6:9c:34:24:c7:62:31:96:b9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38bb1292f74d990ad3594c285c4ef0811c9e38d
Validity
Not Before: Sep 29 06:39:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6dadd3ec8458202a25584fbb5fceae73d8198fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c4:2a:19:6d:88:61:ba:7f:cc:df:75:79:e8:
fc:a1:fa:11:f5:16:b1:af:e9:84:c4:32:dc:e7:8c:
c2:eb:ff:30:7a:a8:76:91:b5:d0:af:57:f5:8c:94:
5b:53:06:8d:3e:03:36:b3:e1:f5:1d:9d:de:4f:4f:
23:f0:ac:05:b2:23:65:ff:19:72:be:60:f6:9b:7b:
7b:64:27:4e:2a:27:c7:77:6b:d4:99:61:4e:56:48:
5a:63:16:ad:59:b7:a7:31:be:f2:e8:10:43:c6:90:
50:f1:8a:f3:79:f0:f9:88:e7:4d:53:97:58:e9:53:
4e:eb:b1:ab:52:6e:a8:15:bf:d6:7e:f3:68:49:19:
c3:a4:a3:00:51:9e:2a:9a:be:6b:b4:fb:2d:fa:1e:
e1:9e:e5:76:a9:79:44:6f:08:0c:72:22:57:dd:9e:
66:ab:b2:a1:be:c1:84:a7:39:b9:23:0f:33:90:1a:
31:37:c9:29:67:98:df:c9:b6:3d:fd:74:89:f8:8a:
59:9a:e4:32:6d:ab:e3:6e:f3:ea:6b:95:18:9c:73:
c3:22:39:81:39:4c:33:a7:25:61:0e:7e:bb:71:55:
de:ec:43:79:58:a1:d2:de:59:e0:f9:07:88:38:4f:
98:5b:a7:4a:b9:42:89:68:d8:ab:b7:ed:97:47:78:
bb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DA:DD:3E:C8:45:82:02:A2:55:84:FB:B5:FC:EA:E7:3D:81:98:FC
X509v3 Authority Key Identifier:
keyid:A3:8B:B1:29:2F:74:D9:90:AD:35:94:C2:85:C4:EF:08:11:C9:E3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4uxKS902ZCtNZTChcTvCBHJ440.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/5trdPshFggKiVYT7tfzq5z2BmPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/o4uxKS902ZCtNZTChcTvCBHJ440.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.32.0/20
185.94.92.0/22
Signature Algorithm: sha256WithRSAEncryption
39:d7:f0:e0:4b:f6:b4:46:44:b1:fe:98:ac:de:42:d7:fd:40:
65:2c:67:a7:14:57:72:f2:51:8d:ef:1d:8f:20:2d:28:a1:1d:
81:48:61:62:72:de:91:aa:9f:5c:ca:35:dd:5b:e5:ff:96:49:
0a:e7:9d:96:d0:56:61:d2:c8:d7:71:76:d5:0e:1e:58:3c:21:
ee:c6:07:d1:1d:13:71:08:7d:71:bc:5d:56:fb:ae:0b:7b:49:
5c:ac:24:57:04:4a:ae:be:b3:f2:72:44:b2:2a:5f:00:10:93:
57:c8:ec:b6:15:0e:9f:b9:d2:ed:29:31:ef:2a:34:4d:f5:ef:
3c:3d:ac:fc:c5:1a:02:79:ec:53:53:36:62:08:ce:93:5c:d2:
4d:03:f3:09:e6:78:f3:94:ea:8b:b2:36:99:fd:0d:ec:a0:6f:
35:1a:e9:d6:a9:11:0f:c3:8b:6c:5d:fc:b4:4c:db:5a:af:6b:
45:d9:4b:c9:1a:f4:7d:84:26:ce:ae:7a:2f:41:fa:d0:01:09:
d8:7a:84:9f:7c:02:95:d8:c3:70:9d:89:f1:99:87:64:3a:7d:
f4:53:94:e4:bb:b7:8a:58:a5:17:cf:33:02:77:f5:0d:42:db:
20:3b:2f:e2:08:d7:44:c8:a9:78:0b:1d:74:de:08:2b:74:0c:
39:87:75:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:01 2024 by rpki-client on console-ams.rpki-client.org