Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/AVGrKpcZ-NxGuekd_e2MLbpnrCE.roa
File: AVGrKpcZ-NxGuekd_e2MLbpnrCE.roa (raw, json)
Hash identifier: boyNSEx2+Dtb8EyFdzIhdD7HCIROPFq3+ApFO6mAhZA=
Subject key identifier: 01:51:AB:2A:97:19:F8:DC:46:B9:E9:1D:FD:ED:8C:2D:BA:67:AC:21
Certificate issuer: /CN=a38bb1292f74d990ad3594c285c4ef0811c9e38d
Certificate serial: 01856E8B50CAA3DDE58484B265D3469BAB2E
Authority key identifier: A3:8B:B1:29:2F:74:D9:90:AD:35:94:C2:85:C4:EF:08:11:C9:E3:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4uxKS902ZCtNZTChcTvCBHJ440.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/AVGrKpcZ-NxGuekd_e2MLbpnrCE.roa
Signing time: Sun 01 Jan 2023 18:15:01 +0000
ROA not before: Sun 01 Jan 2023 18:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8608
IP address blocks: 185.94.92.0/22 maxlen: 22
80.85.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:50:ca:a3:dd:e5:84:84:b2:65:d3:46:9b:ab:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38bb1292f74d990ad3594c285c4ef0811c9e38d
Validity
Not Before: Jan 1 18:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0151ab2a9719f8dc46b9e91dfded8c2dba67ac21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:31:16:a6:1e:ec:85:12:99:bf:cc:4c:8f:
44:4e:f8:32:24:23:92:c9:e7:0c:9d:a0:2c:7f:99:
c4:02:4d:09:59:8b:34:5c:54:35:68:26:5b:2c:3d:
4d:74:a7:59:0a:f5:ff:82:27:2c:bc:54:04:77:ed:
5e:b3:59:bb:a6:b9:b3:d5:8c:b3:39:bb:47:26:86:
8c:0c:15:08:53:0e:84:ba:55:a9:13:f3:8c:60:b5:
26:d5:0b:fc:a1:47:da:b6:b6:dd:d5:91:57:e4:a6:
70:46:ff:0b:09:17:01:0c:63:3a:71:30:0c:ce:0a:
33:c2:25:11:cd:8f:eb:f4:7c:60:20:5c:a6:04:1f:
81:ba:0b:67:e4:3f:93:8d:84:86:6e:f9:15:2e:51:
ec:27:17:37:ca:7e:98:d1:81:1c:f5:3d:31:c9:cf:
38:f2:91:7e:8b:58:d6:6c:41:4d:5e:9d:e8:3f:f1:
57:ae:12:c8:91:c9:91:0d:b7:f5:d0:90:4b:04:0c:
9f:69:e2:82:1b:84:0a:2f:33:67:a0:51:e0:ee:e1:
1b:35:93:9b:4a:71:98:6b:0a:ed:07:2a:35:ac:3d:
df:6f:c7:8f:b0:ff:ef:1a:7d:72:cd:73:2b:5a:a1:
c1:73:64:73:d3:9c:07:7a:70:62:f4:a9:e3:da:2e:
d2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:51:AB:2A:97:19:F8:DC:46:B9:E9:1D:FD:ED:8C:2D:BA:67:AC:21
X509v3 Authority Key Identifier:
keyid:A3:8B:B1:29:2F:74:D9:90:AD:35:94:C2:85:C4:EF:08:11:C9:E3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4uxKS902ZCtNZTChcTvCBHJ440.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/AVGrKpcZ-NxGuekd_e2MLbpnrCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/o4uxKS902ZCtNZTChcTvCBHJ440.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.32.0/20
185.94.92.0/22
Signature Algorithm: sha256WithRSAEncryption
11:31:8a:a4:d6:c5:d0:c5:5b:9e:58:e8:07:58:e5:94:a2:b6:
93:e2:16:39:7d:e5:2e:98:c9:52:6c:d5:78:79:ab:ef:d2:c1:
6f:51:a1:33:f2:c8:fa:3a:f0:29:c7:df:26:ae:f3:3c:4b:4e:
28:05:76:35:5a:09:ab:29:87:d1:19:b8:f7:cb:ed:9a:38:67:
c8:7b:a0:27:8c:cd:fd:d9:6f:f5:67:4e:00:05:13:db:5f:50:
a7:b4:89:88:3d:0b:9c:c2:20:54:72:31:25:08:00:7b:25:78:
06:3a:c2:ec:15:c4:31:60:af:0d:58:19:10:9e:87:e7:49:68:
0c:64:ae:43:78:93:3e:fe:77:db:e6:a8:01:fa:cf:4b:d6:8f:
41:d9:f5:ce:35:10:4e:27:60:84:5c:2b:2c:7d:28:83:12:90:
5e:3b:51:e0:52:d0:c7:f0:d0:bc:b6:f6:77:04:ee:ab:3e:a0:
91:8a:67:d0:f2:16:28:d1:e0:24:c8:d7:ff:32:2a:9b:6a:f7:
3d:43:75:af:c6:6d:07:96:56:5a:31:d7:55:32:37:2b:6b:76:
d9:df:f1:4f:93:42:30:0c:ed:bf:a7:ba:2d:a3:99:ca:80:15:
8c:eb:fc:0b:b4:85:aa:c1:46:f0:83:3b:35:f1:65:ad:e3:aa:
91:b7:6f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:03 2024 by rpki-client on console-fra.rpki-client.org