Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/sllPP8ane15rTGIATbkn5Y_dDfg.roa
File: sllPP8ane15rTGIATbkn5Y_dDfg.roa (raw, json)
Hash identifier: 4vGpJJxp80LRRAZ6jmM9W9w2e35DtER0VqEGRHhZr2A=
Subject key identifier: B2:59:4F:3F:C6:A7:7B:5E:6B:4C:62:00:4D:B9:27:E5:8F:DD:0D:F8
Certificate issuer: /CN=a38bb1292f74d990ad3594c285c4ef0811c9e38d
Certificate serial: 01856E8B524E60F8C7ABABC70059EEA484A1
Authority key identifier: A3:8B:B1:29:2F:74:D9:90:AD:35:94:C2:85:C4:EF:08:11:C9:E3:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4uxKS902ZCtNZTChcTvCBHJ440.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/sllPP8ane15rTGIATbkn5Y_dDfg.roa
Signing time: Sun 01 Jan 2023 18:15:02 +0000
ROA not before: Sun 01 Jan 2023 18:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33915
IP address blocks: 185.94.92.0/22 maxlen: 22
80.85.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:52:4e:60:f8:c7:ab:ab:c7:00:59:ee:a4:84:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38bb1292f74d990ad3594c285c4ef0811c9e38d
Validity
Not Before: Jan 1 18:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2594f3fc6a77b5e6b4c62004db927e58fdd0df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:0a:57:41:7d:01:b1:c7:58:09:a5:22:56:
16:1c:ef:b8:2f:af:68:05:43:99:cf:71:d5:20:4b:
0f:64:a7:23:6d:57:c2:53:f7:0b:1d:71:3d:d8:29:
8c:12:6a:30:18:18:77:a3:3b:54:1a:c6:6c:62:60:
bb:7a:4e:dd:63:06:59:39:0d:8f:ba:2d:32:73:81:
e2:e2:94:a3:e7:c4:2e:c6:d7:5c:6f:3c:1f:61:8d:
5d:8b:c8:ea:ce:28:5b:d4:5d:1b:b6:83:6a:8f:3c:
0a:a9:36:91:6e:d3:42:c4:06:97:a7:1b:f2:1c:17:
9f:73:81:1d:5c:ec:47:29:9a:77:23:13:bc:9f:e9:
65:45:37:2f:0f:76:39:e0:40:ae:15:58:37:b6:63:
ec:a1:9b:32:53:a0:a6:27:ed:3b:7f:86:5d:02:00:
b9:11:09:e1:6c:c4:10:96:a8:98:4e:17:fd:f5:48:
8c:d3:77:df:d5:6e:cb:27:e0:63:41:61:27:46:05:
2a:2e:a3:d8:cf:30:36:9f:37:b8:77:87:b2:31:34:
4c:72:04:07:62:ad:a7:ea:bb:a6:b5:70:d3:47:ca:
f6:ae:c0:72:ba:f5:80:fa:86:d3:68:25:5c:15:90:
18:18:a3:f9:6f:fd:a8:9e:37:24:76:b2:cd:cd:a0:
e0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:59:4F:3F:C6:A7:7B:5E:6B:4C:62:00:4D:B9:27:E5:8F:DD:0D:F8
X509v3 Authority Key Identifier:
keyid:A3:8B:B1:29:2F:74:D9:90:AD:35:94:C2:85:C4:EF:08:11:C9:E3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4uxKS902ZCtNZTChcTvCBHJ440.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/sllPP8ane15rTGIATbkn5Y_dDfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/o4uxKS902ZCtNZTChcTvCBHJ440.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.32.0/20
185.94.92.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:8b:d3:65:52:4e:fb:6d:80:18:cf:70:82:58:ef:7d:88:79:
2d:2a:8c:52:99:1e:ea:47:20:cc:f7:9c:3b:c0:57:0f:52:21:
6c:87:cd:40:29:82:5d:e0:a2:a3:36:9d:f4:e8:13:5d:8b:e4:
86:c8:f4:10:f1:70:fb:ee:a4:17:10:99:b1:cf:1b:c0:3d:75:
1e:f2:7c:f7:07:5c:d1:68:db:f5:b4:b8:8f:f8:68:c2:ba:74:
2a:0b:38:0b:9e:a7:9c:1f:18:37:7c:9a:57:e8:62:0d:e4:79:
eb:62:9c:75:82:c1:49:de:24:b4:32:33:4e:76:65:18:5f:2f:
0f:0f:82:1f:76:c7:47:ca:3b:34:3f:2f:7b:16:e5:8e:33:1f:
72:2a:4e:ef:ec:01:2c:f1:84:69:0a:89:60:82:86:23:eb:97:
5b:e3:6e:23:51:32:bb:c3:57:77:5e:0c:ca:ad:b5:f6:87:22:
30:81:56:ba:47:4d:e0:ac:59:0b:2e:73:fc:3a:52:45:ee:a0:
91:35:95:40:86:cf:09:39:db:0c:d8:75:03:0b:e9:d0:af:56:
03:72:84:b0:ba:93:7f:65:f8:c7:2a:c1:41:24:5a:08:b1:3f:
3f:75:45:da:11:f4:ca:c3:30:9f:bb:a3:b9:f8:83:a4:5d:3f:
7b:81:b0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:03 2024 by rpki-client on console-fra.rpki-client.org