Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/txp0hTShFBVc5vElg0zturQbrlc.roa
File: txp0hTShFBVc5vElg0zturQbrlc.roa (raw, json)
Hash identifier: ud6kS0FjulfXjVKJzkKuRlYYyvtSrSOJr4cFhxrzaHw=
Subject key identifier: B7:1A:74:85:34:A1:14:15:5C:E6:F1:25:83:4C:ED:BA:B4:1B:AE:57
Certificate issuer: /CN=a38bb1292f74d990ad3594c285c4ef0811c9e38d
Certificate serial: 01856E8B51ABDDD6DF36195431AD87155460
Authority key identifier: A3:8B:B1:29:2F:74:D9:90:AD:35:94:C2:85:C4:EF:08:11:C9:E3:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4uxKS902ZCtNZTChcTvCBHJ440.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/txp0hTShFBVc5vElg0zturQbrlc.roa
Signing time: Sun 01 Jan 2023 18:15:02 +0000
ROA not before: Sun 01 Jan 2023 18:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21073
IP address blocks: 185.94.92.0/22 maxlen: 22
80.85.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:51:ab:dd:d6:df:36:19:54:31:ad:87:15:54:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38bb1292f74d990ad3594c285c4ef0811c9e38d
Validity
Not Before: Jan 1 18:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b71a748534a114155ce6f125834cedbab41bae57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:43:4e:13:bf:a5:f9:3f:01:bf:57:7e:33:54:
4d:da:42:74:04:48:35:9c:fc:0d:80:99:d6:93:60:
1f:76:45:05:37:6e:da:9c:bd:9d:4a:08:00:3c:39:
12:b8:80:fd:8e:c8:c7:42:06:85:4f:35:7d:9e:23:
0d:9d:3c:cd:4f:c1:1e:df:63:2c:ca:fe:6d:4b:75:
c7:56:ac:21:6a:04:69:60:e3:90:9f:be:61:13:4b:
a6:78:87:99:47:49:02:dc:fd:86:07:d5:bb:83:f7:
f5:28:6c:92:27:97:4d:47:58:3a:5d:1d:ce:4b:d7:
e6:08:a0:3f:8b:c8:cf:fe:34:15:eb:19:b9:3f:63:
c4:35:dc:69:fd:40:5a:a2:e1:17:d3:1f:81:86:ed:
d6:39:fc:ae:47:e4:53:3c:b9:67:47:4c:72:7b:70:
4c:74:d8:31:c2:99:4c:14:41:51:71:78:3b:9d:58:
88:92:71:5a:73:b5:d5:9d:ca:c6:91:4a:76:38:ed:
87:b4:4f:3d:40:c5:af:ff:a5:36:b4:8a:1e:51:ca:
9d:32:87:21:2f:58:05:7c:5e:0f:17:36:3f:96:a4:
c0:c9:da:6f:ca:52:15:0f:53:08:b2:d7:8d:b6:7f:
19:6f:30:5b:10:2e:dc:ce:ff:cd:2d:33:50:91:24:
28:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1A:74:85:34:A1:14:15:5C:E6:F1:25:83:4C:ED:BA:B4:1B:AE:57
X509v3 Authority Key Identifier:
keyid:A3:8B:B1:29:2F:74:D9:90:AD:35:94:C2:85:C4:EF:08:11:C9:E3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4uxKS902ZCtNZTChcTvCBHJ440.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/txp0hTShFBVc5vElg0zturQbrlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/o4uxKS902ZCtNZTChcTvCBHJ440.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.32.0/20
185.94.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:cc:58:4d:38:10:40:e5:fc:79:e6:7b:e6:29:a5:a9:df:91:
66:b8:61:7c:38:a9:37:a5:49:9a:03:16:20:fc:62:6c:52:23:
19:26:f0:7c:73:62:ab:c6:44:50:42:ac:73:0c:58:27:1e:bd:
71:56:2c:11:27:43:b9:4a:23:e9:21:44:67:cf:67:71:df:2e:
64:55:ee:64:77:23:25:3e:f4:62:6a:85:a0:13:19:95:21:0b:
75:d6:44:d3:9e:25:87:20:b8:54:95:9d:1a:23:af:c6:eb:8a:
f9:63:77:7f:52:e2:a5:08:53:05:1c:f9:0d:83:33:6e:c6:90:
64:05:2a:a5:54:cb:16:24:fc:09:67:0b:7f:4f:3e:08:a9:ee:
42:b6:bc:69:75:3c:f1:68:2d:ae:b7:06:16:0a:75:92:9b:d2:
16:0e:1b:d5:d4:c9:19:55:c5:6c:3b:84:fd:ff:f3:41:64:e2:
7b:66:f0:01:49:d5:52:10:05:99:8c:08:28:0d:06:96:3b:d8:
07:41:dd:69:93:38:32:3c:46:fd:bd:d7:29:6c:04:37:8f:9c:
53:6f:83:2c:21:d3:5d:d0:d6:0e:53:66:70:e5:cf:5a:d3:7c:
af:3e:b0:58:ec:d7:d1:6c:70:53:88:7c:c9:ff:ea:7d:75:77:
d1:b0:e5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:03 2024 by rpki-client on console-fra.rpki-client.org