Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/47a087-55df-4172-a338-78c84622c0ec/1/bB3lnACd1D1hXc-TQ4IUP8tYuM8.roa
File: bB3lnACd1D1hXc-TQ4IUP8tYuM8.roa (raw, json)
Hash identifier: WR08TWAl07iNDY4tg1feJFuJDSV+9saY4ibrQbTaNsc=
Subject key identifier: 6C:1D:E5:9C:00:9D:D4:3D:61:5D:CF:93:43:82:14:3F:CB:58:B8:CF
Certificate issuer: /CN=094a031eec7d91f6d9549dec3831f78d7114eb6d
Certificate serial: 04FC01F9
Authority key identifier: 09:4A:03:1E:EC:7D:91:F6:D9:54:9D:EC:38:31:F7:8D:71:14:EB:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUoDHux9kfbZVJ3sODH3jXEU620.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/47a087-55df-4172-a338-78c84622c0ec/1/bB3lnACd1D1hXc-TQ4IUP8tYuM8.roa
Signing time: Sat 01 Jan 2022 10:03:26 +0000
ROA not before: Sat 01 Jan 2022 10:03:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12459
IP address blocks: 185.119.88.0/24 maxlen: 24
185.119.89.0/24 maxlen: 24
185.119.90.0/24 maxlen: 24
2a06:97c0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83624441 (0x4fc01f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094a031eec7d91f6d9549dec3831f78d7114eb6d
Validity
Not Before: Jan 1 10:03:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c1de59c009dd43d615dcf934382143fcb58b8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7a:c2:39:7b:d5:6f:98:4b:33:ac:88:84:21:
7f:59:31:5b:5f:5d:0d:92:e2:81:17:a5:8d:bf:37:
0d:1a:f6:2d:91:03:00:05:bb:8a:76:20:ef:67:f4:
cd:30:ec:2e:4e:c1:04:e3:80:d4:1c:1c:e9:c6:d7:
86:36:2c:10:8a:3b:84:c7:e9:6a:e9:44:05:48:af:
b9:ae:23:2e:f5:dd:07:2c:7b:99:8e:f1:07:05:8a:
da:9e:bf:68:b1:43:f3:17:dd:69:8f:aa:ee:2a:95:
89:b4:68:f7:0b:ef:82:cf:80:2a:5e:3b:a1:23:21:
07:8f:2a:4d:09:87:56:84:c0:2c:09:2a:f5:9b:9a:
3f:dd:8e:36:fc:9e:ad:cc:31:1d:3c:a9:5d:04:98:
a1:55:44:a1:17:23:95:0d:7a:0b:62:39:60:a2:ca:
fb:e6:c1:bc:9c:e5:56:17:87:c4:d9:a7:d8:16:65:
14:cb:cf:86:67:bb:b9:bf:b2:36:87:65:b8:55:a5:
8a:31:cd:02:81:18:ec:30:bc:39:e0:3c:1f:a9:dc:
43:05:e5:0d:ca:08:d3:16:cc:ee:a7:a1:e9:e8:c9:
42:df:ac:7a:07:c1:f3:01:7c:34:e5:a4:ea:bf:d9:
9d:85:7f:35:76:a4:9f:b3:cf:ab:94:ac:dc:6c:11:
36:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1D:E5:9C:00:9D:D4:3D:61:5D:CF:93:43:82:14:3F:CB:58:B8:CF
X509v3 Authority Key Identifier:
keyid:09:4A:03:1E:EC:7D:91:F6:D9:54:9D:EC:38:31:F7:8D:71:14:EB:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUoDHux9kfbZVJ3sODH3jXEU620.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/47a087-55df-4172-a338-78c84622c0ec/1/bB3lnACd1D1hXc-TQ4IUP8tYuM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/47a087-55df-4172-a338-78c84622c0ec/1/CUoDHux9kfbZVJ3sODH3jXEU620.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.88.0-185.119.90.255
IPv6:
2a06:97c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
ad:2f:4b:15:74:c2:3c:0c:9b:96:34:5e:cc:bb:39:ea:21:f9:
92:a7:db:21:ca:c5:17:48:d6:23:fc:1a:d0:04:8f:bf:98:4a:
c0:02:22:10:ec:97:39:ac:e8:61:9c:99:87:a1:90:2c:ae:c0:
54:ba:0f:dd:fd:65:a3:29:07:ff:17:3d:87:89:85:89:6a:a5:
f4:b7:50:eb:db:95:36:78:56:f9:c1:23:64:ae:eb:9d:7c:90:
56:58:9b:18:2d:88:d2:b7:7d:c0:31:2b:47:6a:03:98:78:81:
27:65:31:ba:41:81:88:a9:1c:63:87:e3:fb:63:e1:1c:8b:9f:
5a:90:77:ed:10:e8:39:b9:68:43:ec:c0:e4:e7:14:bd:fe:83:
cd:e9:a3:5e:8f:54:49:3e:06:df:68:72:8a:6b:12:32:14:92:
36:69:83:12:23:21:c3:0c:c1:b9:7e:89:85:5c:b6:3e:5c:a0:
d2:99:ea:90:b1:be:3d:83:25:3e:b7:5e:51:f0:fd:de:4b:78:
7b:32:6f:c3:4f:fd:56:a2:11:37:1f:b6:a5:80:61:9e:8a:1f:
e0:c9:94:72:eb:ff:4b:a0:6c:a6:31:ff:57:11:0f:68:b9:46:
52:8f:a7:da:85:06:40:0a:7d:60:1e:89:4a:b6:58:bc:51:32:
26:fc:4e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:12 2024 by rpki-client on console-fra.rpki-client.org