Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/40ae5e-9f9e-4056-9f5f-678d236abb75/1/ddrr2IKFAnlillR69VJRcZaU08s.roa
File: ddrr2IKFAnlillR69VJRcZaU08s.roa (raw, json)
Hash identifier: XCxzGjK8oDAqK5kreC4TU3anninRY+XXNyKPb9UykN8=
Subject key identifier: 75:DA:EB:D8:82:85:02:79:62:96:54:7A:F5:52:51:71:96:94:D3:CB
Certificate issuer: /CN=4d1380e88c64a3003478ddf54142d2ac56163e93
Certificate serial: 6DE64B
Authority key identifier: 4D:13:80:E8:8C:64:A3:00:34:78:DD:F5:41:42:D2:AC:56:16:3E:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TROA6IxkowA0eN31QULSrFYWPpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/40ae5e-9f9e-4056-9f5f-678d236abb75/1/ddrr2IKFAnlillR69VJRcZaU08s.roa
Signing time: Tue 19 Apr 2022 07:42:57 +0000
ROA not before: Tue 19 Apr 2022 07:42:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62332
IP address blocks: 185.120.84.0/24 maxlen: 24
185.120.85.0/24 maxlen: 24
185.120.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7202379 (0x6de64b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d1380e88c64a3003478ddf54142d2ac56163e93
Validity
Not Before: Apr 19 07:42:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75daebd8828502796296547af55251719694d3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:73:c4:66:b0:60:83:af:0e:ba:28:85:79:
9f:cc:91:52:7b:7d:4e:76:17:2d:11:06:9b:a2:f6:
7c:b0:14:16:90:57:51:c5:1a:d8:f9:29:90:44:de:
e7:db:aa:5e:48:7f:18:80:1a:0e:c0:9d:59:1e:19:
bd:51:a2:3b:b4:bf:40:05:d9:13:40:f9:9e:9b:29:
f7:75:3c:66:e1:5a:ca:40:83:db:91:19:93:60:da:
13:4a:a3:72:5e:dc:cd:f8:5a:74:d7:00:f5:75:6e:
32:19:08:99:6d:99:82:9b:bc:1f:3c:d9:79:2b:6b:
ba:f8:4f:94:2c:bb:5c:8a:91:e3:37:0c:da:c3:3b:
c0:2c:29:f0:9c:76:dd:33:da:d7:ed:19:82:64:44:
b4:b5:a5:e5:5c:ba:11:57:68:3b:62:b3:b8:cd:cf:
2b:66:7b:f6:28:e5:81:75:26:74:a8:c9:3c:9d:f7:
cf:6a:6b:5a:84:9b:95:75:d1:15:26:43:f5:6b:61:
c7:60:be:f5:b8:30:a9:a4:d6:43:1e:00:7b:31:02:
50:72:60:b7:d5:e0:12:5f:1d:05:7a:79:37:e2:0c:
2d:bc:6a:d8:3c:44:6f:c1:2d:07:c0:4c:56:91:a9:
e1:d4:86:52:c2:cf:b7:9c:c9:aa:ec:44:ad:ff:a9:
8f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DA:EB:D8:82:85:02:79:62:96:54:7A:F5:52:51:71:96:94:D3:CB
X509v3 Authority Key Identifier:
keyid:4D:13:80:E8:8C:64:A3:00:34:78:DD:F5:41:42:D2:AC:56:16:3E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TROA6IxkowA0eN31QULSrFYWPpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/40ae5e-9f9e-4056-9f5f-678d236abb75/1/ddrr2IKFAnlillR69VJRcZaU08s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/40ae5e-9f9e-4056-9f5f-678d236abb75/1/TROA6IxkowA0eN31QULSrFYWPpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.84.0/23
185.120.87.0/24
Signature Algorithm: sha256WithRSAEncryption
08:8a:ea:d3:23:65:6f:ad:14:1b:ac:ca:32:58:cb:83:54:f8:
7d:5d:9e:b0:95:c2:2a:e6:f2:f7:f8:24:e3:fb:21:7f:59:12:
4a:9e:24:f5:61:79:4c:37:7c:d3:91:2a:8f:ea:24:69:28:87:
68:92:1f:9d:7b:a8:03:37:e8:d9:8c:ee:3b:6a:eb:71:ae:95:
82:12:f0:56:28:1c:72:26:cc:8d:82:01:10:9b:ab:09:28:e9:
13:1e:a5:e2:8d:4e:a1:e2:78:c8:39:92:41:8f:fa:24:aa:fb:
ae:38:14:d9:55:bd:9f:b5:32:73:3c:92:fb:b4:3e:c2:b8:93:
6f:37:24:8d:08:a7:a9:4d:e9:6b:30:e7:a0:1e:a4:a6:d1:35:
b3:5b:65:ce:38:24:c0:70:d8:5b:23:12:bf:38:f2:14:d8:5e:
85:32:f6:ce:e6:c0:00:19:1f:d2:58:19:49:73:b6:2b:ea:0b:
d5:43:86:c5:06:38:1d:70:bb:4e:34:99:ab:88:50:db:94:3e:
40:b9:7f:77:74:d0:49:2c:cc:70:bf:fa:61:ef:f1:70:16:13:
df:fb:a4:51:ab:47:de:8b:5d:ff:b1:66:45:e9:84:89:9a:70:
4b:d8:4d:a1:e1:b3:f2:62:26:8f:c1:c1:67:49:9c:6d:55:8a:
2f:7b:c3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:34 2024 by rpki-client on console-fra.rpki-client.org