Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b6ec6b-b9b5-463f-81a1-389669483cce/1/yTEawqny56p6QcxniV80whLGOE8.roa
File: yTEawqny56p6QcxniV80whLGOE8.roa (raw, json)
Hash identifier: oYNsB6sqMpLPF4UaVQkm5mMKVBo2Z3Mcqt3PTes3E1I=
Subject key identifier: C9:31:1A:C2:A9:F2:E7:AA:7A:41:CC:67:89:5F:34:C2:12:C6:38:4F
Certificate issuer: /CN=3d86ea38e021f0a960152cfb7010b4b0e2e9f9e7
Certificate serial: 0529616A
Authority key identifier: 3D:86:EA:38:E0:21:F0:A9:60:15:2C:FB:70:10:B4:B0:E2:E9:F9:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYbqOOAh8KlgFSz7cBC0sOLp-ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ec6b-b9b5-463f-81a1-389669483cce/1/yTEawqny56p6QcxniV80whLGOE8.roa
Signing time: Sat 01 Jan 2022 13:07:10 +0000
ROA not before: Sat 01 Jan 2022 13:07:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201626
IP address blocks: 185.242.0.0/24 maxlen: 24
185.242.3.0/24 maxlen: 24
185.242.1.0/24 maxlen: 24
185.242.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86597994 (0x529616a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d86ea38e021f0a960152cfb7010b4b0e2e9f9e7
Validity
Not Before: Jan 1 13:07:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9311ac2a9f2e7aa7a41cc67895f34c212c6384f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:05:be:76:b9:c2:02:4b:bd:e1:f5:bf:0f:
9c:5a:92:f7:76:83:1a:5c:0a:28:12:19:a4:cb:ef:
ad:f6:56:e4:62:8b:3f:bf:45:f5:2b:88:ce:77:38:
05:12:17:06:ed:ea:8a:5e:0a:09:2a:7a:5b:f8:cb:
c9:97:0d:19:7b:fb:63:84:7e:c6:3d:05:8b:07:95:
b4:9b:af:77:47:0e:27:5e:fc:ac:d7:1d:a7:7f:d7:
17:d9:70:f0:a0:1a:3a:99:4e:26:e9:c1:42:55:2d:
40:c2:33:33:42:83:d9:ca:53:2a:bf:fe:0b:c7:a7:
3e:df:40:2a:d1:b4:37:90:81:43:bf:21:65:ac:da:
2a:32:57:99:08:f7:32:82:21:1f:21:56:66:2e:48:
c6:ce:5e:a0:0d:d9:14:bf:86:13:8e:ed:ad:33:f4:
41:52:13:1e:15:9e:f8:59:ab:7e:09:8f:87:bc:5b:
07:d8:52:cd:e3:8e:15:fd:5e:e9:b3:80:49:a1:25:
7c:2b:54:ec:7f:77:ec:25:57:9f:ba:c3:13:bd:2f:
f1:e4:6f:e5:9a:f3:04:51:3b:0a:4d:94:91:9a:d2:
7a:94:8f:5d:2f:b6:9f:43:11:4e:f7:7c:f9:55:ef:
ed:e2:98:da:f9:3f:27:46:08:b5:5f:d5:77:7c:18:
c7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:31:1A:C2:A9:F2:E7:AA:7A:41:CC:67:89:5F:34:C2:12:C6:38:4F
X509v3 Authority Key Identifier:
keyid:3D:86:EA:38:E0:21:F0:A9:60:15:2C:FB:70:10:B4:B0:E2:E9:F9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYbqOOAh8KlgFSz7cBC0sOLp-ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ec6b-b9b5-463f-81a1-389669483cce/1/yTEawqny56p6QcxniV80whLGOE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ec6b-b9b5-463f-81a1-389669483cce/1/PYbqOOAh8KlgFSz7cBC0sOLp-ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.0.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:14:ff:4e:18:d8:bd:53:5f:bd:55:0a:f3:2b:a1:b8:ea:01:
0b:89:8f:10:1b:36:c5:9b:95:cd:0e:d0:6b:c5:72:0e:45:f5:
96:e3:0e:5f:0a:7f:c1:68:72:c8:50:62:03:3a:c0:3d:5a:f8:
be:23:27:21:86:fc:f1:f1:2e:ac:92:fe:3b:e9:31:a4:04:80:
48:1b:a3:ce:f7:c8:ed:2c:c1:3d:8a:10:bc:44:1a:14:4a:6a:
85:f2:34:50:0b:a5:05:79:d7:58:85:cc:f2:6f:8a:41:61:6d:
6a:bd:be:36:e8:00:1f:ec:ff:24:24:e3:df:94:6e:e4:61:c2:
51:dd:2d:46:0a:27:2c:6e:ef:59:13:7d:d7:90:8e:e9:9c:cb:
c3:8b:0f:20:cb:9e:4a:c4:1c:f7:3d:c1:af:49:9c:0f:a6:7f:
ac:97:42:bd:05:de:55:01:72:06:8b:9c:ee:bb:45:b4:9a:ae:
ee:ff:5c:fd:a0:7c:c6:93:a4:83:91:68:bd:5c:c3:49:6e:df:
93:09:df:74:55:6c:57:ce:e4:9b:d3:04:ad:36:77:76:2c:d0:
47:75:0d:90:c5:5c:76:a9:92:ea:b2:4a:eb:c2:80:3c:cd:56:
95:71:f0:a5:f2:40:b8:6c:d6:04:9e:d2:f7:6b:fe:09:bd:d6:
7e:3d:9a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:25 2024 by rpki-client on console-fra.rpki-client.org