Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/1UrWKD755yzcq80rVDs9QltM2w0.roa
File: 1UrWKD755yzcq80rVDs9QltM2w0.roa (raw, json)
Hash identifier: nmBBvZT4YRHF8D39DBNkaO85+3DVpC6/HELl14QLeGw=
Subject key identifier: D5:4A:D6:28:3E:F9:E7:2C:DC:AB:CD:2B:54:3B:3D:42:5B:4C:DB:0D
Certificate issuer: /CN=5b661adcbf6962eeec825c6d4de9b449f02e841d
Certificate serial: 070D449B
Authority key identifier: 5B:66:1A:DC:BF:69:62:EE:EC:82:5C:6D:4D:E9:B4:49:F0:2E:84:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2Ya3L9pYu7sglxtTem0SfAuhB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/1UrWKD755yzcq80rVDs9QltM2w0.roa
Signing time: Sat 01 Jan 2022 11:59:33 +0000
ROA not before: Sat 01 Jan 2022 11:59:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 193.57.35.0/24 maxlen: 24
193.57.33.0/24 maxlen: 24
185.239.245.0/24 maxlen: 24
193.57.57.0/24 maxlen: 24
185.254.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118310043 (0x70d449b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b661adcbf6962eeec825c6d4de9b449f02e841d
Validity
Not Before: Jan 1 11:59:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d54ad6283ef9e72cdcabcd2b543b3d425b4cdb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:cf:b3:a8:d4:5e:67:5d:7c:5d:54:bc:60:
06:35:76:cf:b4:a4:92:c9:c3:16:22:76:af:35:ab:
27:9b:ac:51:97:01:77:0a:33:73:52:54:09:b3:ab:
bf:0a:e0:2c:1f:c5:79:93:c4:24:d8:0e:86:63:bc:
0e:b6:c2:c3:db:ce:29:cd:b4:8e:1e:96:6e:4e:48:
b4:86:64:6c:b5:2a:15:3d:61:26:c3:da:f0:bf:ee:
da:ce:ed:c6:27:51:eb:2e:ae:89:c9:72:44:e4:b0:
14:89:bd:96:b7:48:e8:47:6a:e4:cc:b9:81:2c:ce:
e3:1d:5a:42:d4:39:c7:5a:4d:7d:92:55:d3:65:e3:
40:eb:bc:4a:d7:27:78:3d:4b:a8:c2:8f:48:36:e8:
7d:22:a2:6a:24:75:43:3c:6f:b7:48:b4:a5:65:d7:
b9:62:22:0c:f3:dc:37:03:dc:0f:47:b0:27:33:58:
6e:22:b7:52:5c:26:89:5d:58:e0:10:6a:55:ae:df:
44:68:91:aa:94:58:17:00:23:6f:57:42:3d:c6:79:
b8:a2:a9:47:37:3b:58:94:14:9e:98:52:1b:ae:1f:
ed:6f:d0:98:6d:37:b6:25:d0:01:87:61:8a:42:7b:
fc:31:9e:a1:34:81:e6:2a:e2:67:56:8b:a9:8c:26:
a5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4A:D6:28:3E:F9:E7:2C:DC:AB:CD:2B:54:3B:3D:42:5B:4C:DB:0D
X509v3 Authority Key Identifier:
keyid:5B:66:1A:DC:BF:69:62:EE:EC:82:5C:6D:4D:E9:B4:49:F0:2E:84:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2Ya3L9pYu7sglxtTem0SfAuhB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/1UrWKD755yzcq80rVDs9QltM2w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/W2Ya3L9pYu7sglxtTem0SfAuhB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.245.0/24
185.254.19.0/24
193.57.33.0/24
193.57.35.0/24
193.57.57.0/24
Signature Algorithm: sha256WithRSAEncryption
20:dd:e2:84:95:09:32:f2:f6:a6:74:68:bb:21:db:22:78:91:
8e:1e:04:4f:b8:ff:c7:0c:70:02:1d:eb:15:9c:12:da:e0:b5:
e4:f9:4f:a6:bf:91:52:c0:49:b6:13:cc:ad:99:83:6a:f4:a7:
f4:e8:d4:d4:f7:2d:b5:d9:6b:ae:e9:9b:79:57:7f:24:8f:1c:
ed:db:e4:59:0e:fc:01:13:aa:18:14:fc:da:68:fb:d3:b6:b7:
cd:b9:ec:07:c8:c6:cf:86:14:ad:93:5f:3f:15:65:cd:93:70:
d1:1e:98:10:7f:50:7d:23:06:e8:80:b3:d2:29:f6:39:34:d9:
ea:5e:ef:83:d8:1c:52:c7:ca:64:92:8f:08:bd:1d:cb:e3:f7:
17:b7:49:2b:69:be:98:50:40:70:7b:59:58:cc:f0:6a:4f:61:
1b:04:10:4a:d8:9a:c6:40:74:d7:3d:2e:68:2f:55:91:da:cc:
86:ea:1e:87:56:c4:72:17:92:16:94:54:4f:35:0a:0d:b2:2b:
f9:98:48:1b:92:a6:18:7c:00:43:41:6e:9b:ad:91:dc:17:5d:
13:1d:c3:ba:5a:48:2a:6e:f0:3a:82:35:cd:c4:8d:f7:ed:91:
20:f1:5d:2b:5f:90:90:67:db:8c:38:df:d9:0a:bf:9b:82:11:
1e:b3:d3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:46 2024 by rpki-client on console-fra.rpki-client.org