Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f28598-6754-45c3-b411-812d4d8501df/1/UUNTz936Xb7aiyyJD4-QzphwHh8.roa
File: UUNTz936Xb7aiyyJD4-QzphwHh8.roa (raw, json)
Hash identifier: wj4oHp9R2rEKjQbsuZcOa4vS02X8fK62EznEVevlfoA=
Subject key identifier: 51:43:53:CF:DD:FA:5D:BE:DA:8B:2C:89:0F:8F:90:CE:98:70:1E:1F
Certificate issuer: /CN=9a5684aa26c1abba18c191c6ead6d69d292af987
Certificate serial: 01877F22861D679E18DD0A9D27815B4176D8
Authority key identifier: 9A:56:84:AA:26:C1:AB:BA:18:C1:91:C6:EA:D6:D6:9D:29:2A:F9:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlaEqibBq7oYwZHG6tbWnSkq-Yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f28598-6754-45c3-b411-812d4d8501df/1/UUNTz936Xb7aiyyJD4-QzphwHh8.roa
Signing time: Fri 14 Apr 2023 09:39:41 +0000
ROA not before: Fri 14 Apr 2023 09:39:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206110
IP address blocks: 185.196.68.0/22 maxlen: 22
185.196.69.0/24 maxlen: 24
185.196.71.0/24 maxlen: 24
185.196.68.0/24 maxlen: 24
185.196.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:22:86:1d:67:9e:18:dd:0a:9d:27:81:5b:41:76:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5684aa26c1abba18c191c6ead6d69d292af987
Validity
Not Before: Apr 14 09:39:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=514353cfddfa5dbeda8b2c890f8f90ce98701e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:22:a7:7d:2e:ce:61:9e:b7:2f:66:26:9d:ed:
36:db:b7:22:c1:72:9c:c3:a1:00:a6:95:c1:a5:2a:
79:86:76:da:17:a6:16:1b:92:9d:43:88:4d:9c:a6:
c1:20:9d:0b:df:8f:e8:3e:8a:68:b9:c9:83:ce:fa:
7e:8b:9a:89:48:ae:e3:43:60:ab:82:e4:75:0e:11:
8c:40:00:82:0f:11:e8:b2:09:12:4b:c1:88:00:02:
4d:f3:33:7e:27:d0:42:49:9f:61:20:4b:00:d7:d7:
b5:6d:dc:f7:24:e5:d3:3e:ad:05:b3:f1:1e:a9:7d:
92:4f:98:5b:85:1d:96:7e:67:b5:f6:9d:9a:de:06:
f9:5f:01:60:77:95:76:8d:89:c7:bb:55:24:39:23:
c7:ce:36:00:b2:15:9d:00:f8:e2:64:7d:30:f3:bd:
88:4b:74:31:5f:03:80:41:f8:aa:49:4e:05:e0:f1:
84:36:22:70:58:9b:01:5f:e9:5d:75:ec:73:93:16:
0b:cb:7e:35:1c:d2:50:78:8c:6a:2a:36:39:ed:10:
b1:fa:2b:18:5a:aa:3a:aa:cb:27:79:84:d1:e6:b1:
ca:09:ba:15:67:d2:52:44:c4:b7:9f:44:fe:cd:98:
55:fa:47:66:2e:8c:a6:91:73:a3:e3:e9:74:72:e7:
af:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:43:53:CF:DD:FA:5D:BE:DA:8B:2C:89:0F:8F:90:CE:98:70:1E:1F
X509v3 Authority Key Identifier:
keyid:9A:56:84:AA:26:C1:AB:BA:18:C1:91:C6:EA:D6:D6:9D:29:2A:F9:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlaEqibBq7oYwZHG6tbWnSkq-Yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f28598-6754-45c3-b411-812d4d8501df/1/UUNTz936Xb7aiyyJD4-QzphwHh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f28598-6754-45c3-b411-812d4d8501df/1/mlaEqibBq7oYwZHG6tbWnSkq-Yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.68.0/22
Signature Algorithm: sha256WithRSAEncryption
72:b5:7d:fc:e3:0e:c2:c8:df:83:60:74:b1:91:5d:a9:61:ba:
6b:fd:32:01:33:93:71:c9:41:f5:be:ab:c9:f7:34:9e:19:5f:
8a:ba:08:76:2d:ce:85:6b:d1:49:b8:4e:4c:4e:30:68:c8:a9:
82:4b:50:1b:9f:3f:1d:7e:5a:60:c6:c3:fc:d9:2b:63:a5:05:
9b:08:ce:6d:8c:ce:b9:6f:c5:f5:2a:ae:5a:b5:32:5a:e6:3b:
7d:fe:21:19:4e:ae:79:75:44:cb:92:d0:8b:4d:65:42:0a:28:
0e:7e:be:9a:59:c3:e4:0e:f7:52:23:33:d5:e9:13:a1:36:8b:
6e:6f:74:85:e7:fe:aa:c5:08:e9:d6:bc:56:fa:47:de:95:ee:
62:8d:37:b3:43:a3:1d:8f:92:b7:8e:75:bb:c5:aa:bc:e4:f5:
c4:26:0f:31:8f:cb:0c:89:f1:35:25:57:27:80:9c:1c:5d:16:
77:76:45:2a:14:f3:72:81:b9:27:9a:13:97:b2:43:67:71:63:
bd:09:a9:d1:8e:cd:b3:8d:20:2b:aa:44:cb:89:56:7e:c5:2d:
a5:ea:32:93:b4:fc:82:30:a3:be:f0:e6:1b:c7:65:2a:4f:8c:
94:4b:48:4c:a2:f3:7c:c7:a8:7e:48:93:e2:ff:77:2e:f0:2f:
6e:f2:2b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:35 2024 by rpki-client on console-ams.rpki-client.org