Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/7764b5-23ab-45aa-87c7-421dbbde6e17/1/OZVBfjM5SlZ1FVVAf07F14jbJUc.roa
File: OZVBfjM5SlZ1FVVAf07F14jbJUc.roa (raw, json)
Hash identifier: 4/+2wBhvoIe9U0LcGvx/er6S5mqNvrwOG9qIni2lldg=
Subject key identifier: 39:95:41:7E:33:39:4A:56:75:15:55:40:7F:4E:C5:D7:88:DB:25:47
Certificate issuer: /CN=2d504ac7968f7c5982bc9505932dc14e960b1044
Certificate serial: 08B2B00A
Authority key identifier: 2D:50:4A:C7:96:8F:7C:59:82:BC:95:05:93:2D:C1:4E:96:0B:10:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVBKx5aPfFmCvJUFky3BTpYLEEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/7764b5-23ab-45aa-87c7-421dbbde6e17/1/OZVBfjM5SlZ1FVVAf07F14jbJUc.roa
Signing time: Sat 01 Jan 2022 07:59:17 +0000
ROA not before: Sat 01 Jan 2022 07:59:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203991
IP address blocks: 185.131.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145928202 (0x8b2b00a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d504ac7968f7c5982bc9505932dc14e960b1044
Validity
Not Before: Jan 1 07:59:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3995417e33394a56751555407f4ec5d788db2547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6d:8c:cb:a0:21:56:9f:d3:77:51:b5:91:15:
56:4d:f7:d0:d7:b5:88:36:6e:35:08:6a:c3:94:01:
57:a2:40:c1:2a:7c:11:f7:3c:45:bd:25:bc:7a:ed:
42:66:39:fc:4a:51:de:cc:07:82:45:36:0d:28:76:
19:2b:d9:df:cf:30:f3:2c:8d:25:c8:b8:4c:c3:64:
05:9b:66:34:87:1f:55:e9:d6:50:05:4b:97:eb:5a:
84:c0:f2:b1:9a:6a:a9:c4:b2:24:50:73:be:d0:24:
e4:65:cb:2c:97:02:00:b3:29:b4:ad:08:31:c9:35:
c7:8d:ee:2e:12:98:c4:60:f1:85:87:8d:ce:59:4b:
68:02:cf:0d:52:84:aa:53:85:81:cc:1d:bd:94:83:
4e:2b:a8:fa:23:0b:dd:b5:6a:5d:74:4f:9a:43:48:
00:fe:00:55:6e:2a:7b:14:33:69:8c:f9:10:b1:a0:
ad:30:1b:4c:93:9c:6e:6d:57:77:40:a8:b8:55:2c:
33:4e:94:98:83:4a:ee:7e:88:82:82:13:5b:f0:11:
16:2f:f2:9c:24:75:65:b1:b9:5a:51:9b:24:ff:0d:
ab:d9:43:8c:53:f0:19:4d:ca:d3:80:23:83:7d:1f:
57:70:62:99:a2:57:33:52:b2:86:2b:44:d8:56:0d:
f6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:95:41:7E:33:39:4A:56:75:15:55:40:7F:4E:C5:D7:88:DB:25:47
X509v3 Authority Key Identifier:
keyid:2D:50:4A:C7:96:8F:7C:59:82:BC:95:05:93:2D:C1:4E:96:0B:10:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVBKx5aPfFmCvJUFky3BTpYLEEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7764b5-23ab-45aa-87c7-421dbbde6e17/1/OZVBfjM5SlZ1FVVAf07F14jbJUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7764b5-23ab-45aa-87c7-421dbbde6e17/1/LVBKx5aPfFmCvJUFky3BTpYLEEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.12.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:d5:c5:83:b8:7a:cc:6d:38:74:4a:3b:67:d8:81:b1:92:c0:
9e:36:b3:01:f6:89:d1:30:d8:7e:c2:1d:02:53:f4:8a:96:a7:
82:df:5a:72:28:65:c6:a7:99:6c:5b:d1:db:5a:14:4d:0d:64:
fe:fe:37:e4:4a:08:e5:73:f1:33:c2:63:8c:7e:e0:1a:f3:99:
49:08:5a:ad:81:3a:3f:27:e6:cf:6e:32:7c:dc:5e:83:85:ab:
85:9c:55:e4:29:31:b6:4e:7f:18:1b:e6:c7:7a:26:8b:ee:db:
73:7b:34:87:3f:d4:df:86:e3:11:9c:59:58:f1:76:16:09:d0:
e4:c6:e8:6f:b5:2c:2f:aa:f5:17:ec:f9:60:15:18:f0:0b:21:
9b:14:50:8d:98:d7:e8:67:41:39:f1:df:26:38:f2:a7:97:69:
e1:19:b6:9f:e2:7c:f1:69:d0:66:fc:90:7f:45:38:a3:39:b4:
92:03:c2:40:3e:44:3a:06:83:29:37:56:0d:94:3d:31:12:7c:
0d:d2:da:10:f1:a2:0a:e5:c9:5e:0c:33:9e:52:4c:3d:32:6e:
50:10:74:19:f7:8e:cf:25:e9:23:a7:7b:d5:48:86:b7:79:da:
c1:a6:93:f1:c5:c2:98:ce:15:cb:40:2c:e2:71:cf:b3:4c:94:
5e:15:74:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:15 2024 by rpki-client on console-fra.rpki-client.org