Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/2CFZVJ8Xhw7jHaqWMxaDKVdPU1U.roa
File: 2CFZVJ8Xhw7jHaqWMxaDKVdPU1U.roa (raw, json)
Hash identifier: pEDywQqq4UBP6Rrh9z7bnZJMC+5vGI/i6JAYfP7J8s4=
Subject key identifier: D8:21:59:54:9F:17:87:0E:E3:1D:AA:96:33:16:83:29:57:4F:53:55
Certificate issuer: /CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Certificate serial: 03858431
Authority key identifier: 42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/2CFZVJ8Xhw7jHaqWMxaDKVdPU1U.roa
Signing time: Mon 07 Mar 2022 10:54:23 +0000
ROA not before: Mon 07 Mar 2022 10:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211701
IP address blocks: 185.216.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59081777 (0x3858431)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Validity
Not Before: Mar 7 10:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d82159549f17870ee31daa9633168329574f5355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:06:f3:ac:17:1d:f7:f6:9d:a6:25:1a:bf:30:
bd:66:91:3e:ca:c2:8a:38:f1:7b:ae:16:85:cd:9c:
84:3f:7b:50:6e:77:02:b9:64:f7:8a:5f:8f:f9:92:
a8:56:3b:a7:d1:49:d5:dd:28:ab:c5:c9:32:2a:79:
0d:29:4b:fc:79:8d:61:7f:9f:27:97:cc:7f:ac:48:
7a:68:c5:3f:d7:b5:5c:1a:0d:2d:08:b3:79:31:76:
a0:92:3f:64:dd:7d:6f:58:48:78:13:18:a5:e1:ce:
b1:14:aa:d1:48:5a:c4:6b:bd:a5:62:82:86:bd:e2:
7e:24:d6:5f:d1:e7:e7:4e:11:30:62:6a:d4:ba:5d:
a3:2b:07:cb:8f:73:eb:65:6e:d1:73:28:52:74:c9:
e7:0c:86:6f:4a:0a:bd:c1:8e:b1:75:c9:84:f0:5b:
00:8d:e5:37:d7:ce:10:80:82:a7:b0:b2:3d:bd:1c:
c1:a9:18:b0:54:63:e6:1c:e4:16:3f:1f:7c:16:1e:
27:6a:81:b1:0d:fb:14:c7:33:d2:d1:de:1d:e2:4b:
bb:12:f6:9d:ec:4c:92:ce:d7:a4:41:71:35:e6:4a:
b9:79:44:4a:9c:88:29:b3:47:57:20:89:d3:54:de:
22:3f:30:71:e2:7d:50:56:7d:12:15:55:a4:cd:a8:
56:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:21:59:54:9F:17:87:0E:E3:1D:AA:96:33:16:83:29:57:4F:53:55
X509v3 Authority Key Identifier:
keyid:42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/2CFZVJ8Xhw7jHaqWMxaDKVdPU1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/QvSPf64BKRanddXjtvojEJg0PqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.190.0/24
Signature Algorithm: sha256WithRSAEncryption
59:81:e5:91:49:e0:34:8a:25:73:e6:f8:bf:0c:dc:05:fb:01:
2d:20:e8:bf:78:6e:9c:9c:1b:c9:47:9b:50:81:df:1a:71:e8:
b1:66:40:19:88:54:6d:02:d9:0f:07:d8:32:f1:81:2c:09:0e:
0d:d4:be:86:12:74:0b:26:ca:e1:0e:10:a5:a3:b0:11:b9:18:
be:12:07:06:f0:3e:da:35:50:1a:be:c6:3d:e1:89:45:6e:f2:
7f:64:c2:69:77:2b:13:99:83:1e:2d:4f:f7:f7:b1:86:13:eb:
d6:8f:76:96:ee:d5:c7:f5:4b:7a:32:b4:79:ef:a6:83:4f:16:
51:98:bf:8a:6e:f4:c8:28:43:c1:39:64:e2:b5:02:d7:76:88:
44:71:e9:dd:0e:75:94:bb:bc:28:c1:5b:a3:cc:0d:44:48:c8:
68:91:c3:7b:d4:b4:b8:59:a4:6e:88:a8:f5:91:a0:25:bd:7f:
6a:7e:2a:9e:43:a3:0c:50:87:f8:4d:9c:5a:c6:4e:56:76:c6:
1d:10:28:59:ac:6c:f2:54:b0:46:71:45:de:6e:80:d4:8c:ac:
bc:f8:17:1c:b3:3b:38:e2:f5:04:b6:08:44:ce:7a:fc:ac:9f:
ed:6b:de:11:01:6e:c0:e4:fd:a2:d6:0c:42:b1:ed:74:fd:5a:
8a:19:f3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:33 2024 by rpki-client on console-ams.rpki-client.org