Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/UFvIXVTIg9vV9-EVzjREYyRwdtI.roa
File: UFvIXVTIg9vV9-EVzjREYyRwdtI.roa (raw, json)
Hash identifier: CJ3TX9tk6VS8511rkuHQgUtcbrSlYJ2w0qkYtY7vYDk=
Subject key identifier: 50:5B:C8:5D:54:C8:83:DB:D5:F7:E1:15:CE:34:44:63:24:70:76:D2
Certificate issuer: /CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Certificate serial: 0183EC3BE8BD0B071071FF190DF3CBFAC930
Authority key identifier: 2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/UFvIXVTIg9vV9-EVzjREYyRwdtI.roa
Signing time: Tue 18 Oct 2022 17:54:52 +0000
ROA not before: Tue 18 Oct 2022 17:54:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41957
IP address blocks: 185.191.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ec:3b:e8:bd:0b:07:10:71:ff:19:0d:f3:cb:fa:c9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Validity
Not Before: Oct 18 17:54:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=505bc85d54c883dbd5f7e115ce344463247076d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:8f:99:f7:59:76:0f:4e:ef:2e:09:95:c3:
c0:00:d4:09:78:00:da:0f:8f:d8:03:e1:a6:03:1c:
12:00:d8:3f:34:2d:01:91:cd:7b:be:0f:80:b6:5e:
4b:56:e6:a9:c7:f4:96:dd:d4:fc:13:c4:f0:a5:5c:
f9:a1:59:88:58:88:ca:bc:33:97:98:21:e5:1f:76:
12:cc:5d:a0:ef:cf:04:c4:6d:3e:55:ba:9d:1c:d3:
85:7a:8a:4c:df:4c:1e:34:9c:84:c2:0f:1d:91:70:
d2:a5:90:c5:ef:6a:78:e9:a6:d5:64:0d:40:45:9f:
66:d1:ce:44:da:a5:43:48:ba:03:b0:64:bd:fa:6f:
51:a8:1d:80:3d:20:33:4f:fc:06:65:65:b8:06:75:
e7:85:11:3e:8e:24:b8:cf:1e:dc:1e:da:43:c6:cd:
56:be:d1:2e:e9:7c:e2:e7:da:fa:d8:50:50:87:16:
db:f8:1c:20:41:33:5c:ad:ef:e1:b5:ae:a9:50:01:
34:51:d9:eb:0e:16:7d:00:9f:f2:a8:64:19:08:6b:
fb:ce:85:e2:80:b7:52:33:a5:f9:c1:47:9e:29:ae:
32:b1:a9:a2:cb:bc:15:17:9b:ff:39:6f:bb:9c:94:
46:6e:df:31:e6:41:4c:da:27:2a:c1:78:d1:a7:3f:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5B:C8:5D:54:C8:83:DB:D5:F7:E1:15:CE:34:44:63:24:70:76:D2
X509v3 Authority Key Identifier:
keyid:2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/UFvIXVTIg9vV9-EVzjREYyRwdtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.213.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:7b:f2:33:9d:2b:52:66:df:98:20:19:d0:34:d9:56:c6:97:
36:1a:a4:50:db:4a:bb:aa:d1:69:86:8b:f6:ef:9b:d2:cc:e1:
6b:70:d3:d4:1b:24:82:02:ca:04:fb:dd:89:f3:d5:06:9d:03:
0d:ab:b8:aa:99:1f:8f:44:07:63:a9:cf:95:ca:ca:d1:05:6f:
f5:93:5a:78:c2:b0:0d:54:49:8e:22:dc:b8:d9:a6:c6:19:3a:
7f:18:7b:e3:8a:41:cf:c9:92:3a:87:4b:14:c2:2d:d6:c1:0c:
cd:29:37:57:52:e6:47:5c:f5:10:62:7e:65:9d:53:c2:55:07:
3b:fb:eb:08:22:43:a9:0f:7e:5f:4e:d2:b5:f0:b7:b2:97:02:
5c:84:f1:28:e9:1d:a4:ed:3e:7e:21:21:b0:7c:e2:6b:e4:58:
d8:ee:4b:e8:82:a3:bf:cf:d9:30:4e:54:72:54:b1:59:3a:34:
57:9a:db:e5:23:9f:9b:66:39:7a:9e:62:d0:fa:ff:83:79:00:
1b:eb:fb:e7:e1:63:20:d3:67:39:02:44:77:c6:b2:17:37:bd:
ba:f8:94:b7:1f:40:01:35:e0:52:90:d1:03:4e:b7:d0:0a:60:
9a:3b:27:df:71:cc:79:6e:0e:21:60:c1:82:2b:4c:d1:d8:a6:
7c:fc:5b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:13 2024 by rpki-client on console-fra.rpki-client.org