Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/59dad2-e6eb-44f5-9e3a-69ac4d9d5f88/1/dFKKJ9SfBaQcAhyhbuntGQx3Lxc.roa
File: dFKKJ9SfBaQcAhyhbuntGQx3Lxc.roa (raw, json)
Hash identifier: dcBh8OPCrFW5SEeTko0qBOdMK2J7oKrChzyI/aBiqvs=
Subject key identifier: 74:52:8A:27:D4:9F:05:A4:1C:02:1C:A1:6E:E9:ED:19:0C:77:2F:17
Certificate issuer: /CN=07d37ed8c9bc05e7572a907fc62abb2dedec9537
Certificate serial: 3426EEFA
Authority key identifier: 07:D3:7E:D8:C9:BC:05:E7:57:2A:90:7F:C6:2A:BB:2D:ED:EC:95:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9N-2Mm8BedXKpB_xiq7Le3slTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/59dad2-e6eb-44f5-9e3a-69ac4d9d5f88/1/dFKKJ9SfBaQcAhyhbuntGQx3Lxc.roa
Signing time: Sat 01 Jan 2022 05:59:34 +0000
ROA not before: Sat 01 Jan 2022 05:59:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50986
IP address blocks: 193.34.202.0/24 maxlen: 24
31.170.24.0/21 maxlen: 21
185.27.96.0/22 maxlen: 22
178.236.64.0/20 maxlen: 20
2a02:1610::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 874966778 (0x3426eefa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d37ed8c9bc05e7572a907fc62abb2dedec9537
Validity
Not Before: Jan 1 05:59:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74528a27d49f05a41c021ca16ee9ed190c772f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:58:bd:ea:d6:b0:0d:70:9b:7f:71:78:57:87:
36:79:cc:64:22:75:92:62:40:ed:8d:13:d2:b1:70:
9f:b3:00:00:ed:fa:c5:8c:d8:a5:d9:5a:7d:d8:ef:
3a:c3:d3:ec:99:a9:31:52:bb:79:95:7e:e4:b0:8a:
c6:ef:98:de:8b:1e:11:88:01:f2:64:09:86:b3:5a:
fd:44:c6:83:ad:8b:73:e0:07:27:93:bd:f4:b8:39:
52:ea:04:ea:42:66:c2:ff:9f:a2:0e:5c:12:00:4b:
2f:c1:7b:7c:ff:d9:0e:1e:da:01:5b:2f:59:9c:ad:
ba:72:83:10:65:c1:41:e7:65:20:87:64:5b:d3:fd:
5a:a8:ae:32:c5:ff:82:97:98:d6:9e:98:40:4f:50:
40:81:59:36:7b:f6:fb:e0:18:31:8e:e0:94:0c:a1:
77:50:88:c6:49:75:86:a0:92:8a:f1:c0:f2:5e:90:
52:7d:dd:34:12:b6:ca:2a:8d:d6:26:5f:4f:a8:54:
9c:97:d4:ae:c5:1f:39:f6:ac:4a:95:6c:35:73:7c:
b9:3f:bd:fa:73:2a:b1:ff:30:eb:be:05:4f:f3:79:
e5:d7:48:9e:91:56:bc:f1:f5:28:07:10:bf:d4:c8:
5e:d3:73:5a:66:5c:1d:e7:6a:40:e7:2e:43:da:d0:
a2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:52:8A:27:D4:9F:05:A4:1C:02:1C:A1:6E:E9:ED:19:0C:77:2F:17
X509v3 Authority Key Identifier:
keyid:07:D3:7E:D8:C9:BC:05:E7:57:2A:90:7F:C6:2A:BB:2D:ED:EC:95:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9N-2Mm8BedXKpB_xiq7Le3slTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/59dad2-e6eb-44f5-9e3a-69ac4d9d5f88/1/dFKKJ9SfBaQcAhyhbuntGQx3Lxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/59dad2-e6eb-44f5-9e3a-69ac4d9d5f88/1/B9N-2Mm8BedXKpB_xiq7Le3slTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.24.0/21
178.236.64.0/20
185.27.96.0/22
193.34.202.0/24
IPv6:
2a02:1610::/32
Signature Algorithm: sha256WithRSAEncryption
4e:0c:3d:e5:68:02:b7:8b:e3:c7:89:80:05:39:52:09:9a:d1:
c4:40:13:cc:b1:01:85:cd:84:a3:27:83:06:4b:05:bd:9a:58:
4e:df:e2:be:6f:63:38:f4:7a:e8:d3:eb:1d:38:01:ba:e1:77:
ec:4d:fc:ba:3f:02:b9:2d:3f:91:08:fb:ff:bd:52:82:11:75:
59:ed:b4:33:23:1a:b0:ca:8f:5c:9d:10:74:45:2b:8c:1b:80:
5a:bd:8f:a0:11:6c:08:07:35:e7:c5:e8:c3:84:d4:f1:ad:77:
eb:45:df:d8:e6:70:2e:49:47:97:65:b9:db:67:f6:6d:36:68:
5b:4b:92:db:82:2c:88:7e:28:8a:56:99:7e:2b:a4:c3:6e:e2:
88:3a:c7:d0:25:dd:cb:d8:57:98:10:72:7b:ad:5a:56:b8:18:
c6:b6:e6:e3:3d:e1:a6:88:3e:eb:f1:2d:42:50:18:97:bf:d1:
10:47:be:5a:06:41:10:e1:15:25:03:f5:db:50:9e:a2:98:6f:
51:84:cf:8b:cb:81:f3:f4:71:be:16:9e:a2:e7:be:4b:cb:bc:
71:a7:ff:5c:96:d6:a8:af:9e:6c:bd:04:bb:c0:c5:6f:bd:25:
22:b6:0f:af:df:f8:68:90:7c:df:1b:5f:22:8e:4f:35:4f:00:
70:dd:e7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:56 2024 by rpki-client on console-ams.rpki-client.org