Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f68113-73a7-400d-8c99-99befa476a8f/1/4MP9h9TvkkBbm_WaEcNPPyqlamI.roa
File: 4MP9h9TvkkBbm_WaEcNPPyqlamI.roa (raw, json)
Hash identifier: OXBrX2YyG5YBt1JZNc4hvWUsX8Z1wGoEA9WW79d8jJ8=
Subject key identifier: E0:C3:FD:87:D4:EF:92:40:5B:9B:F5:9A:11:C3:4F:3F:2A:A5:6A:62
Certificate issuer: /CN=62fc2ed6557d0ce80e81505b1f9d580698887c6e
Certificate serial: 04993E
Authority key identifier: 62:FC:2E:D6:55:7D:0C:E8:0E:81:50:5B:1F:9D:58:06:98:88:7C:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvwu1lV9DOgOgVBbH51YBpiIfG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f68113-73a7-400d-8c99-99befa476a8f/1/4MP9h9TvkkBbm_WaEcNPPyqlamI.roa
Signing time: Mon 04 Apr 2022 07:50:34 +0000
ROA not before: Mon 04 Apr 2022 07:50:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199624
IP address blocks: 185.8.4.0/22 maxlen: 32
185.166.240.0/22 maxlen: 32
2a0a:2100::/29 maxlen: 32
2a03:13c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301374 (0x4993e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fc2ed6557d0ce80e81505b1f9d580698887c6e
Validity
Not Before: Apr 4 07:50:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0c3fd87d4ef92405b9bf59a11c34f3f2aa56a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:82:39:c0:ee:a1:4b:7d:92:c9:51:7e:12:
33:58:49:7c:1e:0e:a9:43:e5:94:2f:09:3d:1a:6e:
53:2e:20:33:95:28:8a:08:f1:ff:fe:9b:09:6e:a5:
a7:6a:f4:4f:7e:05:2c:b8:53:ee:57:ae:a2:eb:3c:
ea:a5:20:f9:e4:54:02:95:8f:52:77:5d:e6:9a:f6:
b1:6f:f1:99:50:e0:bf:d2:40:e1:52:d3:a7:10:45:
92:c1:bb:19:a8:29:1b:8a:74:49:48:ee:47:5a:cb:
5f:69:b5:9b:07:77:c0:29:4e:fe:6c:77:36:4e:8e:
68:9c:df:8f:a1:82:3d:67:da:d4:ae:be:8e:06:9b:
2e:b3:39:4c:c4:9f:65:99:76:c0:79:f6:63:42:fe:
98:de:08:6e:36:5a:7e:e9:e9:36:e3:1b:09:08:be:
63:2d:dd:77:7b:2e:50:fa:dd:fc:04:66:f9:af:72:
79:3a:b7:dc:1a:9c:cd:f3:14:7d:b0:54:11:ad:66:
9f:e5:9d:7b:fd:92:a5:66:1c:76:b5:1b:56:8f:ad:
fb:56:00:26:f3:60:24:30:94:27:9b:93:00:7f:f8:
76:9b:bb:14:e6:c2:72:30:58:4f:86:5c:87:a8:ef:
48:18:86:d9:56:9a:db:b1:c3:c2:4c:59:5d:9a:d9:
20:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C3:FD:87:D4:EF:92:40:5B:9B:F5:9A:11:C3:4F:3F:2A:A5:6A:62
X509v3 Authority Key Identifier:
keyid:62:FC:2E:D6:55:7D:0C:E8:0E:81:50:5B:1F:9D:58:06:98:88:7C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvwu1lV9DOgOgVBbH51YBpiIfG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f68113-73a7-400d-8c99-99befa476a8f/1/4MP9h9TvkkBbm_WaEcNPPyqlamI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f68113-73a7-400d-8c99-99befa476a8f/1/Yvwu1lV9DOgOgVBbH51YBpiIfG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.4.0/22
185.166.240.0/22
IPv6:
2a03:13c0::/32
2a0a:2100::/29
Signature Algorithm: sha256WithRSAEncryption
0e:68:54:86:53:d0:d1:84:50:47:a4:ab:ad:2b:b4:90:87:25:
00:5a:a4:5e:3b:b4:61:0e:9d:c1:a5:66:2b:87:e7:7e:1a:80:
a8:1b:f9:42:34:0a:44:0b:17:ca:14:bf:7a:4a:06:3c:af:fd:
67:e4:69:63:3e:5d:0d:6a:2f:72:0c:f2:d5:24:1d:c4:eb:1a:
fc:91:05:ad:17:06:7c:62:dc:fb:c6:9a:08:07:54:e1:a7:bb:
c1:02:41:1e:dd:65:bf:bb:b7:52:a3:19:86:7a:54:ef:49:b9:
8e:6c:36:0b:81:15:11:39:66:f6:16:ab:75:59:58:dd:a0:c6:
0c:ff:38:e7:7e:00:84:4b:12:48:ac:c6:75:bf:30:35:62:63:
07:4c:cb:0f:f2:a5:2d:fc:38:6f:22:c8:eb:42:f7:36:31:3a:
f0:c0:c5:47:5e:12:60:b3:f9:7d:78:0b:e3:1d:c2:64:d0:b6:
3c:57:77:3c:89:aa:f3:2d:0f:14:67:d5:e2:b9:27:d6:d1:ef:
a6:77:72:7a:06:5d:e5:ed:57:e6:e0:a7:57:c2:0f:69:26:78:
67:49:51:ab:e8:6c:44:fe:8c:38:2b:2b:78:bd:53:f7:15:4d:
5f:25:7a:1e:7e:c3:4f:bd:8a:e9:dc:46:74:3a:ef:d0:9d:3b:
fd:51:75:c8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:59 2024 by rpki-client on console-fra.rpki-client.org