Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f68113-73a7-400d-8c99-99befa476a8f/1/uR_6W18Oq04iiGpOuMUJuB4xU74.roa
File: uR_6W18Oq04iiGpOuMUJuB4xU74.roa (raw, json)
Hash identifier: gLPuIRH+7d+HVc6+RlOMMktBh0y2ZZgDk0F6HCjQqas=
Subject key identifier: B9:1F:FA:5B:5F:0E:AB:4E:22:88:6A:4E:B8:C5:09:B8:1E:31:53:BE
Certificate issuer: /CN=62fc2ed6557d0ce80e81505b1f9d580698887c6e
Certificate serial: 018570CC03BFAFBA2045C449CB68AB2FC5F7
Authority key identifier: 62:FC:2E:D6:55:7D:0C:E8:0E:81:50:5B:1F:9D:58:06:98:88:7C:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvwu1lV9DOgOgVBbH51YBpiIfG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f68113-73a7-400d-8c99-99befa476a8f/1/uR_6W18Oq04iiGpOuMUJuB4xU74.roa
Signing time: Mon 02 Jan 2023 04:44:56 +0000
ROA not before: Mon 02 Jan 2023 04:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49058
IP address blocks: 95.131.176.0/21 maxlen: 32
185.25.9.0/24 maxlen: 32
185.25.10.0/23 maxlen: 32
2a00:7b60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cc:03:bf:af:ba:20:45:c4:49:cb:68:ab:2f:c5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fc2ed6557d0ce80e81505b1f9d580698887c6e
Validity
Not Before: Jan 2 04:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b91ffa5b5f0eab4e22886a4eb8c509b81e3153be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7d:9f:45:ff:27:10:2a:8d:22:2c:6c:fc:86:
69:e7:f5:dd:1f:a2:ef:a2:83:d5:17:73:4d:c7:bf:
f6:9a:88:43:76:c8:db:b6:63:0f:37:64:83:05:42:
5b:15:c9:98:8f:06:86:7b:d3:bd:c0:2a:ac:44:c2:
6d:65:fe:00:73:60:a7:bb:ee:d3:35:57:e7:cc:23:
34:8d:02:12:2e:3a:c9:89:9f:66:b6:ca:41:73:aa:
08:29:47:4c:e1:37:6e:f3:37:c6:1a:1d:18:0a:5f:
99:f4:9e:5c:aa:6d:d2:d4:01:94:b4:cf:b7:04:0a:
a9:f1:8f:d0:44:5b:03:f1:6a:75:12:1b:69:ca:4b:
5e:72:af:3d:23:c4:c4:cd:cd:ce:40:f1:d4:8b:82:
9b:12:07:a3:5d:18:5b:66:6b:16:5a:09:e1:85:7a:
81:94:77:09:78:64:f1:2b:e0:e1:20:75:b9:71:7b:
24:03:82:93:15:a2:de:02:f0:85:a8:d5:f7:24:53:
19:f4:c5:dd:31:3d:85:a4:2f:55:b4:bc:9f:97:71:
eb:cd:be:d9:25:41:c0:7d:a6:97:bc:04:55:31:9d:
b5:cc:84:4e:21:48:5a:07:09:a5:fb:d2:8c:81:d8:
88:e1:68:4d:ac:95:02:57:42:c9:93:56:64:d8:67:
3e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1F:FA:5B:5F:0E:AB:4E:22:88:6A:4E:B8:C5:09:B8:1E:31:53:BE
X509v3 Authority Key Identifier:
keyid:62:FC:2E:D6:55:7D:0C:E8:0E:81:50:5B:1F:9D:58:06:98:88:7C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvwu1lV9DOgOgVBbH51YBpiIfG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f68113-73a7-400d-8c99-99befa476a8f/1/uR_6W18Oq04iiGpOuMUJuB4xU74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f68113-73a7-400d-8c99-99befa476a8f/1/Yvwu1lV9DOgOgVBbH51YBpiIfG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.176.0/21
185.25.9.0-185.25.11.255
IPv6:
2a00:7b60::/32
Signature Algorithm: sha256WithRSAEncryption
84:32:4d:8c:cb:79:42:da:44:a4:97:52:5d:a2:9a:7c:7f:a2:
40:19:8b:ad:3e:24:14:bc:42:00:bc:6f:f5:4f:e6:0a:b6:b9:
3b:41:08:50:fb:ae:60:91:f8:50:30:bd:30:23:3b:1a:bc:2d:
93:90:8c:97:c4:7e:db:d7:65:68:ac:fb:5d:b6:9f:e4:58:13:
28:43:d2:0d:8d:b1:d2:9d:5b:86:3f:c9:9c:0d:ab:58:56:57:
15:bd:92:2f:ae:29:29:25:63:a6:98:bc:ca:17:59:b9:10:60:
de:0c:2c:99:f6:9b:5c:5a:2e:e2:b2:69:15:07:27:f8:bc:b6:
28:7a:ef:96:b9:10:e7:f8:39:e9:72:b7:a5:ab:38:1d:0c:00:
05:00:26:75:6b:e6:c3:bf:4d:b2:9d:80:26:aa:c2:eb:a3:e2:
50:ec:eb:f8:c5:3c:cb:04:b7:46:ab:0c:0b:6f:c0:bb:11:b8:
e7:7e:76:f0:56:39:95:2f:98:ce:a3:a9:3f:33:e2:af:08:7a:
d2:1b:50:cb:b2:ca:d0:8f:c3:ef:71:28:65:58:c1:92:91:de:
e4:d6:f6:e5:aa:4c:e5:85:5f:e6:25:97:7a:65:ff:dc:00:5e:
b3:13:30:2f:20:ca:cc:c0:cf:f8:c7:66:80:96:58:d3:45:3e:
65:fc:ce:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:59 2024 by rpki-client on console-fra.rpki-client.org