Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/dvzPXVG-5uFZOw3M-N8EqJtii_U.roa
File: dvzPXVG-5uFZOw3M-N8EqJtii_U.roa (raw, json)
Hash identifier: Ycgmz6DojxJ6DMfhAoBqlMyLBI8ecHmSWVjV+s4Fii4=
Subject key identifier: 76:FC:CF:5D:51:BE:E6:E1:59:3B:0D:CC:F8:DF:04:A8:9B:62:8B:F5
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 0185720C5E0E8FE6F9558C088447E7ACA7A0
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/dvzPXVG-5uFZOw3M-N8EqJtii_U.roa
Signing time: Mon 02 Jan 2023 10:34:51 +0000
ROA not before: Mon 02 Jan 2023 10:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59776
IP address blocks: 185.72.120.0/22 maxlen: 24
2001:678:82c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:5e:0e:8f:e6:f9:55:8c:08:84:47:e7:ac:a7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: Jan 2 10:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76fccf5d51bee6e1593b0dccf8df04a89b628bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8b:2e:49:42:31:92:32:4f:e7:e0:52:2c:06:
5d:f9:9c:48:05:c2:54:3a:db:4d:4d:1b:dd:75:c6:
de:18:55:c7:fc:91:0b:5e:f8:8a:15:84:92:88:d2:
68:4a:a5:63:5e:72:1a:93:ed:f0:8c:c7:88:76:fe:
13:3b:1d:ca:11:19:fc:e9:b4:7a:20:fc:31:53:ac:
07:c5:6b:23:10:87:81:54:79:23:e2:b6:fc:0b:f6:
7c:20:20:a7:b4:6b:37:b0:38:5f:c7:31:ba:4c:81:
3c:44:96:9a:c5:fa:d9:29:cc:da:48:2b:55:48:43:
42:78:ac:85:8f:7f:c1:11:9c:42:4a:9d:19:f9:da:
e2:8e:bf:6d:2c:4d:ef:a8:3e:55:ee:cc:4e:9c:df:
c7:8e:6b:72:90:1a:b6:43:45:2c:ba:f5:d8:81:f0:
ca:57:7f:20:fe:b4:49:db:fc:24:93:4a:ba:ba:f7:
86:97:55:78:72:c2:4a:c5:e6:b0:1c:6d:31:40:0f:
e1:5e:3e:76:83:02:ba:e7:af:8b:5e:1e:e0:ee:7a:
f8:4d:a0:cc:36:b1:fa:5c:ff:38:27:51:c5:09:cd:
b1:b5:7e:b1:cc:50:e4:5e:44:f7:da:e4:22:4c:cd:
55:a4:46:8f:32:ff:d9:b6:3d:59:95:0a:41:27:c3:
04:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FC:CF:5D:51:BE:E6:E1:59:3B:0D:CC:F8:DF:04:A8:9B:62:8B:F5
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/dvzPXVG-5uFZOw3M-N8EqJtii_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.120.0/22
IPv6:
2001:678:82c::/48
Signature Algorithm: sha256WithRSAEncryption
08:48:5d:ae:6a:b8:50:72:d6:d5:9c:cf:6d:62:ec:25:b7:b7:
df:87:cb:93:94:18:0e:3e:7d:e8:75:32:37:d8:32:d2:dd:e0:
7c:1e:04:27:e9:ba:4f:b8:e8:d3:65:1e:f3:d8:d7:78:30:4a:
b2:98:7a:43:c8:d3:64:bf:7f:0f:8c:df:df:8b:5b:c6:ac:48:
7a:bd:0c:fa:49:1c:2f:40:2a:f7:97:dd:31:96:1f:93:6c:51:
25:c0:c4:44:f7:7c:68:a2:31:4a:4e:d6:6a:f1:01:e8:0e:b3:
fe:5f:56:db:54:8d:89:41:06:b8:58:ed:e9:9b:0a:6d:e6:87:
50:9f:c2:7e:7e:2a:57:cc:33:5f:d1:37:66:6f:48:7b:f5:6b:
ea:52:a0:e0:50:61:d9:02:cd:d4:81:49:0c:7b:f9:95:5e:d3:
ae:e7:eb:e7:36:62:c3:e8:ac:84:8d:35:b3:12:12:d0:b9:71:
f3:3e:f2:dd:72:35:44:3e:bf:7f:4e:44:96:f3:b6:48:c4:09:
93:bc:a6:ee:78:ab:c4:91:ad:65:11:f5:77:4c:17:d1:24:9b:
6e:20:71:a6:b4:d3:6f:05:15:a8:99:9e:53:40:d9:b2:5d:15:
01:63:ba:99:7a:2c:fc:c3:2e:6b:eb:18:fe:90:0e:6b:21:20:
e8:9f:13:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:32 2025 by rpki-client