Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/51daa4-efac-4fa0-9cc3-80cf845fe6bb/1/IqRBgcEFaEtTXPB8cdKey-dwhV4.roa
File: IqRBgcEFaEtTXPB8cdKey-dwhV4.roa (raw, json)
Hash identifier: gSPB7Dv4UZ5BVyF/gqv3WOUo/+5Rk5pcpnlu7/hpnvk=
Subject key identifier: 22:A4:41:81:C1:05:68:4B:53:5C:F0:7C:71:D2:9E:CB:E7:70:85:5E
Certificate issuer: /CN=2ef95b0901243229669fea45097e296f77ef6028
Certificate serial: 0D90810F
Authority key identifier: 2E:F9:5B:09:01:24:32:29:66:9F:EA:45:09:7E:29:6F:77:EF:60:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlbCQEkMilmn-pFCX4pb3fvYCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/51daa4-efac-4fa0-9cc3-80cf845fe6bb/1/IqRBgcEFaEtTXPB8cdKey-dwhV4.roa
Signing time: Sat 01 Jan 2022 10:05:06 +0000
ROA not before: Sat 01 Jan 2022 10:05:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202774
IP address blocks: 185.155.32.0/22 maxlen: 32
2a07:9100::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227574031 (0xd90810f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef95b0901243229669fea45097e296f77ef6028
Validity
Not Before: Jan 1 10:05:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22a44181c105684b535cf07c71d29ecbe770855e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f0:18:dd:9e:a8:e1:31:5b:30:aa:0a:e7:09:
e7:a0:cd:84:2c:13:44:7e:52:58:35:99:da:f5:82:
14:a4:ef:5f:f7:cb:07:72:80:51:af:61:dc:90:cb:
a3:78:5b:05:96:0d:03:f3:f5:80:b2:dd:8c:ac:72:
e7:b4:a7:39:d5:8d:6a:e7:8a:f3:06:62:bb:a0:b4:
2b:8d:fb:eb:0a:eb:e7:c2:e5:f1:ca:69:de:70:83:
df:f4:b4:9e:6c:83:e9:00:c5:77:af:b5:e1:06:17:
e6:07:78:6a:a4:4a:3c:cb:7f:25:8e:91:ae:bd:f1:
c1:56:c4:53:0d:33:e6:16:bc:2a:5f:a0:14:73:c4:
df:56:d0:82:e3:20:c2:66:01:9f:a4:5a:3b:b3:f3:
31:69:1f:7f:6d:06:56:6c:90:f2:ca:a1:d7:f5:4f:
29:72:49:40:a6:7e:0e:77:b4:57:77:e7:a5:57:82:
db:27:ba:d3:f5:53:16:db:cc:b8:ef:46:e5:ec:bf:
e6:93:5b:ab:81:17:75:fe:3d:10:e3:67:53:a6:cd:
fa:9f:98:74:e1:71:b3:90:36:6b:a8:7e:c0:4e:a8:
c6:ac:ef:28:0d:1c:e3:a0:4d:4b:65:62:5c:2f:f5:
ac:d7:50:18:4d:45:1f:4b:db:17:03:18:1e:83:c4:
49:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A4:41:81:C1:05:68:4B:53:5C:F0:7C:71:D2:9E:CB:E7:70:85:5E
X509v3 Authority Key Identifier:
keyid:2E:F9:5B:09:01:24:32:29:66:9F:EA:45:09:7E:29:6F:77:EF:60:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlbCQEkMilmn-pFCX4pb3fvYCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/51daa4-efac-4fa0-9cc3-80cf845fe6bb/1/IqRBgcEFaEtTXPB8cdKey-dwhV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/51daa4-efac-4fa0-9cc3-80cf845fe6bb/1/LvlbCQEkMilmn-pFCX4pb3fvYCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.32.0/22
IPv6:
2a07:9100::/29
Signature Algorithm: sha256WithRSAEncryption
0c:0e:16:ac:b3:a8:71:8e:4c:35:e8:c7:7f:b4:53:78:b7:c7:
22:67:1b:77:1e:99:9a:1b:f5:97:ce:f8:03:d9:fb:ff:75:e5:
bb:ad:df:8f:26:0f:8c:ee:52:d6:bb:53:17:25:64:16:43:1f:
07:4a:79:2c:60:71:2e:51:c0:5e:1b:94:5c:50:f5:47:15:0b:
f0:26:be:05:64:ac:db:0c:f2:70:70:ad:8a:9b:76:18:ce:45:
b3:08:19:42:1d:38:61:34:90:44:ca:63:d0:ae:c3:cd:12:55:
3c:ef:67:82:b2:d8:79:86:5d:79:20:f1:cf:56:ca:d3:52:e7:
48:11:83:39:a4:b7:78:d7:96:a7:bb:e8:36:31:7d:7c:29:13:
55:1d:67:8f:76:9a:6d:35:1f:7c:87:35:e1:33:42:63:a2:40:
70:61:28:1d:58:4c:2a:3b:7a:5c:84:17:e2:f7:f6:14:f0:1c:
52:40:15:0f:66:ce:05:c3:65:f2:ca:36:f3:02:0c:be:c5:2d:
f9:f1:b0:ec:2a:2a:31:82:d0:f3:45:3f:3b:65:76:f7:4e:39:
a4:20:db:b0:f5:f7:27:e6:19:d3:99:d5:7f:08:81:d6:6b:30:
06:77:c3:85:8f:a1:1f:85:26:7c:e0:a5:ad:b0:eb:2b:e3:a5:
c3:47:fa:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:03 2024 by rpki-client on console-fra.rpki-client.org