Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/51daa4-efac-4fa0-9cc3-80cf845fe6bb/1/facvTXdb0UnMq3QuU-ySzYbcPfc.roa
File: facvTXdb0UnMq3QuU-ySzYbcPfc.roa (raw, json)
Hash identifier: arWKtA7zBIhORwMMJcDLJnP5aonkh995wQVW+ll55jM=
Subject key identifier: 7D:A7:2F:4D:77:5B:D1:49:CC:AB:74:2E:53:EC:92:CD:86:DC:3D:F7
Certificate issuer: /CN=2ef95b0901243229669fea45097e296f77ef6028
Certificate serial: 01856F1DAD1E9D2FEE469020AE79198865C2
Authority key identifier: 2E:F9:5B:09:01:24:32:29:66:9F:EA:45:09:7E:29:6F:77:EF:60:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlbCQEkMilmn-pFCX4pb3fvYCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/51daa4-efac-4fa0-9cc3-80cf845fe6bb/1/facvTXdb0UnMq3QuU-ySzYbcPfc.roa
Signing time: Sun 01 Jan 2023 20:54:53 +0000
ROA not before: Sun 01 Jan 2023 20:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202774
IP address blocks: 185.155.32.0/22 maxlen: 32
2a07:9100::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:ad:1e:9d:2f:ee:46:90:20:ae:79:19:88:65:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef95b0901243229669fea45097e296f77ef6028
Validity
Not Before: Jan 1 20:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7da72f4d775bd149ccab742e53ec92cd86dc3df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:24:5e:55:ff:f0:15:46:44:f4:34:fc:69:c5:
f7:27:7b:74:b2:52:72:f6:a9:06:fb:39:f3:72:08:
c8:ce:fc:df:5a:a8:e7:7d:3e:4c:fb:d4:1c:0b:60:
43:18:d7:f6:ad:d9:04:9c:0a:e9:2a:d1:7f:05:ff:
76:2b:fa:55:69:db:bd:da:83:31:bb:7e:7d:4d:7d:
25:86:c2:c8:13:64:bc:cb:30:6b:22:fe:50:77:d8:
68:70:ff:4d:89:b7:2a:19:3c:12:d5:de:53:15:ba:
b3:53:d2:23:7a:cc:f8:93:2d:1c:be:64:3d:0b:3d:
8f:81:b6:17:d8:a7:6c:92:19:0e:26:63:eb:f0:2e:
db:59:bb:ed:2d:82:65:23:22:84:15:4a:ce:dc:6b:
ea:77:90:17:3f:07:12:57:15:a1:08:0c:e7:ca:bd:
6e:f0:b0:9e:2a:80:83:bb:9e:af:24:62:cb:d0:4b:
f0:c7:6d:ac:50:bb:4d:e5:d5:81:f8:f9:91:c4:6b:
51:81:db:c8:bc:d0:e6:87:22:ce:c8:7c:1a:e7:33:
d1:87:10:58:73:1b:a3:d3:78:d8:22:10:32:c5:16:
db:17:37:8d:58:c6:8f:a1:01:17:17:b5:70:5b:a4:
ab:25:87:77:f0:60:6e:e1:19:51:a9:fe:40:63:bf:
f5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A7:2F:4D:77:5B:D1:49:CC:AB:74:2E:53:EC:92:CD:86:DC:3D:F7
X509v3 Authority Key Identifier:
keyid:2E:F9:5B:09:01:24:32:29:66:9F:EA:45:09:7E:29:6F:77:EF:60:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlbCQEkMilmn-pFCX4pb3fvYCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/51daa4-efac-4fa0-9cc3-80cf845fe6bb/1/facvTXdb0UnMq3QuU-ySzYbcPfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/51daa4-efac-4fa0-9cc3-80cf845fe6bb/1/LvlbCQEkMilmn-pFCX4pb3fvYCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.32.0/22
IPv6:
2a07:9100::/29
Signature Algorithm: sha256WithRSAEncryption
4f:a6:1c:6d:24:c9:84:fe:2a:9b:28:67:94:2c:b2:fa:bd:01:
04:c0:81:e8:cc:91:90:79:9b:f6:f4:24:c7:1f:e1:56:6d:a8:
bd:00:23:e3:d1:e2:ad:a1:1b:14:4c:38:b8:17:17:83:0a:4e:
1e:c9:dd:ea:78:d5:6d:88:2d:da:5a:19:d6:76:7f:cf:f0:57:
f8:9a:46:ab:83:73:e5:11:d3:14:27:d2:00:75:85:db:40:b5:
36:e4:68:c9:72:1d:52:fa:45:32:0f:f5:30:0d:df:2d:e4:a1:
c6:1f:c6:1a:a9:08:97:70:12:17:01:47:3e:59:08:19:28:a3:
4b:5a:f6:51:ac:fa:44:c2:4f:7f:3d:a4:85:d6:14:f2:20:b0:
7b:66:36:b9:b2:c0:b2:93:e3:c2:89:4f:6c:c8:eb:17:5c:f6:
26:99:17:6a:09:ff:13:95:bb:74:04:6d:30:84:1c:e6:8d:bf:
4a:22:88:e6:dd:0d:0b:69:33:21:52:ec:3c:64:d5:e3:49:58:
6c:f5:2a:db:80:0e:d4:ce:7b:2e:d3:0e:0a:95:03:f0:26:df:
4c:81:25:30:06:82:08:4d:61:fa:39:05:fe:cb:96:69:8f:22:
26:30:3a:b0:08:51:9c:06:1d:28:1c:07:06:60:1e:95:3f:05:
37:e5:b1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:07 2024 by rpki-client on console-ams.rpki-client.org