Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/dzvRGMKMvS_eParLLr4vixio09c.roa
File: dzvRGMKMvS_eParLLr4vixio09c.roa (raw, json)
Hash identifier: vT47kRvqMotSSXsGbEoAWCP2JMLjde9X00Ba7e56SOM=
Subject key identifier: 77:3B:D1:18:C2:8C:BD:2F:DE:3D:AA:CB:2E:BE:2F:8B:18:A8:D3:D7
Certificate issuer: /CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
Certificate serial: 018373C45074E5B0123395C7643DF0AD6495
Authority key identifier: 62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/dzvRGMKMvS_eParLLr4vixio09c.roa
Signing time: Sun 25 Sep 2022 08:29:48 +0000
ROA not before: Sun 25 Sep 2022 08:29:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44709
IP address blocks: 185.139.231.0/24 maxlen: 24
195.238.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:73:c4:50:74:e5:b0:12:33:95:c7:64:3d:f0:ad:64:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
Validity
Not Before: Sep 25 08:29:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=773bd118c28cbd2fde3daacb2ebe2f8b18a8d3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6c:bf:84:1c:2d:a6:be:cb:a6:ae:57:c0:2f:
2d:cc:f0:d9:46:9a:b3:48:16:24:d3:be:c6:28:1b:
a4:39:7a:2b:8f:bc:ba:58:79:af:ba:05:97:89:18:
0f:c2:12:a6:fd:d2:43:51:f9:3e:c7:76:24:14:5a:
8a:ec:7a:6b:e4:20:54:1f:af:8e:93:08:77:63:78:
bc:20:68:b7:9f:5a:1c:24:40:a1:15:e0:c0:2f:86:
e0:28:11:59:4e:1d:e6:60:2d:3d:67:96:f3:40:bc:
d1:44:a9:54:07:77:17:ba:42:86:bd:b0:a1:9f:d2:
90:16:ab:ce:b9:ed:d9:0e:20:d9:30:ae:2d:cc:48:
e9:8f:55:ee:7b:2c:d5:93:36:b9:33:84:93:73:8b:
2d:f4:a2:92:ee:2a:15:95:b2:ce:9d:dc:a3:f3:b5:
ca:6e:6c:21:65:ef:e8:25:7b:33:c0:9a:5e:ea:47:
76:51:91:70:50:14:78:cc:f0:2e:8d:4b:44:71:a0:
6c:31:9e:fe:fe:d6:d4:74:89:69:d5:99:81:75:ed:
02:89:20:81:a7:62:b2:d4:5f:1a:13:94:95:74:1d:
d7:7c:af:75:f4:de:82:b2:f9:54:71:d8:d6:4f:63:
7d:8c:f6:10:b6:a6:f6:71:d3:76:72:61:e3:5c:48:
7d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3B:D1:18:C2:8C:BD:2F:DE:3D:AA:CB:2E:BE:2F:8B:18:A8:D3:D7
X509v3 Authority Key Identifier:
keyid:62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/dzvRGMKMvS_eParLLr4vixio09c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/YkHuLESs6KczhMJVrXfGwfBFJIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.231.0/24
195.238.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:c8:96:f7:25:f7:75:95:4e:cf:9a:ea:17:0e:05:b9:90:7d:
d6:f6:a0:2b:58:c4:1c:18:69:98:58:20:33:dd:b9:b0:3e:57:
11:42:fa:80:a1:43:7a:4b:f0:e6:91:00:32:e5:89:5f:8e:87:
92:51:f4:5c:61:3e:85:0d:a7:4f:38:f6:3f:06:b9:68:c8:86:
7c:56:c9:9c:d9:27:bd:ee:6d:8d:75:26:0a:79:77:ba:5f:5c:
8e:21:4a:d6:31:4b:fa:11:aa:f1:bb:2c:fc:9a:43:8d:8f:d9:
ef:c4:dd:f3:ef:5d:2c:59:3c:ad:ee:89:4f:0f:00:5d:9d:8f:
23:55:fb:33:6d:80:d9:7a:a7:b0:82:1e:22:b9:e8:d9:6e:7a:
7d:16:a4:83:96:5f:af:f0:8c:5f:ab:87:81:4c:0b:44:8c:fc:
72:f6:eb:7d:73:e5:80:51:98:34:58:86:aa:64:a4:4a:f4:4e:
e1:42:60:10:bf:55:a4:e3:6a:46:5b:b5:ab:1c:0d:73:9e:13:
6b:09:7a:86:40:0e:6d:37:ea:4b:b7:dc:23:b3:02:56:92:d2:
0c:2b:1c:67:91:6b:30:37:da:c0:27:c9:cb:47:02:77:13:25:
25:20:e5:f0:8d:76:9d:2e:ca:04:96:23:7f:30:f0:b4:a7:69:
df:9a:0d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:11 2024 by rpki-client on console-ams.rpki-client.org