Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/64829d-a344-44d2-9e9d-1dd67c32b06a/1/lbUVugdxV1FNyNSAZBa8xSgU7v0.roa
File: lbUVugdxV1FNyNSAZBa8xSgU7v0.roa (raw, json)
Hash identifier: mGI2M6I2Zbovx/KZL+Zkxfleo9DLoIVTFhYt3oOC6jw=
Subject key identifier: 95:B5:15:BA:07:71:57:51:4D:C8:D4:80:64:16:BC:C5:28:14:EE:FD
Certificate issuer: /CN=85b8b21e4f5fbfdeb714d3e1b38a53817b5729ed
Certificate serial: 01835F5F17DD08FCB00642057D64548575B3
Authority key identifier: 85:B8:B2:1E:4F:5F:BF:DE:B7:14:D3:E1:B3:8A:53:81:7B:57:29:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbiyHk9fv963FNPhs4pTgXtXKe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/64829d-a344-44d2-9e9d-1dd67c32b06a/1/lbUVugdxV1FNyNSAZBa8xSgU7v0.roa
Signing time: Wed 21 Sep 2022 09:26:51 +0000
ROA not before: Wed 21 Sep 2022 09:26:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 185.212.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5f:5f:17:dd:08:fc:b0:06:42:05:7d:64:54:85:75:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b8b21e4f5fbfdeb714d3e1b38a53817b5729ed
Validity
Not Before: Sep 21 09:26:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95b515ba077157514dc8d4806416bcc52814eefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9a:2a:c0:65:3e:c1:30:92:8c:f3:7e:9b:54:
ae:79:39:b8:7c:00:72:27:f7:cc:16:21:0d:8a:01:
03:b2:23:14:2d:06:25:b0:1a:46:2b:30:a4:53:24:
05:22:46:6f:eb:7b:67:fe:fc:ed:9e:4b:c7:e7:1e:
11:7c:6b:04:e3:40:b8:6f:91:be:30:eb:fe:99:b1:
68:b3:98:97:3d:55:fc:bb:75:af:0c:d0:44:72:f5:
32:e2:9a:b3:c5:11:57:9d:1d:c7:48:ef:d9:cc:c0:
29:38:55:71:a4:70:62:1d:4a:3b:67:fd:aa:74:52:
50:5b:42:78:9c:03:1a:16:db:1a:c3:c0:cf:23:2e:
51:c4:c7:b7:fd:1c:76:65:ca:ff:49:f0:79:5a:56:
ec:a5:fd:e1:cb:e9:86:37:d8:e2:aa:e1:df:1d:33:
87:73:b3:ed:da:53:e9:00:eb:b3:53:bb:22:19:a4:
76:93:29:0b:c3:0e:f4:e0:f2:f9:a2:27:93:59:5f:
eb:4f:ad:ee:2c:7f:c3:62:12:07:19:91:9e:26:65:
75:7b:bf:41:dd:b5:10:bc:5d:10:78:19:3d:f1:f3:
92:32:db:3b:83:21:5b:a1:23:13:84:31:0b:75:9b:
7f:61:1b:24:80:f5:96:56:57:b9:ca:ba:e3:12:49:
58:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B5:15:BA:07:71:57:51:4D:C8:D4:80:64:16:BC:C5:28:14:EE:FD
X509v3 Authority Key Identifier:
keyid:85:B8:B2:1E:4F:5F:BF:DE:B7:14:D3:E1:B3:8A:53:81:7B:57:29:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbiyHk9fv963FNPhs4pTgXtXKe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/64829d-a344-44d2-9e9d-1dd67c32b06a/1/lbUVugdxV1FNyNSAZBa8xSgU7v0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/64829d-a344-44d2-9e9d-1dd67c32b06a/1/hbiyHk9fv963FNPhs4pTgXtXKe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.115.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:6b:a2:74:e2:bf:d9:01:f5:7d:a4:11:e1:dd:7b:e2:ac:fb:
fc:da:d3:d2:39:51:90:50:f6:2f:33:a5:51:0c:c1:36:b1:2b:
db:9b:cf:06:f1:94:ba:b0:67:0a:d9:84:14:a5:9c:56:1d:99:
4c:85:63:e2:93:0a:8e:ab:99:07:cd:0e:f6:07:06:57:e1:dc:
b6:ae:b0:08:f5:b3:13:c8:a8:17:3b:00:79:f7:eb:d1:81:75:
77:6c:54:4c:38:8b:82:58:25:55:32:6b:10:ee:e0:a3:36:3b:
e4:25:31:fc:2f:a1:b9:41:c8:c7:a2:8a:c0:ab:b0:2a:ef:ff:
31:03:11:c1:23:ff:8d:4c:39:18:b4:49:2f:42:e8:ea:cf:d8:
3a:a7:36:05:b8:bc:10:52:18:7e:ad:21:fd:90:1f:fa:aa:48:
d1:6f:d5:25:fe:11:71:97:cd:08:f1:3f:8c:7f:62:03:56:6d:
fd:eb:f4:94:05:60:98:96:f4:f3:19:41:e7:1a:64:58:91:d7:
2c:59:1f:cb:42:9b:f4:7c:56:33:40:5f:d7:f0:d8:69:89:c1:
96:2d:38:d9:0d:69:f1:02:e4:c5:22:17:e3:b6:a0:b1:ea:80:
2c:32:69:ac:c0:5f:52:62:64:26:20:47:a7:b1:71:9c:19:ad:
78:cb:26:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:26 2024 by rpki-client on console-fra.rpki-client.org