Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/vR_ifvhlISu8TUDiX3t8-xvTsQg.roa
File: vR_ifvhlISu8TUDiX3t8-xvTsQg.roa (raw, json)
Hash identifier: yI894IKiu4kOyGGiqj7qhuLSEzaq6vsUP4hDqD+bKEY=
Subject key identifier: BD:1F:E2:7E:F8:65:21:2B:BC:4D:40:E2:5F:7B:7C:FB:1B:D3:B1:08
Certificate issuer: /CN=d997d06eda361d935588e427f3d9833f8f7d1d20
Certificate serial: 06F8FEEE
Authority key identifier: D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/vR_ifvhlISu8TUDiX3t8-xvTsQg.roa
Signing time: Sat 01 Jan 2022 00:56:19 +0000
ROA not before: Sat 01 Jan 2022 00:56:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51269
IP address blocks: 194.147.47.0/24 maxlen: 24
194.147.67.0/24 maxlen: 24
194.146.126.0/24 maxlen: 24
185.163.124.0/22 maxlen: 32
2a0b:b800::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116981486 (0x6f8feee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d997d06eda361d935588e427f3d9833f8f7d1d20
Validity
Not Before: Jan 1 00:56:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd1fe27ef865212bbc4d40e25f7b7cfb1bd3b108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b0:54:f5:ff:eb:43:1d:0f:98:b0:cf:5e:78:
6d:04:bb:28:2e:66:b7:84:a3:37:78:68:e0:a3:c6:
81:a3:8d:fe:e3:41:02:d8:e9:f0:29:81:59:c5:4e:
fe:4e:c4:00:01:18:4f:2d:7c:f4:f3:b2:10:2d:9a:
75:cc:91:47:7f:43:9f:22:dd:08:4f:c3:b8:b3:19:
96:02:5e:94:94:6c:04:62:32:3c:44:73:ec:0e:08:
00:9b:b5:65:da:85:8a:dd:91:f5:27:87:15:6c:90:
57:aa:f6:9a:20:a1:a4:78:20:79:2a:96:29:65:f5:
63:2c:6f:ba:eb:3d:21:00:c4:c0:0f:23:e0:bc:0f:
f9:15:b9:67:e3:22:c5:db:d9:30:d7:06:7c:0a:64:
4b:e0:bc:d5:87:cd:c7:ea:34:11:49:0d:72:b2:2d:
a6:30:25:f6:c2:b7:84:f8:ed:2b:90:5b:bd:96:99:
d3:19:b0:da:63:c3:63:af:1a:76:91:eb:c6:76:f5:
6e:47:34:15:9b:57:df:91:f8:83:d1:5d:ab:76:6b:
13:46:e7:57:dc:45:a2:55:b0:f2:94:63:2a:0a:69:
cc:2b:23:86:b0:3d:da:3f:42:16:5b:6c:68:05:ed:
f9:10:d7:ba:9f:81:67:0f:8d:45:89:bd:04:63:f8:
04:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1F:E2:7E:F8:65:21:2B:BC:4D:40:E2:5F:7B:7C:FB:1B:D3:B1:08
X509v3 Authority Key Identifier:
keyid:D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/vR_ifvhlISu8TUDiX3t8-xvTsQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/2ZfQbto2HZNViOQn89mDP499HSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.124.0/22
194.146.126.0/24
194.147.47.0/24
194.147.67.0/24
IPv6:
2a0b:b800::/29
Signature Algorithm: sha256WithRSAEncryption
7d:44:4e:cf:fb:0a:8e:79:6e:da:0a:90:c9:be:07:36:41:08:
35:06:78:f0:5c:2e:79:67:4e:42:4b:e6:a5:17:8a:0f:15:b8:
aa:21:5c:e7:5a:e7:b8:95:4c:71:e8:58:b6:2c:3a:8b:5c:30:
bc:a1:02:a8:80:e5:c4:0e:7e:28:63:01:aa:59:4f:ce:5d:f8:
b8:0f:a9:86:17:2a:6e:5c:32:39:b6:1d:20:8b:59:2d:ed:e9:
19:a1:c8:e7:fa:1a:ee:62:88:22:44:26:cd:72:9f:b2:ba:92:
60:6b:12:a5:aa:5f:f5:48:92:dc:f4:be:e9:85:bd:ce:17:a1:
4a:c4:39:3c:b1:95:58:2e:df:16:5d:44:a0:30:81:24:0c:30:
cc:2a:50:fc:ae:2d:b1:43:d0:93:7d:54:cf:76:65:6e:68:15:
28:15:7d:c1:34:4b:d4:cf:a2:b0:c8:97:98:ab:c2:07:84:47:
ca:fc:0d:97:0e:74:2b:3e:52:69:32:6f:64:1a:ea:94:b7:1e:
44:55:b9:66:d0:ed:cd:fd:bc:3e:00:e0:53:92:e9:3d:cb:af:
e6:c4:97:13:d0:cc:e3:c8:1e:31:fe:f1:fd:60:0b:b0:ee:2d:
59:ec:d8:c1:3c:88:e5:25:83:d5:82:61:7b:ce:44:47:73:4f:
05:46:0a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:12 2024 by rpki-client on console-ams.rpki-client.org