Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4bd35c-1e0f-45dc-a419-86014b064a63/1/Et8Q624OXblayavwHQaVt1zLvRo.roa
File: Et8Q624OXblayavwHQaVt1zLvRo.roa (raw, json)
Hash identifier: 8ZyhKPnez8oV7ZOLIawSnUoLih1AYkHAByfV6QQ1l/A=
Subject key identifier: 12:DF:10:EB:6E:0E:5D:B9:5A:C9:AB:F0:1D:06:95:B7:5C:CB:BD:1A
Certificate issuer: /CN=672b4a95678d98d408e3788e822f84a74d7738ef
Certificate serial: 02256662
Authority key identifier: 67:2B:4A:95:67:8D:98:D4:08:E3:78:8E:82:2F:84:A7:4D:77:38:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZytKlWeNmNQI43iOgi-Ep013OO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4bd35c-1e0f-45dc-a419-86014b064a63/1/Et8Q624OXblayavwHQaVt1zLvRo.roa
Signing time: Sat 01 Jan 2022 16:05:25 +0000
ROA not before: Sat 01 Jan 2022 16:05:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200774
IP address blocks: 185.96.192.0/24 maxlen: 24
185.96.193.0/24 maxlen: 24
185.96.195.0/24 maxlen: 24
185.96.194.0/24 maxlen: 24
2a00:58c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36005474 (0x2256662)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672b4a95678d98d408e3788e822f84a74d7738ef
Validity
Not Before: Jan 1 16:05:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12df10eb6e0e5db95ac9abf01d0695b75ccbbd1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9f:16:bc:79:82:91:eb:4f:b0:ac:ed:a9:1e:
81:60:04:e7:34:7a:29:05:19:c3:0e:44:bf:7a:27:
61:74:78:24:41:0f:b2:89:9a:36:9a:39:49:fa:06:
5c:db:4d:da:70:3f:59:30:10:f1:fb:0d:7c:08:21:
8b:29:1f:6e:94:92:6a:91:b8:17:16:63:3a:c0:ba:
c6:99:a2:c0:d0:f3:5e:cc:a6:6b:dd:5d:a1:41:ff:
aa:8f:60:d2:07:6d:38:96:92:32:e7:00:9a:b2:92:
a6:9e:fc:37:d4:36:eb:9d:4a:c7:46:73:94:f8:9f:
b1:6a:37:73:3c:94:6d:e4:1b:72:fe:45:7b:09:f3:
6e:35:c2:ee:e2:ba:ec:04:e5:9f:a7:45:ed:37:b3:
3b:1c:bf:5f:67:46:44:b1:ad:fb:76:a1:cb:56:00:
ab:ef:5b:d7:d0:10:7c:e5:46:5b:2f:50:19:5d:06:
f4:2c:c6:2d:6c:ef:df:78:e3:4a:2b:9b:df:9f:79:
3a:71:21:58:3d:5a:b4:85:df:4c:2d:5d:b5:09:58:
f0:12:d4:0c:fa:fa:a9:0d:72:af:81:01:1b:f8:de:
5a:2e:96:bc:47:97:6f:44:bd:5f:1b:76:87:00:f3:
b2:1e:5f:a5:8d:75:cb:b0:50:e2:81:b2:49:ed:1d:
6e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DF:10:EB:6E:0E:5D:B9:5A:C9:AB:F0:1D:06:95:B7:5C:CB:BD:1A
X509v3 Authority Key Identifier:
keyid:67:2B:4A:95:67:8D:98:D4:08:E3:78:8E:82:2F:84:A7:4D:77:38:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZytKlWeNmNQI43iOgi-Ep013OO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4bd35c-1e0f-45dc-a419-86014b064a63/1/Et8Q624OXblayavwHQaVt1zLvRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4bd35c-1e0f-45dc-a419-86014b064a63/1/ZytKlWeNmNQI43iOgi-Ep013OO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.192.0/22
IPv6:
2a00:58c0::/48
Signature Algorithm: sha256WithRSAEncryption
21:f8:b5:0e:bc:11:69:b3:fd:ab:62:2e:6c:c9:c4:fd:c5:59:
ac:f1:d6:57:95:95:9b:66:5e:89:9d:c1:fa:2a:51:fe:c4:5f:
0b:3a:50:17:67:50:dd:c0:d5:20:90:43:5e:1d:80:7e:5c:79:
63:5b:bf:42:bf:10:9c:ae:1e:af:1e:e9:ff:e3:91:d2:89:71:
32:e5:2c:7a:3f:7f:c9:7c:b5:38:54:ac:e1:32:d8:1b:21:99:
f5:25:df:81:c9:21:59:00:97:19:3e:5e:f7:67:00:ff:5c:70:
aa:17:c6:ee:76:5e:d7:c6:f6:64:8f:46:cd:6b:a3:4a:da:cb:
7c:31:c3:35:c8:74:f9:f5:80:94:f2:84:ec:9e:3c:7b:44:e3:
5d:7f:0b:b0:13:b6:b3:ff:45:e4:bd:f9:6e:2e:0b:66:8e:a7:
5b:89:2b:9e:29:b1:30:d5:2b:7c:1f:46:79:6e:c7:c8:65:a3:
61:7e:fe:7a:81:78:d5:0f:c4:74:14:c3:b4:a2:2d:d2:86:9c:
6f:0e:93:74:aa:58:2b:53:47:b5:ee:69:bc:d9:44:97:91:b3:
86:2c:c0:51:70:f2:65:f1:15:02:52:37:7b:76:49:cb:9b:cd:
e7:90:d6:40:b6:6c:b1:47:81:4c:6b:a8:22:f9:15:50:ee:18:
54:2e:32:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:08 2024 by rpki-client on console-ams.rpki-client.org