Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/s-DhOU7np1bIh_EuyF_RsL_fEhQ.roa
File: s-DhOU7np1bIh_EuyF_RsL_fEhQ.roa (raw, json)
Hash identifier: WJ5JcgKMOIoUf/o2o9UMZSIyeMsetK99g293Klka40A=
Subject key identifier: B3:E0:E1:39:4E:E7:A7:56:C8:87:F1:2E:C8:5F:D1:B0:BF:DF:12:14
Certificate issuer: /CN=5b34df61134c0ab9445a6ccbb3ec63eaf0fa0255
Certificate serial: 05945BFC
Authority key identifier: 5B:34:DF:61:13:4C:0A:B9:44:5A:6C:CB:B3:EC:63:EA:F0:FA:02:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzTfYRNMCrlEWmzLs-xj6vD6AlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/s-DhOU7np1bIh_EuyF_RsL_fEhQ.roa
Signing time: Sat 01 Jan 2022 03:51:22 +0000
ROA not before: Sat 01 Jan 2022 03:51:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207464
IP address blocks: 84.214.116.0/22 maxlen: 22
84.214.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93608956 (0x5945bfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b34df61134c0ab9445a6ccbb3ec63eaf0fa0255
Validity
Not Before: Jan 1 03:51:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3e0e1394ee7a756c887f12ec85fd1b0bfdf1214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cc:d7:02:e4:b9:f8:d9:94:52:2f:1b:03:fa:
30:4e:ac:16:b0:c9:27:94:30:ed:61:90:b9:c7:32:
09:b9:68:6f:3c:4d:99:0b:75:51:cf:00:05:9a:60:
a5:f5:7f:68:e1:cd:5f:72:94:77:ec:64:7d:b9:d5:
b0:b8:92:ea:0b:4f:b3:49:35:16:ce:5d:d9:99:42:
fc:4d:db:23:9f:1a:4b:6f:ec:7b:0b:de:5a:1a:48:
39:22:70:3c:c9:47:9a:cf:e4:32:74:57:85:63:2a:
cd:9b:ec:76:06:e5:13:91:a1:77:2c:64:46:bd:7a:
20:c5:17:cc:4b:b3:dd:9f:86:f2:bc:ee:1c:76:03:
ba:9e:bc:32:63:d2:33:7d:05:56:6e:48:b2:b6:0f:
1c:e2:26:77:0d:3a:ee:0a:08:55:0f:0a:ae:47:4e:
9f:b7:21:68:5d:ce:1b:ff:f5:2e:09:63:1a:19:a0:
5e:6b:6e:a7:75:ee:a3:0f:90:54:6c:2f:d9:19:e6:
34:36:5b:b4:1f:08:f4:b0:df:78:09:42:19:03:6e:
16:bb:f8:cf:4f:9b:53:5b:54:13:f9:ad:a4:a9:b7:
1e:d0:c0:7b:fd:5b:c4:72:1f:f3:49:eb:06:16:5f:
aa:fb:2c:a2:57:38:9d:63:76:4f:3d:ea:23:14:b0:
c1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E0:E1:39:4E:E7:A7:56:C8:87:F1:2E:C8:5F:D1:B0:BF:DF:12:14
X509v3 Authority Key Identifier:
keyid:5B:34:DF:61:13:4C:0A:B9:44:5A:6C:CB:B3:EC:63:EA:F0:FA:02:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzTfYRNMCrlEWmzLs-xj6vD6AlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/s-DhOU7np1bIh_EuyF_RsL_fEhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/WzTfYRNMCrlEWmzLs-xj6vD6AlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.214.116.0/22
84.214.232.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:a4:b2:17:2d:e2:58:00:1c:4a:91:15:9b:dc:04:80:76:71:
24:8a:a0:cd:bc:f0:36:b3:b8:d4:b2:12:d4:60:01:d8:4a:8f:
ab:d7:36:dd:98:f2:91:db:31:47:fe:bf:ae:78:5a:f0:5f:60:
a7:e8:53:db:09:de:c4:0d:3c:f8:be:31:24:98:09:6a:f7:3b:
34:1e:86:f9:57:04:f6:0c:7f:56:2c:89:4d:48:e6:09:23:f4:
de:a4:e4:91:54:2b:85:3e:24:a0:e0:36:e3:8d:64:a0:66:d4:
a8:c9:65:77:65:e0:db:f5:40:c9:98:1d:ce:4d:ce:a5:0f:9c:
d7:29:d2:d1:e7:2b:5d:ff:fc:c4:8f:43:89:bb:a7:d8:a6:a2:
59:81:d2:32:a1:69:95:30:d3:95:26:7c:d6:fe:c9:ce:ea:7f:
dc:e9:3a:ec:4f:30:46:5e:f8:1f:dc:95:a4:00:83:81:d0:33:
e8:0c:0d:9f:98:37:b9:cd:28:e0:16:db:8b:98:98:f0:a6:6b:
c1:b7:1c:93:fc:b4:6f:c4:7e:8c:5f:04:5b:f7:b1:d3:c1:61:
fa:df:fb:09:5e:b5:d2:ca:71:ae:ab:12:62:84:18:75:d4:10:
2c:8a:90:fd:34:bc:94:4c:3f:1f:26:4b:2a:6d:4b:e5:52:7d:
ca:96:ec:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:53 2024 by rpki-client on console-fra.rpki-client.org