Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2e491c-17a8-4ee5-bc71-e04074ce613b/1/K9jrtxqd6JGh0EV-ybcipMUcuw4.roa
File: K9jrtxqd6JGh0EV-ybcipMUcuw4.roa (raw, json)
Hash identifier: gqEo3mzCOjLcdkFC2kTY015ZfHHuxSBHfN8d7JY2/oY=
Subject key identifier: 2B:D8:EB:B7:1A:9D:E8:91:A1:D0:45:7E:C9:B7:22:A4:C5:1C:BB:0E
Certificate issuer: /CN=cd57894c99db9dbf745e664a3a0d274fe16e5dad
Certificate serial: 0265C640
Authority key identifier: CD:57:89:4C:99:DB:9D:BF:74:5E:66:4A:3A:0D:27:4F:E1:6E:5D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVeJTJnbnb90XmZKOg0nT-FuXa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2e491c-17a8-4ee5-bc71-e04074ce613b/1/K9jrtxqd6JGh0EV-ybcipMUcuw4.roa
Signing time: Sat 01 Jan 2022 09:55:31 +0000
ROA not before: Sat 01 Jan 2022 09:55:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50316
IP address blocks: 92.245.184.0/22 maxlen: 24
147.123.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40224320 (0x265c640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd57894c99db9dbf745e664a3a0d274fe16e5dad
Validity
Not Before: Jan 1 09:55:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2bd8ebb71a9de891a1d0457ec9b722a4c51cbb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:73:bd:41:46:b3:4b:a1:2b:46:e4:d5:89:d5:
0a:41:c5:78:9c:82:be:32:b8:4a:68:02:8d:e9:16:
52:7e:70:fb:90:da:38:cc:ad:3a:20:83:f1:83:c9:
c1:ca:24:d9:06:a7:9d:0d:2f:0f:1d:e0:9d:69:8f:
1d:fa:d4:f5:fe:02:84:f9:19:e5:e9:a1:8b:85:f8:
fc:d2:80:01:16:57:70:a0:1c:cd:4f:a9:dd:b3:b4:
96:31:34:3b:b4:4a:4c:d7:da:14:20:75:12:f2:84:
0b:47:99:4e:74:0c:e7:e2:2e:81:06:a6:a9:f5:e8:
ae:9e:43:19:4b:d6:1a:4d:18:c2:95:f5:ca:b3:fb:
df:cb:2a:19:62:81:5f:8b:03:2d:9f:6e:08:ff:63:
2c:3e:9c:03:e6:ab:64:79:1b:b2:17:82:2c:3e:63:
32:3b:c2:aa:b7:1d:9e:a3:49:57:c4:48:49:b5:b9:
03:83:19:ba:6c:2d:cd:93:8d:a9:43:b8:6c:ae:7b:
2b:dd:a3:b8:95:cc:e5:8d:d4:4f:16:e3:da:ed:fe:
63:3e:90:e7:27:03:90:f5:3a:4d:d0:23:d6:e1:7b:
10:78:72:0a:7b:b7:e0:20:fd:19:78:81:28:67:3d:
b1:8b:c9:22:a1:b2:07:ed:94:e5:f1:2a:96:6d:4f:
f9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D8:EB:B7:1A:9D:E8:91:A1:D0:45:7E:C9:B7:22:A4:C5:1C:BB:0E
X509v3 Authority Key Identifier:
keyid:CD:57:89:4C:99:DB:9D:BF:74:5E:66:4A:3A:0D:27:4F:E1:6E:5D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVeJTJnbnb90XmZKOg0nT-FuXa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2e491c-17a8-4ee5-bc71-e04074ce613b/1/K9jrtxqd6JGh0EV-ybcipMUcuw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2e491c-17a8-4ee5-bc71-e04074ce613b/1/zVeJTJnbnb90XmZKOg0nT-FuXa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.245.184.0/22
147.123.112.0/21
Signature Algorithm: sha256WithRSAEncryption
64:22:14:8b:da:55:ac:23:58:61:0d:f7:a5:55:08:e2:bf:24:
45:58:c3:43:dc:ae:19:38:f8:10:2e:c4:d6:26:86:80:64:fd:
6c:dd:2a:7a:1d:b9:39:19:e0:2f:53:cf:0f:88:a0:a9:b1:91:
0e:02:41:85:ab:c8:1b:c2:af:16:f3:ac:46:a8:09:ba:12:85:
8a:de:94:e7:a1:e1:ac:cc:1f:de:c2:b6:32:fe:5d:bf:56:08:
3c:fb:0b:4e:5a:fa:ef:85:02:d1:fd:ed:83:44:9d:f6:82:54:
1c:3e:e6:60:ba:5a:40:f5:76:f9:d4:7b:b1:44:f4:45:44:f9:
bc:88:4f:d4:43:e8:e5:27:66:04:14:c4:a1:28:2c:e8:fd:86:
21:0b:fd:fb:0f:b3:9e:f9:1e:d1:a8:85:2d:7d:fd:f1:62:0d:
b6:77:e3:f7:69:75:0c:bc:33:58:5e:ac:da:06:f3:e4:c5:f9:
8c:e3:b3:3e:b7:46:8c:ca:ca:d0:ec:ed:7b:cb:12:3d:a1:a8:
e2:7d:43:05:78:03:10:1e:37:ee:bf:53:63:03:75:8e:4a:4b:
41:a8:93:9e:b4:e5:71:7e:c6:39:6f:2b:56:a5:58:f7:15:9b:
f3:e3:3f:b7:8f:55:58:81:cd:c4:57:2a:2e:11:fa:c6:8a:29:
f8:58:67:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:16 2024 by rpki-client on console-ams.rpki-client.org