Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cd5c51-aff5-45f8-9612-dd3ddb62c719/1/keW5YrWRQtB_7qSbc1uj2OOXr4Y.roa
File: keW5YrWRQtB_7qSbc1uj2OOXr4Y.roa (raw, json)
Hash identifier: CD5ZtLBXLszJ55iTlg6IXbRvWo/2Vw1A2hQtdzy/dfQ=
Subject key identifier: 91:E5:B9:62:B5:91:42:D0:7F:EE:A4:9B:73:5B:A3:D8:E3:97:AF:86
Certificate issuer: /CN=36b59523fd549f1b4b653d3c1040ff516db6e999
Certificate serial: 01835AB0A8E1F27859FED9AB562D5B883FF3
Authority key identifier: 36:B5:95:23:FD:54:9F:1B:4B:65:3D:3C:10:40:FF:51:6D:B6:E9:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrWVI_1UnxtLZT08EED_UW226Zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cd5c51-aff5-45f8-9612-dd3ddb62c719/1/keW5YrWRQtB_7qSbc1uj2OOXr4Y.roa
Signing time: Tue 20 Sep 2022 11:37:50 +0000
ROA not before: Tue 20 Sep 2022 11:37:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211096
IP address blocks: 185.161.121.0/24 maxlen: 24
151.216.16.0/20 maxlen: 24
2a11:9600::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5a:b0:a8:e1:f2:78:59:fe:d9:ab:56:2d:5b:88:3f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b59523fd549f1b4b653d3c1040ff516db6e999
Validity
Not Before: Sep 20 11:37:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91e5b962b59142d07feea49b735ba3d8e397af86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d3:6b:58:bf:26:19:51:8b:06:81:c1:fa:25:
ef:06:89:ee:1e:66:72:55:23:9b:b2:bb:68:7e:1b:
77:af:dc:e5:c7:9e:26:6f:b0:0c:0b:a9:e0:9f:da:
40:4b:80:a8:eb:a1:84:fc:9c:b5:2a:c6:0e:de:a1:
6e:c8:59:52:ed:72:d3:55:e6:31:67:e7:33:28:a1:
ef:03:58:40:be:ec:d5:e8:4c:88:fb:19:3e:a7:95:
80:7a:cf:93:4d:96:2a:ca:90:4d:64:b5:cd:7e:4a:
c1:a9:16:0e:f4:6b:bd:b8:5a:85:72:0c:a9:8d:d2:
dd:76:c7:f3:08:71:f0:a1:0f:66:bd:7a:9e:f5:8a:
7a:ff:d5:51:38:db:fc:a1:64:02:b9:e5:61:45:68:
41:7a:5e:c0:ab:5c:5c:df:c4:3e:e6:60:63:61:21:
e8:a2:04:1b:06:a4:89:4f:fa:b5:10:48:8f:df:3e:
70:fa:20:1d:06:20:dc:7d:22:55:a7:28:af:e7:ef:
56:40:b5:06:ce:69:49:f7:cd:a2:a9:e2:ed:34:43:
4a:30:66:0a:a8:2e:22:0e:7a:44:58:35:65:93:82:
95:12:7d:57:2c:22:79:66:ae:82:77:23:40:f6:55:
c9:d8:c4:51:d3:e6:d6:ce:02:10:61:43:1e:5f:86:
fa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E5:B9:62:B5:91:42:D0:7F:EE:A4:9B:73:5B:A3:D8:E3:97:AF:86
X509v3 Authority Key Identifier:
keyid:36:B5:95:23:FD:54:9F:1B:4B:65:3D:3C:10:40:FF:51:6D:B6:E9:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrWVI_1UnxtLZT08EED_UW226Zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cd5c51-aff5-45f8-9612-dd3ddb62c719/1/keW5YrWRQtB_7qSbc1uj2OOXr4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cd5c51-aff5-45f8-9612-dd3ddb62c719/1/NrWVI_1UnxtLZT08EED_UW226Zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.16.0/20
185.161.121.0/24
IPv6:
2a11:9600::/29
Signature Algorithm: sha256WithRSAEncryption
44:4e:2d:46:a4:a5:db:97:29:1f:e2:c7:ed:af:f3:63:3a:70:
8f:37:b3:34:dd:89:50:b7:cb:45:42:97:63:1f:99:73:47:e5:
f2:5a:b7:43:f1:5c:f0:43:a0:7e:3e:fd:b5:df:98:65:df:d1:
8a:14:89:93:de:c3:54:17:a5:0f:46:1e:e4:c5:37:47:b1:1d:
16:48:fb:e8:6f:bf:cb:e6:74:74:91:f6:98:39:36:ca:9d:ca:
0a:e2:98:8d:6c:70:db:52:de:17:82:c9:a0:28:33:28:c8:ef:
52:58:7f:15:56:fe:79:ce:51:af:9a:f8:46:7b:5f:36:88:45:
88:77:a9:f2:92:3c:62:10:41:60:fc:80:15:96:12:cc:14:39:
60:6f:81:2e:db:32:6b:73:12:4d:fa:75:55:e2:50:d1:28:1e:
79:88:66:5d:45:27:7b:47:c2:da:7d:b7:04:e5:f0:5c:fd:a3:
39:6e:09:87:3f:c0:c1:20:6b:b1:35:f3:88:75:60:47:c5:dc:
3e:03:86:52:82:b7:fc:c2:ec:75:db:32:8d:14:65:de:a6:e7:
1c:1a:f7:e9:49:c1:08:5a:0f:ae:c0:ad:cc:4c:36:f8:60:34:
36:0d:26:48:11:64:74:19:ec:3c:9c:ad:ac:c3:b8:e1:99:f6:
5f:87:46:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:33 2024 by rpki-client on console-fra.rpki-client.org