Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e19420-faf0-4fc5-a5f9-99c0f071136b/1/IzlRh7BSajEWKZeYs7zhf857_gE.roa
File: IzlRh7BSajEWKZeYs7zhf857_gE.roa (raw, json)
Hash identifier: pC8im/7Rx6+cfUo+xam+NFrNM7O61USuApFddHAI6XE=
Subject key identifier: 23:39:51:87:B0:52:6A:31:16:29:97:98:B3:BC:E1:7F:CE:7B:FE:01
Certificate issuer: /CN=691fafa6018e7006f490672d9017e1ba758f797a
Certificate serial: 0C4EE1DF
Authority key identifier: 69:1F:AF:A6:01:8E:70:06:F4:90:67:2D:90:17:E1:BA:75:8F:79:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aR-vpgGOcAb0kGctkBfhunWPeXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e19420-faf0-4fc5-a5f9-99c0f071136b/1/IzlRh7BSajEWKZeYs7zhf857_gE.roa
Signing time: Sat 01 Jan 2022 09:56:20 +0000
ROA not before: Sat 01 Jan 2022 09:56:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205199
IP address blocks: 185.241.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206496223 (0xc4ee1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691fafa6018e7006f490672d9017e1ba758f797a
Validity
Not Before: Jan 1 09:56:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23395187b0526a3116299798b3bce17fce7bfe01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e8:b6:2a:84:fa:c0:a8:e0:73:a5:42:ba:1c:
12:ac:c9:3c:49:63:3c:41:0d:9a:df:95:45:06:6f:
48:af:9e:c4:2c:fe:2d:f8:ce:4b:94:b6:52:67:e3:
d8:bc:c9:42:af:55:46:11:ff:c5:b2:2f:c9:ef:44:
18:3b:a2:99:a3:17:ea:52:82:82:2d:b0:6e:a1:e9:
99:4b:0a:b1:4a:8e:71:84:09:0e:4f:75:ab:e9:8e:
01:a8:29:55:ed:f2:a8:da:cb:bd:4d:92:e9:d7:fb:
c9:15:d2:70:05:71:2f:7d:48:28:c4:c9:4b:09:34:
15:3e:59:01:4d:25:76:d1:82:bd:a5:37:9e:ae:99:
eb:70:f5:89:e1:5c:1e:4e:79:b1:74:10:e4:71:5b:
0a:0a:16:87:8c:3f:1d:3f:8d:15:2a:db:be:81:2a:
28:90:95:80:bf:41:0b:27:1b:a7:1b:fc:34:b2:a5:
82:7f:f4:bf:89:53:6d:42:c7:6a:9a:21:c4:0f:97:
cf:18:b8:0c:dd:b4:a2:24:1c:62:db:9b:ba:78:09:
ec:df:f6:39:01:21:90:23:28:cd:72:63:a7:5c:d9:
cf:c0:1e:52:51:92:74:7f:2d:a2:72:5f:41:a0:1e:
88:39:52:a2:2d:7b:c0:33:6c:b3:c0:99:e3:54:3c:
d7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:39:51:87:B0:52:6A:31:16:29:97:98:B3:BC:E1:7F:CE:7B:FE:01
X509v3 Authority Key Identifier:
keyid:69:1F:AF:A6:01:8E:70:06:F4:90:67:2D:90:17:E1:BA:75:8F:79:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aR-vpgGOcAb0kGctkBfhunWPeXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e19420-faf0-4fc5-a5f9-99c0f071136b/1/IzlRh7BSajEWKZeYs7zhf857_gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e19420-faf0-4fc5-a5f9-99c0f071136b/1/aR-vpgGOcAb0kGctkBfhunWPeXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.172.0/22
Signature Algorithm: sha256WithRSAEncryption
15:f0:88:d0:d9:a5:ac:59:f4:40:8b:3d:7e:54:77:53:be:bd:
21:6e:d2:7b:f7:75:c0:26:a7:9b:09:ea:f5:b0:9a:62:be:8f:
f8:5c:16:ec:37:7e:5d:3d:50:21:f7:68:f7:f9:ab:e3:92:ab:
c7:4e:88:1d:3e:e7:9f:84:63:a8:fc:6e:e8:00:49:de:5c:68:
a0:26:1d:bd:63:c7:3c:08:6f:39:54:91:6f:77:64:b2:31:47:
f2:d5:59:00:3d:5e:84:3b:08:2a:9e:20:6d:0b:06:03:1e:84:
67:5b:f4:70:26:9a:fe:be:3e:9d:86:d2:89:f3:16:9c:61:e4:
39:04:6b:b4:3a:33:a1:f5:a7:02:aa:6d:a3:b3:65:00:6c:15:
7a:02:ee:76:2f:11:ee:a4:61:bf:69:7c:69:42:fa:2c:21:c4:
d5:42:d7:f5:a9:4e:b0:c5:58:ba:44:c8:bd:e3:ff:71:be:95:
55:58:df:67:38:00:df:75:1a:1a:fa:42:4d:d8:2b:a9:10:c1:
8e:8c:e3:fc:34:45:24:5b:f8:d8:f8:05:aa:36:2a:b9:fe:4f:
ba:39:f4:91:30:09:b6:03:f2:1a:cc:79:5b:4b:5b:24:8c:95:
09:3a:55:55:d8:94:57:28:bd:1e:a8:c8:01:60:e9:4e:01:fe:
23:26:ca:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:04 2024 by rpki-client on console-fra.rpki-client.org