Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/VElyCRepbu-oTIUlyk9nboD_Y2c.roa
File: VElyCRepbu-oTIUlyk9nboD_Y2c.roa (raw, json)
Hash identifier: F2vmiaeAeK44WX8Fh9tGujd1ZHlAeBIAFwgTn4YejUQ=
Subject key identifier: 54:49:72:09:17:A9:6E:EF:A8:4C:85:25:CA:4F:67:6E:80:FF:63:67
Certificate issuer: /CN=67cfd7fae20d1d34b779dab669b8f0f07c9c34f8
Certificate serial: 069C926E
Authority key identifier: 67:CF:D7:FA:E2:0D:1D:34:B7:79:DA:B6:69:B8:F0:F0:7C:9C:34:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8_X-uINHTS3edq2abjw8HycNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/VElyCRepbu-oTIUlyk9nboD_Y2c.roa
Signing time: Sat 01 Jan 2022 10:54:42 +0000
ROA not before: Sat 01 Jan 2022 10:54:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207709
IP address blocks: 185.242.162.0/24 maxlen: 24
185.242.161.0/24 maxlen: 24
185.242.160.0/24 maxlen: 24
185.242.163.0/24 maxlen: 24
2a09:cfc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110924398 (0x69c926e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cfd7fae20d1d34b779dab669b8f0f07c9c34f8
Validity
Not Before: Jan 1 10:54:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5449720917a96eefa84c8525ca4f676e80ff6367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d4:d0:fb:91:56:3a:44:5f:de:f7:6c:d8:8b:
76:e7:eb:e0:ec:5f:85:3d:97:ec:66:13:a9:42:13:
6c:96:9c:15:47:a6:6c:3a:38:41:7d:90:4e:54:30:
1a:f5:1d:c1:56:1a:34:e1:48:02:ff:ae:29:8a:f4:
4f:4f:cc:57:38:75:39:51:70:d3:d7:df:02:e8:2d:
3a:e7:61:31:08:bd:e7:ae:46:43:db:32:9a:39:9c:
f2:60:09:87:5c:e5:1b:a5:49:40:74:cf:97:3b:18:
68:c0:6e:a3:42:b1:cd:a2:c3:d6:ac:4a:43:80:f4:
1b:ca:e3:e1:bf:bd:69:fe:82:0b:7a:27:e1:07:d0:
6a:e4:05:f3:a3:e9:5c:6d:41:41:2b:57:e1:15:59:
ef:4b:41:83:b7:4f:e0:42:ff:ff:59:cd:58:66:f9:
f3:92:2d:d3:fc:78:28:25:e0:c7:a3:c2:53:e4:96:
a3:fa:5c:99:40:dc:27:3b:ed:7f:1d:38:b1:1f:eb:
bc:c4:df:b4:51:d9:58:66:08:88:00:fb:6e:d9:4f:
d7:d3:ba:54:ab:90:05:c8:85:52:30:17:95:a9:55:
9f:a9:d3:29:c2:75:4a:85:a8:6f:22:91:7b:87:0e:
9e:e8:fc:61:fe:f6:4e:52:ee:ab:50:5d:8b:40:39:
39:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:49:72:09:17:A9:6E:EF:A8:4C:85:25:CA:4F:67:6E:80:FF:63:67
X509v3 Authority Key Identifier:
keyid:67:CF:D7:FA:E2:0D:1D:34:B7:79:DA:B6:69:B8:F0:F0:7C:9C:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8_X-uINHTS3edq2abjw8HycNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/VElyCRepbu-oTIUlyk9nboD_Y2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/Z8_X-uINHTS3edq2abjw8HycNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.160.0/22
IPv6:
2a09:cfc0::/29
Signature Algorithm: sha256WithRSAEncryption
0f:7b:02:9e:7f:40:55:55:83:91:76:4e:3c:c0:56:13:bd:d1:
62:a4:75:32:d5:e8:d1:ab:e2:26:75:a5:86:97:66:8a:f1:22:
b3:71:87:da:3a:2d:b1:a5:65:87:94:7a:41:91:6c:c2:11:3b:
4e:78:06:a6:7f:10:53:df:8c:c1:e7:34:c0:7b:65:eb:45:f7:
98:ba:ed:7f:9d:2e:7c:49:ad:7b:21:e3:1b:51:ae:a1:bf:e8:
eb:94:58:33:bd:b6:62:94:e9:0c:4b:b6:cc:eb:e3:59:8c:c3:
f4:5b:de:34:6f:78:f0:6e:54:55:c1:07:8c:aa:92:9a:e5:87:
31:a5:7f:44:b7:83:78:ca:b6:9b:b0:cc:4e:46:58:3d:88:e8:
4f:1a:30:cf:05:6d:72:8a:e7:1c:30:af:9f:ba:8e:14:ad:a8:
e8:e3:cf:b6:3d:90:cc:9a:61:54:bb:11:e9:d9:bd:31:63:81:
92:f2:7a:e0:83:40:d1:62:60:58:34:66:9b:27:b7:59:12:20:
44:34:40:95:0c:0c:d1:71:a5:e8:c0:60:51:5f:e3:89:dd:e9:
af:70:d8:a1:27:b1:a5:d6:6f:d2:f2:8a:ba:92:c5:a2:8f:42:
a2:82:13:86:02:dd:03:0a:19:f1:fc:4e:e9:89:63:92:d6:45:
ed:97:b5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org