Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/9xYbReG5t3o3r0IphDlw5L9vRPk.roa
File: 9xYbReG5t3o3r0IphDlw5L9vRPk.roa (raw, json)
Hash identifier: 1mg9+eOvgVa7mPUjCRRwVToBNRpVdz7zcbozqN6Xz2s=
Subject key identifier: F7:16:1B:45:E1:B9:B7:7A:37:AF:42:29:84:39:70:E4:BF:6F:44:F9
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 0504F55B
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/9xYbReG5t3o3r0IphDlw5L9vRPk.roa
Signing time: Fri 15 Apr 2022 18:39:12 +0000
ROA not before: Fri 15 Apr 2022 18:39:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 85.209.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84211035 (0x504f55b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Apr 15 18:39:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7161b45e1b9b77a37af4229843970e4bf6f44f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:71:39:82:d5:12:6b:3e:f3:a7:a2:a0:78:d7:
3b:b9:f1:12:a0:1f:16:93:46:ee:9a:b6:fe:1d:4c:
aa:2d:ef:93:35:7e:16:31:ab:b7:82:9c:d0:6c:d8:
6f:8c:66:7d:3a:40:16:51:be:b8:40:29:f7:70:1c:
2c:73:24:80:c1:7d:11:63:d8:26:ec:75:fc:19:8e:
5e:29:5f:a2:69:ef:ae:54:b4:4e:ea:8d:d7:b4:41:
39:37:1d:3f:73:4c:bf:b5:61:6c:34:16:5f:96:3c:
20:a7:9d:06:9c:47:2c:45:8c:7c:1d:5d:48:0a:e8:
1f:02:55:23:70:bc:f9:91:1d:86:06:ac:d8:0c:a0:
17:d0:3c:d0:8a:d8:ef:81:b2:b8:cd:2b:49:71:51:
05:02:b1:2d:22:23:8b:89:e7:4a:c7:d1:90:42:65:
3e:51:df:99:cb:b9:0f:7d:dc:2a:54:a0:a7:4c:60:
42:75:c6:ac:41:79:72:a7:46:ec:3c:15:29:09:d6:
4a:3d:ad:90:66:52:0d:af:49:48:5b:a1:c8:5c:36:
45:dd:42:7c:93:73:cd:f4:1c:9d:13:72:46:f4:da:
af:88:8f:46:d9:1d:30:07:e1:7b:61:21:a5:25:57:
38:ab:0b:2a:96:86:07:d3:aa:8d:e1:ca:db:53:61:
ea:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:16:1B:45:E1:B9:B7:7A:37:AF:42:29:84:39:70:E4:BF:6F:44:F9
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/9xYbReG5t3o3r0IphDlw5L9vRPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.229.0/24
Signature Algorithm: sha256WithRSAEncryption
19:d2:e0:20:c7:cb:9d:02:61:f4:25:4d:51:ff:e0:3d:ee:a8:
0f:6f:d9:42:1a:07:ce:60:02:ee:77:4b:68:c5:b7:46:cb:f9:
6d:27:73:19:c3:e4:72:20:49:10:41:d8:3f:aa:aa:cf:2c:53:
5e:0e:f6:5c:b3:79:aa:1a:ab:18:6e:15:b8:5e:a7:61:c5:1b:
48:61:ba:b5:a0:d0:f5:ff:b3:c3:77:de:e5:92:ff:33:bc:3d:
a6:77:fc:e1:b3:48:fa:ab:a8:85:37:85:d0:20:9b:ce:6a:79:
0d:7b:94:a4:08:a7:2b:6c:1c:1b:f0:b0:4f:d2:71:98:6b:44:
b3:69:63:b6:d7:cd:a6:1a:b1:94:7a:28:ae:c8:d6:11:f6:ab:
c7:e7:9f:95:30:d1:21:fe:32:4a:32:38:69:c9:94:dc:24:f6:
b1:28:76:2b:d6:5f:0a:bf:28:39:99:6d:31:88:0b:13:7d:71:
59:29:be:28:59:32:f1:82:d8:9c:29:de:77:6b:18:5f:46:55:
41:31:3b:e1:ab:ce:7c:b6:8b:0c:e8:d4:d4:f7:1a:d6:0e:5e:
bf:4b:01:bf:90:5a:b0:3a:8d:a7:84:d1:ae:f2:c4:e0:f5:d7:
9d:c0:a2:98:71:b8:0c:fc:27:8c:a7:cc:d2:f9:a0:35:f5:b3:
30:32:e7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:42 2024 by rpki-client on console-fra.rpki-client.org