Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/RKpNN6HX6rddj1pGoasGOSIholw.roa
File: RKpNN6HX6rddj1pGoasGOSIholw.roa (raw, json)
Hash identifier: K+odxv6EyoP/fn/3+5UpQS0t4aV5kbOxu7Wk+iCqGy4=
Subject key identifier: 44:AA:4D:37:A1:D7:EA:B7:5D:8F:5A:46:A1:AB:06:39:22:21:A2:5C
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 0579385E
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/RKpNN6HX6rddj1pGoasGOSIholw.roa
Signing time: Thu 02 Jun 2022 17:23:22 +0000
ROA not before: Thu 02 Jun 2022 17:23:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 85.209.228.0/24 maxlen: 24
85.209.230.0/24 maxlen: 24
2.59.60.0/24 maxlen: 24
194.31.194.0/23 maxlen: 23
194.31.195.0/24 maxlen: 24
194.31.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91830366 (0x579385e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jun 2 17:23:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44aa4d37a1d7eab75d8f5a46a1ab06392221a25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c2:d4:0e:5f:fe:b2:ca:d1:cd:48:cb:b6:86:
8a:b6:56:43:16:da:24:9d:89:01:95:d5:df:5c:87:
bd:7b:99:06:f5:83:6f:91:0d:b9:d5:c8:3d:15:19:
57:76:21:43:2b:50:e6:14:ba:7b:9f:5f:9b:f0:f5:
6b:95:e1:c7:ec:9e:55:0e:cb:b4:17:ed:1d:ea:43:
ea:96:32:d5:4a:f6:f7:97:db:0c:70:ac:f2:26:ee:
04:9a:43:21:9c:98:82:cb:c6:2c:a3:4e:d8:98:ba:
0b:6f:98:14:96:c1:89:ca:53:5f:f4:5e:2f:23:23:
6e:95:0f:98:c5:2f:c5:b0:7d:2a:5e:1f:ce:01:cb:
80:4e:b6:81:72:3e:56:58:ba:b8:84:71:ab:20:4a:
32:38:45:05:65:89:d7:08:3c:e5:40:d1:8d:79:2b:
59:61:39:eb:78:de:d7:a9:41:ef:9c:46:97:6e:87:
09:04:e1:4c:98:2a:42:e3:fa:ff:63:dc:e8:f4:5b:
87:a7:a9:72:77:99:91:de:1f:6b:35:93:f3:57:6f:
65:81:58:d0:2f:bc:fb:5c:e9:0e:56:1b:b2:b6:7d:
e8:93:f1:96:b1:72:a7:d6:d1:db:a8:54:28:0b:5d:
a5:f7:d2:02:7b:8f:c5:6d:8b:ab:eb:ff:64:a2:09:
25:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AA:4D:37:A1:D7:EA:B7:5D:8F:5A:46:A1:AB:06:39:22:21:A2:5C
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/RKpNN6HX6rddj1pGoasGOSIholw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.60.0/24
85.209.228.0/24
85.209.230.0/24
194.31.194.0-194.31.197.255
Signature Algorithm: sha256WithRSAEncryption
b0:f2:7d:94:98:df:24:5c:8f:94:ea:c7:9a:dd:3c:0d:9e:66:
11:56:29:63:e6:12:7e:4a:63:18:1e:12:e6:61:d9:29:af:e7:
9d:60:5c:7e:d7:1f:7d:a8:ab:47:97:be:44:af:84:b8:17:0b:
52:2c:f1:51:9a:22:24:7a:7c:84:25:91:5b:ce:47:7b:b1:fd:
68:a3:6a:57:9c:65:e6:3b:6b:31:e6:76:0b:d2:fa:3c:14:08:
a4:94:af:2e:65:15:41:cc:33:eb:03:c6:be:5c:e1:c0:18:86:
15:da:f4:d4:d8:9f:78:71:aa:4d:c4:9a:db:c0:d3:b9:17:39:
8f:91:d5:3f:28:f7:30:e5:66:42:6f:9e:01:7f:2d:2f:7b:5d:
78:6a:4a:ca:74:77:52:e8:c5:32:15:e8:dd:80:02:37:b4:49:
b2:25:d8:b9:a3:fc:12:ea:96:ea:92:69:26:1b:82:74:07:b0:
c7:22:94:d5:24:97:c1:b8:1c:64:6e:31:35:e5:fb:c6:43:86:
f0:9f:5d:e4:2d:93:cd:eb:16:37:3b:9c:09:1d:bc:22:15:b6:
0c:a1:31:c9:ea:22:da:0a:c4:c9:e0:76:be:6f:3b:85:73:d8:
fe:ec:16:3d:77:d9:c5:4a:b5:4b:fe:a9:e3:26:65:2a:4e:74:
79:2c:5f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:42 2024 by rpki-client on console-fra.rpki-client.org