Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/wPZhufDWUVSC6D-OjIDbNLPpkSA.roa
File: wPZhufDWUVSC6D-OjIDbNLPpkSA.roa (raw, json)
Hash identifier: BlDuoOOENuQxpg8wAdzBkb51AgBXsKYC7RBwsexIfcA=
Subject key identifier: C0:F6:61:B9:F0:D6:51:54:82:E8:3F:8E:8C:80:DB:34:B3:E9:91:20
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 018341C3DF40702C4331B066050EB1AE4FFB
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/wPZhufDWUVSC6D-OjIDbNLPpkSA.roa
Signing time: Thu 15 Sep 2022 15:28:19 +0000
ROA not before: Thu 15 Sep 2022 15:28:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 85.209.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:41:c3:df:40:70:2c:43:31:b0:66:05:0e:b1:ae:4f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Sep 15 15:28:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0f661b9f0d6515482e83f8e8c80db34b3e99120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:73:e8:03:46:1c:88:55:12:36:80:5b:ba:56:
4f:a3:1d:43:c7:e5:7f:fe:72:29:d0:dd:22:8c:96:
53:fb:64:92:c1:40:1a:48:ae:0d:bd:9f:0e:d5:06:
50:ec:a2:b2:11:24:31:7a:00:11:4e:0c:2e:99:4b:
32:0e:76:cf:7c:fe:93:cd:45:62:28:8e:a4:cd:66:
2c:60:8f:b3:a7:dd:5a:d5:a8:ce:4e:df:27:73:e3:
d6:ea:12:cb:e6:f9:7f:c5:18:0e:67:ff:5b:c8:84:
fc:34:ed:0b:7e:81:aa:72:ef:76:34:66:8c:35:a3:
6d:b8:a5:90:bc:e9:c9:7c:2b:58:54:4d:3c:3d:0a:
49:f3:38:e9:74:79:4a:b7:41:9d:82:97:98:c1:4c:
e1:a0:00:34:80:f4:84:16:b1:22:85:10:6e:1a:89:
92:a6:5d:b7:07:be:77:32:03:ef:de:77:4a:65:43:
46:9c:7d:8a:29:56:08:c2:0e:70:0d:90:01:d2:2f:
be:8a:ca:d6:73:7c:c2:b8:d5:0e:1c:62:a9:ea:4a:
5a:2c:74:b3:75:73:0c:3e:55:15:cf:13:4a:f0:64:
ff:43:ec:39:d1:55:73:dc:da:aa:d3:d0:ef:78:df:
40:50:c1:83:63:60:92:a9:98:f2:73:3e:57:e5:97:
0e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F6:61:B9:F0:D6:51:54:82:E8:3F:8E:8C:80:DB:34:B3:E9:91:20
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/wPZhufDWUVSC6D-OjIDbNLPpkSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.229.0/24
Signature Algorithm: sha256WithRSAEncryption
21:88:8e:30:c8:0a:aa:43:e1:65:6d:6c:be:86:54:2a:34:71:
81:26:c9:74:db:98:6d:92:7d:56:6e:4f:04:c0:fb:7e:3e:d6:
b9:75:f8:4e:21:1a:fb:0f:ad:64:e3:c7:e6:5d:8b:71:9c:a5:
bb:36:40:b9:98:0a:ae:96:30:6b:54:a2:a9:b7:d6:ab:11:10:
6d:b1:5f:82:f7:49:97:d0:10:da:73:0d:38:18:6f:56:1c:6e:
c9:50:4e:4d:92:6f:46:54:1d:8c:34:a5:5d:d3:54:57:c6:e7:
33:75:ba:37:68:fa:ff:ef:c5:8c:7a:e2:55:f8:05:37:3b:b2:
e5:c8:01:60:3e:79:04:7b:f6:d5:b3:fb:32:c3:6a:7c:c1:7f:
24:19:16:69:7f:21:d0:1f:96:cb:9c:e0:5b:d3:45:0c:ed:28:
40:1b:63:2c:42:01:97:a5:aa:2b:75:fd:09:a3:14:21:14:f8:
df:d4:36:19:8e:a0:fd:8c:3c:e5:b2:5a:df:cb:e5:f9:72:41:
95:86:9f:73:6d:ee:4b:92:b5:32:3f:7d:9d:c7:69:38:d7:09:
bc:e3:68:78:ad:07:8b:43:b1:f3:15:46:93:ca:ba:36:46:4c:
fb:00:c9:58:4b:a9:50:ce:d1:6e:aa:9a:5b:e6:c1:a1:31:c4:
32:47:67:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:42 2024 by rpki-client on console-fra.rpki-client.org