Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/LYzGOyUvt8PCTQik_hzBFID5ed4.roa
File: LYzGOyUvt8PCTQik_hzBFID5ed4.roa (raw, json)
Hash identifier: 6Rf2naheJuIYIgah7jM+W7dss9yGQmd/mMhaKXRGSy8=
Subject key identifier: 2D:8C:C6:3B:25:2F:B7:C3:C2:4D:08:A4:FE:1C:C1:14:80:F9:79:DE
Certificate issuer: /CN=85c3f6a9e8550c090bc3b257f72b8f65b69a9f61
Certificate serial: 0181DCBD0B4F4A354AC2E2E5C910C92CD7C0
Authority key identifier: 85:C3:F6:A9:E8:55:0C:09:0B:C3:B2:57:F7:2B:8F:65:B6:9A:9F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcP2qehVDAkLw7JX9yuPZbaan2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/LYzGOyUvt8PCTQik_hzBFID5ed4.roa
Signing time: Fri 08 Jul 2022 07:36:25 +0000
ROA not before: Fri 08 Jul 2022 07:36:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 185.212.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:dc:bd:0b:4f:4a:35:4a:c2:e2:e5:c9:10:c9:2c:d7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c3f6a9e8550c090bc3b257f72b8f65b69a9f61
Validity
Not Before: Jul 8 07:36:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d8cc63b252fb7c3c24d08a4fe1cc11480f979de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9e:b9:b0:41:71:73:01:b1:77:08:76:cc:06:
f3:dc:4f:36:29:1d:09:22:8a:8c:aa:cc:f0:8e:66:
76:dd:a7:5b:e5:77:22:8e:04:78:f0:5d:31:33:04:
e3:f7:57:8c:1f:dd:ad:dd:1d:c6:34:1e:9a:42:2a:
eb:08:b3:3a:10:e7:8d:f6:6c:1a:b4:7a:06:99:af:
a1:8c:60:6a:df:6b:76:17:db:75:46:d4:63:90:03:
64:ca:84:39:9e:08:f2:7b:77:18:5d:ab:6a:c2:b1:
f5:85:9f:0e:9a:01:a7:46:4b:b3:5c:96:4b:83:b9:
53:49:18:91:d5:e2:26:3d:71:de:19:c4:2a:d0:fc:
a6:08:d7:c3:46:5d:a8:11:a1:2c:2e:76:66:37:a3:
90:4f:de:57:fb:97:a1:91:a5:fb:6a:0e:0d:ed:84:
2e:16:47:2d:e5:92:4c:49:c3:30:9b:4e:ef:dc:bc:
81:bd:db:c6:37:06:60:d7:5a:82:bd:68:ce:e4:32:
10:3d:de:39:4b:bb:0e:0e:e8:75:56:b4:3c:09:6a:
e7:0b:4f:14:b3:ef:80:9f:55:96:7a:7d:a8:02:81:
a2:d1:4a:37:8b:19:e4:6a:7f:eb:e0:73:6f:3f:ca:
6f:e8:71:5e:9b:1d:f1:53:12:5c:f5:21:2e:7b:57:
48:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8C:C6:3B:25:2F:B7:C3:C2:4D:08:A4:FE:1C:C1:14:80:F9:79:DE
X509v3 Authority Key Identifier:
keyid:85:C3:F6:A9:E8:55:0C:09:0B:C3:B2:57:F7:2B:8F:65:B6:9A:9F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcP2qehVDAkLw7JX9yuPZbaan2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/LYzGOyUvt8PCTQik_hzBFID5ed4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/hcP2qehVDAkLw7JX9yuPZbaan2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.119.0/24
Signature Algorithm: sha256WithRSAEncryption
08:c9:01:60:3d:35:a7:64:85:00:85:a5:7a:a0:cb:f4:98:f3:
54:6f:a5:99:d3:f1:0b:fc:7f:47:f7:6b:40:88:b5:32:93:4e:
73:9b:12:ea:46:eb:c6:32:67:9c:3d:1d:8e:28:36:ed:4c:81:
ab:36:8b:4a:d1:e7:b4:43:73:9b:29:c7:1a:e1:a9:cd:90:80:
e3:61:2d:0d:6d:88:25:49:ea:26:4e:fd:0c:01:2e:a3:2b:81:
6b:2a:4f:47:07:ab:1b:77:cb:40:c4:5a:cf:9f:a2:a1:ac:d2:
f3:cf:d4:7b:f3:a5:66:5a:6f:71:ca:ec:4f:0f:2a:57:bc:a8:
29:65:65:50:d6:18:fc:50:8a:7b:b1:eb:68:f3:86:06:c5:ab:
e3:99:22:c2:34:8e:f0:7c:62:eb:a2:06:f7:11:9b:a6:e0:ee:
74:fb:51:3a:15:2e:9a:35:d0:88:f5:fa:2b:f9:0e:48:a9:ef:
89:36:0d:0c:90:6a:ad:ba:de:5d:e5:2d:fb:79:9f:80:4c:7b:
a1:cb:37:59:f6:f0:27:15:88:8a:34:41:c0:c0:1e:db:9c:73:
fa:25:de:de:fe:6e:4b:7e:39:b5:71:50:a7:64:34:90:dd:ab:
8c:9f:3a:fc:6f:34:95:f5:0b:d0:2b:d3:a9:bc:e2:72:4a:be:
17:2b:ec:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:24 2024 by rpki-client on console-ams.rpki-client.org