Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/WRn6BrOq1nNyzP1uQai5a24wPC8.roa
File: WRn6BrOq1nNyzP1uQai5a24wPC8.roa (raw, json)
Hash identifier: UD3l/kxdVFqA6iuXfauoxVBZcuAd3p/ijkopjz9SLEo=
Subject key identifier: 59:19:FA:06:B3:AA:D6:73:72:CC:FD:6E:41:A8:B9:6B:6E:30:3C:2F
Certificate issuer: /CN=85c3f6a9e8550c090bc3b257f72b8f65b69a9f61
Certificate serial: 018A7F7954D1293162786FCF72A0B3F5BBC4
Authority key identifier: 85:C3:F6:A9:E8:55:0C:09:0B:C3:B2:57:F7:2B:8F:65:B6:9A:9F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcP2qehVDAkLw7JX9yuPZbaan2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/WRn6BrOq1nNyzP1uQai5a24wPC8.roa
Signing time: Sun 10 Sep 2023 14:22:52 +0000
ROA not before: Sun 10 Sep 2023 14:22:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.212.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7f:79:54:d1:29:31:62:78:6f:cf:72:a0:b3:f5:bb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c3f6a9e8550c090bc3b257f72b8f65b69a9f61
Validity
Not Before: Sep 10 14:22:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5919fa06b3aad67372ccfd6e41a8b96b6e303c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8c:33:8e:4a:6f:5e:32:0d:16:c7:67:20:ee:
b3:18:8a:06:7c:66:5b:0e:ed:ad:fa:97:59:32:5e:
fd:00:24:cf:df:9e:2e:0c:cc:4a:4e:2a:07:e3:29:
8c:0f:6c:8e:3b:59:56:34:67:0d:b5:a5:47:44:15:
33:94:06:b1:db:8a:de:37:d8:2f:ee:9d:1c:da:6c:
b6:74:42:49:f9:e3:e0:5b:6b:1a:84:99:60:a1:b3:
8a:64:26:95:04:41:38:ff:5d:a0:a4:1f:af:46:71:
9b:53:bc:1d:65:1a:0e:2b:2b:3b:01:5c:fe:61:cb:
6f:5e:29:26:74:fa:57:df:ba:38:72:db:b4:56:31:
b2:fd:97:16:9d:88:eb:df:ff:32:36:e7:60:c8:b9:
6e:c6:0f:98:81:9c:e3:e6:4a:c5:22:83:c1:eb:2c:
af:9d:66:ed:bc:7e:ce:84:fd:2b:34:9b:c6:89:eb:
28:be:3c:02:1b:6b:69:23:b5:1f:b5:ef:1b:98:4e:
6a:09:da:c0:10:da:43:a5:e4:c8:d0:69:0e:14:af:
53:36:a5:63:6e:8c:43:a2:8b:e3:41:8d:0e:a7:2e:
22:a1:25:56:ed:6c:ae:44:bc:3f:f1:d3:c7:b9:9a:
04:6a:eb:d5:95:8c:88:32:9c:13:6b:3a:a5:42:43:
0c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:19:FA:06:B3:AA:D6:73:72:CC:FD:6E:41:A8:B9:6B:6E:30:3C:2F
X509v3 Authority Key Identifier:
keyid:85:C3:F6:A9:E8:55:0C:09:0B:C3:B2:57:F7:2B:8F:65:B6:9A:9F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcP2qehVDAkLw7JX9yuPZbaan2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/WRn6BrOq1nNyzP1uQai5a24wPC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/hcP2qehVDAkLw7JX9yuPZbaan2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.119.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:9f:00:2e:64:cb:5d:07:c3:31:b9:53:f7:82:26:6a:46:ce:
3a:c1:cc:60:c0:a7:5a:82:b2:51:4e:74:c3:75:cc:ac:3d:85:
67:88:2a:32:d6:bb:53:d8:7a:b8:d7:b6:77:1b:7d:2e:20:17:
91:14:63:ab:a3:67:3d:bb:6f:52:6f:39:a0:6b:03:82:86:93:
31:c6:38:77:5c:d9:ab:78:b3:37:6e:8e:7a:94:70:0e:04:95:
8b:14:12:ff:2d:32:53:72:08:f7:fc:fc:a7:62:00:b7:3b:30:
54:24:3c:19:b3:53:00:fc:21:4c:b9:68:2c:00:5f:68:53:29:
94:cb:6e:f3:9f:7a:fd:20:5a:cc:6e:3e:33:20:70:9f:b1:ce:
13:91:2f:d1:02:79:98:b9:8c:7a:f1:8d:cf:fe:87:20:33:3f:
4f:25:f5:0a:d6:7a:c4:64:30:91:72:c8:65:74:ab:88:df:f7:
bb:fe:a7:94:ea:8d:a9:8c:35:72:29:84:69:93:5a:5f:13:66:
fc:a9:16:01:4b:f3:82:79:78:96:75:a2:2b:98:c9:87:4c:60:
95:7e:77:1c:f0:f0:28:52:13:06:3a:48:69:d5:51:7a:39:b7:
33:ad:8f:44:b8:ea:f7:09:92:c0:1f:1a:af:77:05:23:9c:23:
43:7d:08:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:03 2024 by rpki-client on console-fra.rpki-client.org