Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a6ae1b-3966-4392-9683-920da8e14df9/1/rGT1Yt6_ZhUZ7t5JrPFiQYRATyI.roa
File: rGT1Yt6_ZhUZ7t5JrPFiQYRATyI.roa (raw, json)
Hash identifier: S0o7S9yzyCz1Rsm6rynUzVySpMdY7Wlc1SvgZrXfvu8=
Subject key identifier: AC:64:F5:62:DE:BF:66:15:19:EE:DE:49:AC:F1:62:41:84:40:4F:22
Certificate issuer: /CN=09fe2693e6242973fcd072c6bae53f3c5ebc6e63
Certificate serial: 05A2FE3F
Authority key identifier: 09:FE:26:93:E6:24:29:73:FC:D0:72:C6:BA:E5:3F:3C:5E:BC:6E:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf4mk-YkKXP80HLGuuU_PF68bmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a6ae1b-3966-4392-9683-920da8e14df9/1/rGT1Yt6_ZhUZ7t5JrPFiQYRATyI.roa
Signing time: Wed 26 Jan 2022 10:50:33 +0000
ROA not before: Wed 26 Jan 2022 10:50:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 85.9.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94567999 (0x5a2fe3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fe2693e6242973fcd072c6bae53f3c5ebc6e63
Validity
Not Before: Jan 26 10:50:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac64f562debf661519eede49acf1624184404f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:95:c3:fd:0f:a5:e2:af:c9:25:86:e8:c9:
21:a7:80:85:12:10:62:c8:b7:bc:ba:d7:5f:ea:24:
18:df:8e:46:33:a9:70:ea:54:7a:c7:ee:cd:a3:4e:
b6:28:dc:bf:a9:9f:37:d1:34:f5:1d:4d:6f:b6:4b:
3f:b6:59:6f:fc:d0:a6:2c:03:01:5b:87:51:56:16:
5b:7d:10:ce:19:bf:30:60:c1:9b:9e:1c:78:1e:b3:
9b:27:c5:89:30:20:ee:e9:38:2d:85:3d:ce:8d:cf:
8b:b0:07:a9:1f:3f:f6:e4:90:04:60:24:8f:3b:8a:
15:36:94:65:0d:4e:06:92:44:bc:fa:3d:f3:a7:45:
2b:76:80:3f:e7:e2:bc:c2:a5:9d:67:8c:11:a4:cd:
c8:d3:d9:e9:ee:43:ec:1e:f2:1b:cd:f9:a4:f9:01:
cd:5c:a2:6d:b2:a6:37:a7:27:e3:3d:44:cc:9e:fe:
8c:b0:54:88:e5:49:f8:9d:13:2d:09:27:f9:d4:78:
a9:dd:4e:ba:e2:42:74:0e:80:bf:87:9e:6b:4a:85:
77:51:84:3d:1c:2e:25:0d:bc:40:ab:89:f3:64:2e:
b1:3c:29:77:c0:1e:e1:dd:29:94:05:9e:83:54:6f:
69:e6:ea:87:f5:37:27:38:90:1a:9a:75:6f:73:39:
50:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:64:F5:62:DE:BF:66:15:19:EE:DE:49:AC:F1:62:41:84:40:4F:22
X509v3 Authority Key Identifier:
keyid:09:FE:26:93:E6:24:29:73:FC:D0:72:C6:BA:E5:3F:3C:5E:BC:6E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf4mk-YkKXP80HLGuuU_PF68bmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a6ae1b-3966-4392-9683-920da8e14df9/1/rGT1Yt6_ZhUZ7t5JrPFiQYRATyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a6ae1b-3966-4392-9683-920da8e14df9/1/Cf4mk-YkKXP80HLGuuU_PF68bmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.9.192.0/18
Signature Algorithm: sha256WithRSAEncryption
77:64:df:9f:e2:70:a2:13:6a:91:7c:b2:d0:01:8e:fe:94:83:
38:8c:37:43:fb:77:5c:b1:12:8d:e9:3f:80:5c:48:37:a8:6b:
9e:0b:44:80:ce:59:fd:2b:5d:7a:68:e9:70:40:92:2d:cd:0b:
d2:9d:06:11:4b:d9:71:dd:ee:0d:81:e2:7d:f3:71:b7:4c:62:
92:3d:3f:c9:d2:4f:d0:da:de:61:11:ee:d2:e4:fa:c0:ef:66:
80:19:33:ce:71:ad:d2:f6:a0:cd:54:f5:66:09:0c:a6:1a:50:
90:ba:2c:8c:d1:04:2f:92:45:34:b1:3a:bf:6f:34:f0:39:d8:
48:9e:bb:62:5a:17:f7:64:d3:13:a5:2e:cd:7c:0d:dd:2a:ee:
82:bf:44:15:3a:93:a6:13:1d:8b:7b:9a:ac:f6:c2:af:d8:c4:
ab:94:36:c6:7e:62:5d:3e:65:6e:cc:dc:e3:0e:81:6c:c0:97:
9c:70:53:c7:a2:79:6c:63:e8:1a:3f:3b:45:4c:ae:32:d7:ad:
2c:7b:99:8a:aa:20:ff:87:94:9c:dd:35:85:51:b3:a8:37:e5:
c7:27:d3:46:94:41:61:de:3a:48:e9:dc:a6:02:40:93:a5:d6:
32:d5:67:21:e0:cf:1c:c1:4a:9c:41:a0:6d:81:49:94:42:e7:
ec:4e:77:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:59 2024 by rpki-client on console-ams.rpki-client.org