Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/94733d-1bb5-47ff-b405-8a811a86d2e8/1/jenqdJ0too5wjZZ4xDy5GihMCFc.roa
File: jenqdJ0too5wjZZ4xDy5GihMCFc.roa (raw, json)
Hash identifier: QV2TJcB/k05OL0cX2OCH+wYQfCh4/1y0IsEuuVEXGVM=
Subject key identifier: 8D:E9:EA:74:9D:2D:A2:8E:70:8D:96:78:C4:3C:B9:1A:28:4C:08:57
Certificate issuer: /CN=2914e77de53b835c0e2150c6153b23f555ff6e64
Certificate serial: 059FB7E9
Authority key identifier: 29:14:E7:7D:E5:3B:83:5C:0E:21:50:C6:15:3B:23:F5:55:FF:6E:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRTnfeU7g1wOIVDGFTsj9VX_bmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/94733d-1bb5-47ff-b405-8a811a86d2e8/1/jenqdJ0too5wjZZ4xDy5GihMCFc.roa
Signing time: Sat 01 Jan 2022 13:57:41 +0000
ROA not before: Sat 01 Jan 2022 13:57:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62172
IP address blocks: 185.37.218.0/24 maxlen: 24
185.37.216.0/22 maxlen: 22
2a04:7340:7340::/48 maxlen: 48
2a04:7340::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94353385 (0x59fb7e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2914e77de53b835c0e2150c6153b23f555ff6e64
Validity
Not Before: Jan 1 13:57:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8de9ea749d2da28e708d9678c43cb91a284c0857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:51:2a:cc:ab:3b:27:cc:1b:d5:3d:fa:8b:13:
ed:7e:52:14:10:45:ce:13:07:06:48:5d:5e:e9:ac:
e0:38:ee:92:7c:92:8e:ac:aa:b1:03:aa:1a:d8:35:
88:85:b9:b0:bb:6c:77:39:3f:1f:7e:fb:eb:73:99:
97:70:1d:23:61:fd:7a:be:10:42:b3:1e:02:09:f6:
7c:90:c2:a7:49:43:77:71:58:59:fc:ef:b9:fc:85:
78:43:64:c4:0f:f9:39:df:06:69:17:08:df:6d:19:
fa:0a:dc:73:7a:81:18:07:44:9e:9d:e8:01:4f:e5:
e1:8e:b0:0b:8a:51:0a:b0:2a:be:0e:1f:a9:97:93:
b3:4f:5a:2e:fb:69:56:5c:83:f1:69:d0:b1:ad:85:
a6:bd:b7:bc:b7:99:ae:db:bc:35:80:53:38:3f:2e:
e5:3f:6d:8a:3f:95:ac:a2:24:0d:13:63:53:9d:3c:
21:7a:48:06:36:86:68:9f:b9:8b:3f:3f:f3:34:13:
08:a4:46:8a:e7:e7:01:10:b4:4d:93:11:72:ce:1d:
bb:ff:09:46:53:2c:a2:b0:04:bb:ce:9e:68:3b:10:
ea:75:66:76:51:0a:0d:2c:cc:8e:eb:b6:2f:52:21:
f3:aa:22:4b:a6:97:bf:b2:ed:13:b9:05:94:c2:3d:
7a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E9:EA:74:9D:2D:A2:8E:70:8D:96:78:C4:3C:B9:1A:28:4C:08:57
X509v3 Authority Key Identifier:
keyid:29:14:E7:7D:E5:3B:83:5C:0E:21:50:C6:15:3B:23:F5:55:FF:6E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRTnfeU7g1wOIVDGFTsj9VX_bmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/94733d-1bb5-47ff-b405-8a811a86d2e8/1/jenqdJ0too5wjZZ4xDy5GihMCFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/94733d-1bb5-47ff-b405-8a811a86d2e8/1/KRTnfeU7g1wOIVDGFTsj9VX_bmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.216.0/22
IPv6:
2a04:7340::/29
Signature Algorithm: sha256WithRSAEncryption
04:61:e4:b6:2a:58:fd:60:b3:a3:b4:ef:8b:20:70:22:c3:51:
59:67:64:d4:36:9e:d6:c1:07:2f:29:c5:93:1c:de:5b:ec:5a:
17:ae:7c:51:ed:9f:70:b3:9c:c8:f3:ab:27:ef:7d:32:93:bd:
75:36:43:78:81:85:7a:57:e7:72:ec:4e:cf:7c:c0:f5:59:92:
dc:af:49:35:34:be:d0:47:06:3e:21:6f:ed:12:b3:e4:68:41:
ae:fb:89:aa:34:36:92:80:b7:8e:d0:60:8b:e1:e4:9d:7d:a3:
c5:70:e8:26:2a:66:3d:38:5b:cd:13:ea:66:93:55:4e:83:ad:
cf:03:37:ec:17:cc:f1:10:fc:76:5e:24:84:a4:49:26:b5:62:
26:60:c3:2b:b4:ff:a5:b2:be:28:72:0b:52:5a:5c:fb:de:57:
02:ca:30:08:41:e4:23:0b:a7:54:b3:50:e2:23:2b:44:ee:e3:
97:2e:9e:4d:2c:b6:e5:2f:06:26:61:4c:62:12:91:dd:11:07:
cb:6c:01:ec:61:a6:1c:c2:21:81:21:03:de:8d:df:f1:da:4d:
cd:63:e3:d7:90:cb:64:27:4a:26:ad:1a:ab:d4:a4:6d:70:c4:
fb:45:6d:e0:d0:aa:e7:e5:c5:40:c5:7c:f7:76:91:ea:7b:a0:
b2:07:37:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:25 2024 by rpki-client on console-ams.rpki-client.org