Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/61b50b-fa57-438d-8697-36f2adc0d6c9/1/dyIwqRdFNIx09wE7i2wVyG3wbuQ.roa
File: dyIwqRdFNIx09wE7i2wVyG3wbuQ.roa (raw, json)
Hash identifier: Wakmu/byyaaSZP5C5ab9DtYZfgYlq6nVbYjb0Hgw5to=
Subject key identifier: 77:22:30:A9:17:45:34:8C:74:F7:01:3B:8B:6C:15:C8:6D:F0:6E:E4
Certificate issuer: /CN=be8bd50deed764d7aefcfd55a04b2e2357068c6c
Certificate serial: 01E68E
Authority key identifier: BE:8B:D5:0D:EE:D7:64:D7:AE:FC:FD:55:A0:4B:2E:23:57:06:8C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vovVDe7XZNeu_P1VoEsuI1cGjGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/61b50b-fa57-438d-8697-36f2adc0d6c9/1/dyIwqRdFNIx09wE7i2wVyG3wbuQ.roa
Signing time: Tue 08 Mar 2022 18:07:55 +0000
ROA not before: Tue 08 Mar 2022 18:07:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210369
IP address blocks: 185.39.11.0/24 maxlen: 24
2a12:6c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124558 (0x1e68e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8bd50deed764d7aefcfd55a04b2e2357068c6c
Validity
Not Before: Mar 8 18:07:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=772230a91745348c74f7013b8b6c15c86df06ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:be:6d:48:ba:f9:1e:3c:45:c6:3e:a2:28:0a:
39:c8:e1:37:10:55:72:aa:08:2f:8f:3c:89:07:04:
2a:51:f9:4c:d2:71:11:90:a9:a3:85:c2:5b:2b:d3:
eb:ef:0f:b7:62:8f:4d:51:9d:89:d9:2d:13:7c:2a:
07:8c:9f:7f:fb:bd:7c:9a:2e:12:c7:e6:be:84:38:
40:02:66:e9:8f:58:80:59:5b:b1:2f:0a:36:1d:1f:
ef:7f:3a:cd:f7:32:f3:b4:7c:0f:c0:aa:4d:d0:97:
b6:cf:24:ae:ba:fc:bc:a4:e7:22:6e:57:53:07:7f:
c4:7c:7a:0e:ae:1d:4f:52:9b:01:6e:4c:25:21:45:
18:64:34:2e:3d:f0:22:3b:44:3e:71:50:79:45:ca:
83:41:d3:5c:cf:7c:94:23:3b:63:2e:44:ea:30:48:
e4:d5:a7:72:5e:99:c7:19:60:b6:5c:94:2b:10:14:
2f:73:5b:4d:18:b5:62:98:e8:01:5b:a3:67:b0:01:
ae:c6:76:08:12:22:27:c8:e4:2c:30:ac:10:cf:c8:
4d:aa:05:01:39:86:6e:85:91:cb:4e:8a:84:77:b1:
11:dd:fc:ff:ec:e3:5c:d1:26:ed:75:dd:52:6c:a7:
8c:b5:98:15:80:ee:9d:57:8c:7d:92:92:05:14:21:
3e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:22:30:A9:17:45:34:8C:74:F7:01:3B:8B:6C:15:C8:6D:F0:6E:E4
X509v3 Authority Key Identifier:
keyid:BE:8B:D5:0D:EE:D7:64:D7:AE:FC:FD:55:A0:4B:2E:23:57:06:8C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vovVDe7XZNeu_P1VoEsuI1cGjGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/61b50b-fa57-438d-8697-36f2adc0d6c9/1/dyIwqRdFNIx09wE7i2wVyG3wbuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/61b50b-fa57-438d-8697-36f2adc0d6c9/1/vovVDe7XZNeu_P1VoEsuI1cGjGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.11.0/24
IPv6:
2a12:6c0::/29
Signature Algorithm: sha256WithRSAEncryption
5c:64:89:c1:f8:30:e9:b2:00:1a:0e:14:79:70:3c:d4:cc:55:
a8:c9:e2:d9:20:89:66:9d:14:8c:cb:12:d7:6b:fa:de:8b:b2:
93:c2:07:b6:5b:00:ea:a7:16:56:61:49:26:c6:2f:88:99:ce:
29:ab:a3:0b:81:f5:ca:41:39:39:8c:ce:b3:03:a5:ba:df:7e:
7a:67:72:ee:de:61:7b:9d:38:97:25:9f:67:14:b9:85:05:da:
97:6d:87:38:7f:cd:47:c7:d9:8d:cb:0a:c8:20:e4:5d:5a:b0:
8f:23:d6:9f:82:cc:59:14:e5:13:f4:a6:96:32:93:34:45:97:
97:e3:d1:9b:4a:88:7b:9d:ac:93:3a:13:fd:6c:d2:b6:f0:ea:
0b:c4:40:c4:11:54:f4:6c:f0:ff:f8:54:3f:85:00:c9:ec:d5:
f2:42:c0:58:8b:fc:c9:e3:11:c6:64:4f:cf:c4:f6:32:00:21:
d8:7a:95:08:69:fc:80:ff:c7:14:ba:bb:0d:fe:d6:6f:d9:74:
63:c1:8a:2e:5c:3b:61:84:86:9a:a2:24:16:dd:f5:8c:54:39:
3c:e0:9e:72:97:db:a8:f7:b8:04:dc:dc:7a:7c:95:08:32:dd:
0c:e1:58:bd:40:44:a3:8c:df:dc:27:3b:06:25:18:15:3f:03:
19:6c:20:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:17 2024 by rpki-client on console-ams.rpki-client.org