Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/3dl8UJ9SEApuPC-y5WDt5Pa__m0.roa
File: 3dl8UJ9SEApuPC-y5WDt5Pa__m0.roa (raw, json)
Hash identifier: idrNcguoYMvmOzcr0Lo+3RZn3Lcs5sY/B+ACJHQ8Yww=
Subject key identifier: DD:D9:7C:50:9F:52:10:0A:6E:3C:2F:B2:E5:60:ED:E4:F6:BF:FE:6D
Certificate issuer: /CN=262738c0d2dae04b3c9ec5504852f7ad74ce2152
Certificate serial: 0183E5F67ED2B6659970830161259B029684
Authority key identifier: 26:27:38:C0:D2:DA:E0:4B:3C:9E:C5:50:48:52:F7:AD:74:CE:21:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jic4wNLa4Es8nsVQSFL3rXTOIVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/3dl8UJ9SEApuPC-y5WDt5Pa__m0.roa
Signing time: Mon 17 Oct 2022 12:41:20 +0000
ROA not before: Mon 17 Oct 2022 12:41:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 85.209.132.0/24 maxlen: 24
85.209.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e5:f6:7e:d2:b6:65:99:70:83:01:61:25:9b:02:96:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262738c0d2dae04b3c9ec5504852f7ad74ce2152
Validity
Not Before: Oct 17 12:41:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddd97c509f52100a6e3c2fb2e560ede4f6bffe6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:ee:02:b3:19:05:60:61:a1:e8:19:68:d6:
84:ab:7c:ef:e9:77:bf:09:f7:a7:69:8a:59:5b:cd:
da:7e:a7:b5:37:80:20:68:bc:49:da:c6:1c:0f:5b:
aa:9f:43:26:4d:39:d8:fe:8b:7b:0f:e9:c6:bb:b5:
cd:6d:7c:2b:91:7f:ee:87:d3:81:37:43:3f:7a:d5:
52:d8:5b:31:53:75:43:a7:65:1a:22:cf:e1:58:08:
64:91:bb:76:84:53:e2:0a:4d:ea:34:66:98:36:71:
6d:6c:44:26:35:14:5d:71:b6:f3:43:36:f9:f4:5d:
ba:99:09:92:c3:74:8a:61:3f:e5:b4:92:84:d0:74:
7e:ef:1a:c8:5a:4c:fa:65:af:64:62:a8:36:82:e7:
45:0e:93:58:0b:b6:06:da:be:c4:a0:8c:30:55:5b:
01:34:6b:90:90:ab:f2:78:0a:92:06:31:5f:3e:fd:
52:a8:cf:66:15:a9:42:64:d6:7f:2f:50:b8:ee:c6:
cf:04:f8:23:21:cd:07:d9:a1:a7:53:84:cc:1b:8b:
2b:bd:95:ef:1e:19:c9:05:2a:68:39:43:c4:5c:44:
57:c1:e5:ea:f1:6e:ce:72:47:01:41:cd:f3:ff:dc:
b1:b7:ad:b7:76:4f:6e:b9:08:f0:93:27:2a:a1:ca:
67:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D9:7C:50:9F:52:10:0A:6E:3C:2F:B2:E5:60:ED:E4:F6:BF:FE:6D
X509v3 Authority Key Identifier:
keyid:26:27:38:C0:D2:DA:E0:4B:3C:9E:C5:50:48:52:F7:AD:74:CE:21:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jic4wNLa4Es8nsVQSFL3rXTOIVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/3dl8UJ9SEApuPC-y5WDt5Pa__m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/Jic4wNLa4Es8nsVQSFL3rXTOIVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.132.0/24
85.209.135.0/24
Signature Algorithm: sha256WithRSAEncryption
33:fd:6b:f4:3f:07:4f:3e:1a:9d:db:78:86:dc:43:38:cb:07:
de:96:fc:58:a4:0f:36:e5:42:df:bb:76:6e:1c:a3:99:6b:47:
22:7b:ce:65:03:45:10:1e:ce:c1:b6:4e:58:2f:d4:de:57:24:
dc:50:dd:94:20:24:bf:ca:50:5f:a9:36:cb:da:91:92:44:d9:
1f:11:0e:0d:89:0a:ad:88:11:cd:f1:d8:eb:ce:ec:75:4a:ac:
1a:b7:e3:16:3a:c1:0b:1e:8a:b2:57:86:fc:4b:61:f4:68:a8:
6b:cb:96:9e:5e:a3:ed:66:11:a6:02:e9:91:40:20:a7:f0:4d:
d0:fd:80:02:08:94:3d:8c:42:e0:3e:84:99:d3:9c:de:93:df:
90:54:bf:6a:88:e7:6b:c7:67:f5:0d:23:e1:f8:e4:2a:3f:b6:
21:cf:78:33:29:e2:c5:e2:bb:9f:54:4d:bf:e6:59:e0:79:96:
0a:bf:cf:c8:94:73:d5:34:61:d5:4f:ae:1f:a6:08:85:57:fc:
50:c5:39:c1:01:3f:ac:06:63:b5:5e:55:54:d4:33:80:51:c2:
87:28:70:7f:80:cb:50:93:ba:07:ab:6d:f7:69:ee:1f:41:e6:
1a:28:6c:47:63:0b:62:44:53:59:e3:93:e2:56:1f:aa:3e:0b:
b0:c9:56:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:01 2024 by rpki-client on console-fra.rpki-client.org