Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/T0rXaKVyMFojLNhsjlUZJ0CxHk4.roa
File: T0rXaKVyMFojLNhsjlUZJ0CxHk4.roa (raw, json)
Hash identifier: MAw4JxoUBXbbtZkf+cnQqU/tqyii2EWqDn42gw+vI/o=
Subject key identifier: 4F:4A:D7:68:A5:72:30:5A:23:2C:D8:6C:8E:55:19:27:40:B1:1E:4E
Certificate issuer: /CN=262738c0d2dae04b3c9ec5504852f7ad74ce2152
Certificate serial: 09EBBF22
Authority key identifier: 26:27:38:C0:D2:DA:E0:4B:3C:9E:C5:50:48:52:F7:AD:74:CE:21:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jic4wNLa4Es8nsVQSFL3rXTOIVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/T0rXaKVyMFojLNhsjlUZJ0CxHk4.roa
Signing time: Fri 15 Apr 2022 10:11:55 +0000
ROA not before: Fri 15 Apr 2022 10:11:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 85.209.132.0/24 maxlen: 24
85.209.135.0/24 maxlen: 24
85.209.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166444834 (0x9ebbf22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262738c0d2dae04b3c9ec5504852f7ad74ce2152
Validity
Not Before: Apr 15 10:11:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f4ad768a572305a232cd86c8e55192740b11e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c5:62:75:37:9d:ba:34:d6:f4:3d:e2:0e:26:
72:a1:47:61:c5:56:eb:14:ca:ad:0e:9f:c3:d3:15:
5b:91:0b:9c:a2:7d:e4:18:84:33:74:67:5f:e6:16:
40:5c:f5:be:4f:3f:7c:6e:00:70:b5:67:9b:cc:12:
9f:56:9b:5b:a1:aa:02:0d:57:b0:64:2a:0c:44:27:
e1:a5:64:a0:e2:1e:10:a2:d7:d1:5d:13:a0:0f:30:
7f:42:42:4c:fc:4e:58:f6:16:c0:db:1d:d5:24:98:
d1:29:6e:a3:95:59:54:ef:e0:68:ef:12:99:89:db:
53:e4:e2:cb:69:75:75:d7:e9:9a:fa:36:56:9c:19:
f4:dd:36:af:78:85:2a:e5:37:03:ba:c6:2d:c0:60:
45:e6:a6:8f:ff:08:34:91:1d:cf:ac:d9:9c:33:e1:
82:0d:f3:9b:a1:76:50:c0:bb:b3:dd:c8:6a:78:a2:
18:64:a4:d8:34:56:43:5a:ae:05:e8:5e:48:3f:22:
d3:91:a0:9d:2f:2e:dd:61:ac:e4:4b:48:c4:00:27:
55:98:02:00:3f:33:50:29:27:b6:f3:bf:f9:dd:9a:
d1:2a:71:34:d8:3c:fc:86:31:17:5f:c8:84:b1:bf:
1a:1a:37:81:77:1e:de:ac:aa:bf:4a:ba:c2:69:7e:
6e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4A:D7:68:A5:72:30:5A:23:2C:D8:6C:8E:55:19:27:40:B1:1E:4E
X509v3 Authority Key Identifier:
keyid:26:27:38:C0:D2:DA:E0:4B:3C:9E:C5:50:48:52:F7:AD:74:CE:21:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jic4wNLa4Es8nsVQSFL3rXTOIVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/T0rXaKVyMFojLNhsjlUZJ0CxHk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/Jic4wNLa4Es8nsVQSFL3rXTOIVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.132.0/23
85.209.135.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:e8:2f:ab:fe:09:52:14:fe:7e:35:76:8f:e5:05:5e:f7:4e:
28:ab:1b:cc:56:1b:d6:d6:6a:10:af:b8:ef:bf:05:5b:ca:79:
64:2c:80:dc:5c:77:56:78:b7:85:25:16:70:52:aa:0e:a0:23:
41:51:1b:72:c6:e8:5c:68:f8:d8:83:5d:86:66:18:e2:70:18:
52:2e:a4:2d:75:4b:f6:8e:8c:3b:c4:f8:f4:35:84:59:ff:d4:
b4:77:0b:25:97:77:e9:cd:f1:ed:e9:22:0a:aa:ab:34:ee:9b:
98:63:19:24:36:0e:27:a0:a0:f2:05:34:e3:05:50:39:33:55:
cc:02:22:50:4b:d5:19:1b:ff:91:6d:7d:96:dc:05:40:54:17:
65:95:cd:91:c5:13:7a:70:bc:0e:9c:a5:4a:05:c3:a7:7d:a5:
09:ce:1e:66:70:e9:22:18:00:8c:86:71:3a:8e:92:8e:91:4e:
cc:8f:7c:8d:ca:58:18:29:a6:a9:75:92:16:cf:15:fb:69:b7:
88:dc:7d:6d:05:0a:4a:22:ed:6a:af:d0:2d:b7:36:21:18:13:
43:af:19:43:7d:c1:af:b7:b7:ac:01:20:f1:d7:1b:8a:40:4f:
59:a9:64:61:c5:e1:1d:e6:ce:9a:fe:14:e4:f6:00:1e:f8:44:
47:dd:41:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:18 2024 by rpki-client on console-ams.rpki-client.org