Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/_4b3BWmHPF82mKdVHal9Bi5fnJo.roa
File: _4b3BWmHPF82mKdVHal9Bi5fnJo.roa (raw, json)
Hash identifier: bkFPpK1Kk8aghfD/iEXl+G5grfKONPQshG/MQjtXU3w=
Subject key identifier: FF:86:F7:05:69:87:3C:5F:36:98:A7:55:1D:A9:7D:06:2E:5F:9C:9A
Certificate issuer: /CN=262738c0d2dae04b3c9ec5504852f7ad74ce2152
Certificate serial: 018456D891E8D679FBB834C83A8A47BCD520
Authority key identifier: 26:27:38:C0:D2:DA:E0:4B:3C:9E:C5:50:48:52:F7:AD:74:CE:21:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jic4wNLa4Es8nsVQSFL3rXTOIVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/_4b3BWmHPF82mKdVHal9Bi5fnJo.roa
Signing time: Tue 08 Nov 2022 10:45:44 +0000
ROA not before: Tue 08 Nov 2022 10:45:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 85.209.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:d8:91:e8:d6:79:fb:b8:34:c8:3a:8a:47:bc:d5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262738c0d2dae04b3c9ec5504852f7ad74ce2152
Validity
Not Before: Nov 8 10:45:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff86f70569873c5f3698a7551da97d062e5f9c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c2:f5:6f:75:33:6d:81:de:0c:34:56:5b:b7:
00:a0:7a:f3:ab:a7:85:b4:95:b0:77:7e:a6:ad:05:
a9:cd:26:ca:b8:63:81:51:6e:12:08:aa:76:0e:f8:
a9:5f:90:63:15:13:1f:83:5c:be:0a:15:d9:ec:6f:
13:5d:c6:71:27:2a:25:2c:a1:ff:77:8c:9b:3e:24:
c2:a8:8c:d9:75:81:cc:d7:57:ec:d0:80:1b:64:64:
6b:5f:2a:27:f0:0f:25:aa:b0:29:e8:a9:81:89:e4:
13:99:b1:0a:02:ac:84:6c:37:4e:de:a4:ce:35:04:
52:da:eb:8e:4b:c0:40:01:d2:3e:aa:e9:7d:eb:9f:
7e:21:a6:07:7e:1d:e0:d1:5e:ac:01:c8:b6:92:c0:
32:b6:3f:ec:50:86:d7:0e:ff:24:a0:17:bc:35:25:
96:6a:42:46:19:6c:36:6f:80:b0:1a:7d:f4:a2:8d:
39:fc:0a:67:96:7a:1f:ab:d7:39:f3:dd:db:c9:a3:
b7:da:39:51:96:2b:94:32:a7:a8:68:00:cd:03:db:
05:df:9b:2f:7a:e1:a8:ad:a5:e3:32:16:f3:c6:48:
e2:81:ec:d8:78:bf:1e:9a:3c:43:55:40:69:ca:a7:
2d:39:c3:04:f6:6e:ff:0f:08:9c:29:78:99:f9:45:
f1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:86:F7:05:69:87:3C:5F:36:98:A7:55:1D:A9:7D:06:2E:5F:9C:9A
X509v3 Authority Key Identifier:
keyid:26:27:38:C0:D2:DA:E0:4B:3C:9E:C5:50:48:52:F7:AD:74:CE:21:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jic4wNLa4Es8nsVQSFL3rXTOIVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/_4b3BWmHPF82mKdVHal9Bi5fnJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/Jic4wNLa4Es8nsVQSFL3rXTOIVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.132.0/24
Signature Algorithm: sha256WithRSAEncryption
19:ec:08:7c:52:3e:3f:fd:38:ac:d2:a5:d0:ea:64:db:b6:88:
8a:13:8f:ab:03:35:86:ef:e4:68:9d:94:56:b4:a7:83:2c:ac:
64:15:f4:40:de:08:43:ba:05:57:c5:66:3f:62:f2:42:1b:41:
3b:68:f0:6e:36:ab:41:ea:b1:90:bf:42:b6:23:0a:86:c8:a9:
a9:1a:1c:f0:3f:fd:9c:d5:8e:b1:bd:b7:a3:16:22:de:67:06:
d3:2d:36:c5:b2:7a:56:d2:77:06:91:02:ea:85:89:00:35:04:
92:0c:11:78:3b:65:9b:c4:f4:9c:53:97:c4:f2:39:ab:91:1b:
16:e2:92:71:09:b5:0c:41:64:bb:67:3b:c1:df:6e:03:0a:12:
93:e1:72:95:41:e5:14:55:8b:ef:de:a0:c0:e8:90:57:06:42:
63:61:4e:62:7a:0a:98:08:0d:84:46:dc:80:9a:b4:48:86:fa:
a0:bb:1d:86:7c:3a:dd:53:72:c0:62:6b:44:c6:9c:76:a5:c2:
da:3c:70:92:26:36:b5:43:64:d6:ef:72:4b:e8:c4:34:fa:d5:
30:17:c3:a9:8c:b2:84:46:c6:fb:26:24:df:9e:cc:b5:5d:9d:
0c:fa:23:ec:c5:a8:75:8a:93:96:10:3d:ec:c3:70:37:0a:3d:
04:15:dc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:18 2024 by rpki-client on console-ams.rpki-client.org