Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/kwaCDunV5njRklb7uwHTvi5SlA8.roa
File: kwaCDunV5njRklb7uwHTvi5SlA8.roa (raw, json)
Hash identifier: kvP7o6U4JC8h0eQAiAC+YdMeyu8sZsjcW+Gg0EAiGz0=
Subject key identifier: 93:06:82:0E:E9:D5:E6:78:D1:92:56:FB:BB:01:D3:BE:2E:52:94:0F
Certificate issuer: /CN=262738c0d2dae04b3c9ec5504852f7ad74ce2152
Certificate serial: 09E85CF3
Authority key identifier: 26:27:38:C0:D2:DA:E0:4B:3C:9E:C5:50:48:52:F7:AD:74:CE:21:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jic4wNLa4Es8nsVQSFL3rXTOIVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/kwaCDunV5njRklb7uwHTvi5SlA8.roa
Signing time: Thu 14 Apr 2022 06:53:07 +0000
ROA not before: Thu 14 Apr 2022 06:53:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 85.209.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166223091 (0x9e85cf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262738c0d2dae04b3c9ec5504852f7ad74ce2152
Validity
Not Before: Apr 14 06:53:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9306820ee9d5e678d19256fbbb01d3be2e52940f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:da:43:a5:09:f0:78:8d:97:f0:81:e9:13:60:
9b:33:d3:f9:4a:01:cc:02:ba:6e:43:f6:e6:8e:5d:
fe:2e:f6:1e:1a:bc:87:c3:86:b0:f2:fb:e8:02:72:
fc:34:75:27:52:4d:ae:a9:d8:e7:be:95:c7:fd:56:
ed:5e:dd:64:32:20:39:9a:d5:be:70:5e:e1:98:4d:
5e:71:3e:b7:2c:70:94:10:c0:57:44:4a:20:74:4c:
1e:fd:61:4d:90:53:fd:91:d4:ea:b9:c1:ce:79:1c:
a3:5a:fc:f8:7c:29:b1:63:4f:79:1e:c2:d8:40:0a:
40:b0:ca:0c:88:0f:16:1a:6c:6b:e2:a5:c0:5d:c1:
fe:e3:46:3d:ab:6f:ee:df:16:f1:22:8e:24:af:84:
61:c7:2d:1b:b6:75:14:91:48:77:f4:6d:d4:c0:d7:
8e:02:85:44:bc:06:ee:41:31:44:d0:d6:73:8b:b6:
5d:36:47:0c:f0:46:a1:d6:fd:51:25:85:8f:41:ca:
2c:34:d7:12:e6:be:04:18:1c:e5:63:d2:b8:99:9f:
23:f7:24:0c:e9:31:4c:53:53:ec:0a:74:a1:db:31:
97:21:26:2f:3a:5d:01:42:1d:b0:9c:51:e2:16:ff:
a5:8f:7a:7c:8c:b1:e3:c9:a1:98:89:50:9b:81:1d:
e1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:06:82:0E:E9:D5:E6:78:D1:92:56:FB:BB:01:D3:BE:2E:52:94:0F
X509v3 Authority Key Identifier:
keyid:26:27:38:C0:D2:DA:E0:4B:3C:9E:C5:50:48:52:F7:AD:74:CE:21:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jic4wNLa4Es8nsVQSFL3rXTOIVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/kwaCDunV5njRklb7uwHTvi5SlA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/Jic4wNLa4Es8nsVQSFL3rXTOIVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.133.0/24
Signature Algorithm: sha256WithRSAEncryption
78:5f:76:4e:08:bf:a8:cb:47:f2:c1:6c:e3:70:54:1c:61:69:
a4:ef:78:c2:e9:6e:4f:5c:c7:dc:ea:4b:83:ac:d1:9b:be:aa:
f3:93:15:53:0c:36:ec:17:dd:31:3e:b1:7a:8b:e0:2e:0d:01:
1e:ec:56:62:74:88:cb:0d:34:e8:bb:92:63:5c:8f:00:2e:07:
80:82:91:6d:24:14:34:6f:b6:d7:12:9f:44:e3:61:d8:4b:60:
32:a0:71:ca:20:a3:a7:10:3c:21:8f:b9:2d:a4:e0:0d:63:5d:
0b:af:01:39:20:61:56:02:64:c6:8e:cb:71:bf:ad:cd:08:0f:
e1:c1:f8:bb:41:d5:a4:aa:fd:85:60:98:65:8e:75:74:dc:e5:
55:15:a0:3d:70:7c:1a:8c:f8:75:93:3f:7a:99:06:fb:8d:eb:
eb:37:eb:2b:85:73:d2:88:f5:03:39:60:7c:e2:4b:05:a7:80:
ab:10:90:1d:84:23:c2:95:e4:50:1e:5d:30:72:24:ad:38:03:
59:be:48:88:b8:48:b5:90:ce:2c:05:df:a7:43:3c:ea:71:7a:
0b:cf:d9:47:37:a4:28:02:34:f4:f9:79:b6:5e:4f:4b:99:17:
d0:ca:98:39:37:6e:47:ed:a1:41:f9:69:25:a8:4c:e5:f8:65:
d7:41:86:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:01 2024 by rpki-client on console-fra.rpki-client.org