Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/z5qDXxb2OqnZMgSLGBF0ODI_uW0.roa
File: z5qDXxb2OqnZMgSLGBF0ODI_uW0.roa (raw, json)
Hash identifier: 67BVVPwmYwDVvDytACvrx6trMHRitq3AH8ndax/7C/4=
Subject key identifier: CF:9A:83:5F:16:F6:3A:A9:D9:32:04:8B:18:11:74:38:32:3F:B9:6D
Certificate issuer: /CN=262738c0d2dae04b3c9ec5504852f7ad74ce2152
Certificate serial: 08FF724A
Authority key identifier: 26:27:38:C0:D2:DA:E0:4B:3C:9E:C5:50:48:52:F7:AD:74:CE:21:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jic4wNLa4Es8nsVQSFL3rXTOIVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/z5qDXxb2OqnZMgSLGBF0ODI_uW0.roa
Signing time: Sat 01 Jan 2022 16:04:59 +0000
ROA not before: Sat 01 Jan 2022 16:04:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26548
IP address blocks: 85.209.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150958666 (0x8ff724a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262738c0d2dae04b3c9ec5504852f7ad74ce2152
Validity
Not Before: Jan 1 16:04:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf9a835f16f63aa9d932048b18117438323fb96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1f:95:28:cc:67:e8:33:79:a8:66:62:9c:23:
15:a0:43:6e:ea:0f:ff:03:2f:91:1a:ef:70:59:9b:
25:96:27:38:6b:0b:d0:18:f9:ee:a8:1c:c5:34:4b:
a1:c7:4e:12:6e:60:9e:7f:53:1c:eb:fb:2a:39:8e:
ff:ad:e3:36:d3:9d:3d:73:05:f9:d6:de:0f:bc:02:
87:08:72:74:0c:ee:ea:81:80:6b:8d:76:ec:26:55:
b1:77:f1:23:d6:27:0d:66:e5:74:86:ef:69:a1:c1:
84:09:21:fa:03:21:d5:09:78:a8:83:f9:f8:ed:18:
d0:67:e3:36:29:85:0f:7c:06:ba:27:d7:aa:d2:98:
3d:ca:5f:f4:8f:56:bf:9f:02:c7:ab:1b:7e:5e:d6:
06:48:f2:1c:d0:a0:3e:18:1a:15:e9:c2:58:04:01:
96:15:c1:19:12:9b:65:07:b2:5b:82:db:21:a2:7e:
e0:f9:c2:fa:c7:73:da:da:2d:0e:5f:4b:60:03:a4:
f8:c1:73:7d:ab:df:75:ed:22:d1:4b:21:31:19:d0:
06:76:4e:c1:9f:2c:b9:3e:44:83:c9:c4:5d:22:78:
5d:59:13:9b:ce:17:99:23:b4:7e:ae:0b:24:23:71:
b9:2e:6c:84:f3:58:1f:90:33:a1:24:7d:cb:63:ff:
34:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9A:83:5F:16:F6:3A:A9:D9:32:04:8B:18:11:74:38:32:3F:B9:6D
X509v3 Authority Key Identifier:
keyid:26:27:38:C0:D2:DA:E0:4B:3C:9E:C5:50:48:52:F7:AD:74:CE:21:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jic4wNLa4Es8nsVQSFL3rXTOIVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/z5qDXxb2OqnZMgSLGBF0ODI_uW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/Jic4wNLa4Es8nsVQSFL3rXTOIVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.132.0/22
Signature Algorithm: sha256WithRSAEncryption
74:c6:c9:9d:ea:46:7c:92:b9:28:88:a4:bc:29:91:c2:55:72:
a3:5a:19:50:e2:dd:4e:0e:07:e3:1e:c8:8e:32:27:39:a5:41:
62:d4:61:1f:8f:e5:ed:ec:cc:00:56:80:2d:ca:df:26:a9:45:
4b:29:b2:ee:02:a9:9b:6c:c3:02:e5:8d:1e:1c:4f:b8:e3:29:
27:20:58:25:8d:6c:3e:c4:7b:69:f3:26:e8:7f:4d:03:77:4b:
d8:50:d3:eb:3c:7d:da:74:65:1b:35:f7:70:8b:d4:27:b7:1f:
3f:43:ad:4f:fd:6b:0a:62:53:66:f0:86:74:6a:c7:8f:3d:ed:
32:97:13:14:82:0c:b5:44:87:73:76:ac:ad:b3:f1:c3:b2:f0:
87:59:e2:1c:47:a2:fa:a2:95:d1:d7:b1:33:46:0a:24:d4:51:
a7:56:4e:9b:38:2c:63:e7:8c:5a:69:28:72:e7:5e:f1:70:73:
ac:a6:14:2b:de:74:58:cf:35:da:da:65:61:3f:5a:f1:75:8f:
93:6a:f9:e1:6a:e6:36:ce:c9:a7:71:85:08:66:82:fd:7f:f4:
5c:d5:7a:e9:26:46:b4:24:f7:1d:3d:5a:11:1f:5c:1a:a3:0c:
a7:5c:aa:8a:53:34:dd:9d:df:f1:4d:53:7f:fd:8b:41:7b:0a:
60:bf:d0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:01 2024 by rpki-client on console-fra.rpki-client.org