Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/jjOIbm-pPE2Pt3e1Z6NOfNTf8_c.roa
File: jjOIbm-pPE2Pt3e1Z6NOfNTf8_c.roa (raw, json)
Hash identifier: 43BF8ParVQLFJc8DlWvZaSv517Fvds2ow6sXy5dSRTQ=
Subject key identifier: 8E:33:88:6E:6F:A9:3C:4D:8F:B7:77:B5:67:A3:4E:7C:D4:DF:F3:F7
Certificate issuer: /CN=f5150a23aac420feecabfc9b5baf9f024056333a
Certificate serial: 0182AAE1194B64E4355895F866D2DD3A0565
Authority key identifier: F5:15:0A:23:AA:C4:20:FE:EC:AB:FC:9B:5B:AF:9F:02:40:56:33:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RUKI6rEIP7sq_ybW6-fAkBWMzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/jjOIbm-pPE2Pt3e1Z6NOfNTf8_c.roa
Signing time: Wed 17 Aug 2022 08:17:34 +0000
ROA not before: Wed 17 Aug 2022 08:17:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201366
IP address blocks: 185.77.14.0/23 maxlen: 23
185.77.13.0/24 maxlen: 24
185.77.12.0/24 maxlen: 24
2a05:5f41::/32 maxlen: 32
2a05:5f40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:aa:e1:19:4b:64:e4:35:58:95:f8:66:d2:dd:3a:05:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5150a23aac420feecabfc9b5baf9f024056333a
Validity
Not Before: Aug 17 08:17:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e33886e6fa93c4d8fb777b567a34e7cd4dff3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:85:ec:0b:9b:e9:cd:5d:f3:12:c3:dc:74:
e6:a8:d5:cc:7d:9f:80:57:14:1b:e1:82:ab:29:b2:
ab:2d:30:bb:51:62:7a:f0:89:b4:94:69:11:b4:b0:
f1:fc:a8:ba:5f:b8:24:09:11:cf:f6:06:f4:ab:e3:
3f:de:40:8a:02:3c:9d:e7:72:b8:6f:d2:d8:92:88:
45:d4:e7:ef:d8:74:8c:8a:8d:9b:de:19:26:a4:5f:
17:6c:e4:0f:a0:06:cb:d6:f4:c8:7f:5e:da:6d:6f:
e8:92:4c:71:b2:fa:34:19:04:78:f8:39:ac:48:36:
6c:af:54:3f:ee:59:0f:56:a8:df:d4:b1:10:ac:85:
f3:ac:48:e6:3e:d9:a3:c3:ed:34:3b:33:2c:86:a5:
06:b2:de:e1:c5:c4:ec:be:b3:75:7c:a5:b9:e2:13:
20:dc:9c:d9:19:1c:16:22:b2:5c:f8:b7:31:dc:43:
df:14:e1:d4:35:0b:3c:55:7f:f3:e3:b8:35:2f:8d:
c2:ba:f2:ae:99:dc:ea:e1:28:01:ed:72:09:39:5e:
3d:f7:15:db:91:62:ae:62:70:ba:52:c3:a1:fb:fa:
70:bc:1a:68:a3:9c:aa:29:1d:98:bc:24:5d:9f:82:
9f:dc:35:4f:01:17:01:8b:ba:66:ae:0a:d0:98:4a:
11:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:33:88:6E:6F:A9:3C:4D:8F:B7:77:B5:67:A3:4E:7C:D4:DF:F3:F7
X509v3 Authority Key Identifier:
keyid:F5:15:0A:23:AA:C4:20:FE:EC:AB:FC:9B:5B:AF:9F:02:40:56:33:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RUKI6rEIP7sq_ybW6-fAkBWMzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/jjOIbm-pPE2Pt3e1Z6NOfNTf8_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/9RUKI6rEIP7sq_ybW6-fAkBWMzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.12.0/22
IPv6:
2a05:5f40::/31
Signature Algorithm: sha256WithRSAEncryption
a3:b3:d2:97:8a:03:54:64:07:bb:a7:ee:77:d4:be:ed:d8:22:
f0:42:2e:fa:80:0f:37:ae:f7:52:b8:a3:29:b8:70:13:0d:e9:
d5:2e:24:11:03:c7:8b:e8:a0:33:55:5a:8d:8f:2a:09:26:2c:
37:20:a0:aa:6d:da:79:58:27:a2:11:35:a5:ab:7d:62:a8:93:
e5:3e:e0:0e:76:b2:c8:4d:d4:90:7f:2f:12:9c:3c:c3:cb:58:
ea:f8:84:18:7e:11:5e:97:3f:d4:35:82:b7:64:6f:2f:40:c5:
74:85:7e:7d:92:27:64:3d:4e:f3:1a:8a:29:cf:8d:6d:8f:e9:
b2:fb:98:6d:6b:8c:53:dd:e6:9c:10:27:1e:da:17:2f:78:80:
70:c1:ef:15:14:66:d0:12:54:b0:fd:f2:36:32:eb:c7:01:14:
01:80:9b:0e:2f:cd:eb:56:65:f5:7d:76:34:0a:d4:a9:a3:86:
98:7d:b9:af:43:9a:4a:a2:da:ee:8e:fd:66:1c:55:6d:c6:3b:
38:85:50:b8:f9:0c:e3:09:d9:00:6c:c5:2e:fc:f6:ac:66:39:
b4:7c:d9:92:bb:a2:13:25:58:55:f9:f2:f8:43:4e:7b:07:04:
c1:d3:8a:a3:3c:60:9f:19:65:ab:98:20:e1:29:ba:be:28:1e:
0f:d4:71:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:55 2024 by rpki-client on console-ams.rpki-client.org