Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/pdmMFFNU2jxKo0X2TEIWff8n7YU.roa
File: pdmMFFNU2jxKo0X2TEIWff8n7YU.roa (raw, json)
Hash identifier: eWPJpkgkUADXk8907QixVZviDz91/XhJ985Az3Z5/co=
Subject key identifier: A5:D9:8C:14:53:54:DA:3C:4A:A3:45:F6:4C:42:16:7D:FF:27:ED:85
Certificate issuer: /CN=f5150a23aac420feecabfc9b5baf9f024056333a
Certificate serial: 0182A77D2EE369F5C57CDD6AFCAD19C80D24
Authority key identifier: F5:15:0A:23:AA:C4:20:FE:EC:AB:FC:9B:5B:AF:9F:02:40:56:33:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RUKI6rEIP7sq_ybW6-fAkBWMzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/pdmMFFNU2jxKo0X2TEIWff8n7YU.roa
Signing time: Tue 16 Aug 2022 16:29:35 +0000
ROA not before: Tue 16 Aug 2022 16:29:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201366
IP address blocks: 185.77.13.0/24 maxlen: 24
185.77.12.0/24 maxlen: 24
2a05:5f41::/32 maxlen: 32
2a05:5f40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a7:7d:2e:e3:69:f5:c5:7c:dd:6a:fc:ad:19:c8:0d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5150a23aac420feecabfc9b5baf9f024056333a
Validity
Not Before: Aug 16 16:29:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5d98c145354da3c4aa345f64c42167dff27ed85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:57:be:ca:c6:18:a9:c2:ad:a0:56:9e:0f:72:
c9:0e:c4:f9:d0:27:ef:88:70:0b:7e:16:88:83:6e:
20:c8:63:d8:f8:e2:b7:99:ec:71:e7:d0:c8:85:9a:
1b:42:13:f6:78:08:89:b9:0f:ae:e6:1f:f1:53:a3:
1e:38:9b:fb:a2:c3:2b:be:75:9d:6b:ae:56:b5:9b:
86:31:6b:58:81:5d:fa:65:8f:ea:de:d2:24:53:f2:
e3:bd:cd:9c:34:57:98:be:7c:e9:16:8e:dc:fd:83:
9c:38:5a:d6:47:dc:98:50:a0:1b:f4:28:d2:92:8d:
cf:1c:09:f5:fa:57:bd:12:0f:12:4b:6b:17:20:db:
57:97:0e:b5:f7:cd:4b:70:7b:c4:9a:5a:ea:34:d0:
75:75:c4:f3:93:f1:a0:8c:e2:4f:5f:90:b3:bb:d8:
ca:92:65:4a:76:3f:d8:27:98:b0:c9:42:47:3e:32:
22:ff:78:a5:a9:3d:ef:ba:2d:3c:0b:f1:f4:bb:92:
89:76:6e:22:cc:1d:ad:0d:d6:cf:ea:9e:71:f0:c1:
f5:74:7b:be:a8:a3:26:05:5b:a1:ab:61:28:f2:f3:
a8:29:e6:f7:29:d0:ab:06:69:f9:3d:a5:82:e0:20:
e0:98:68:22:13:1e:f1:f3:3b:41:3a:52:fe:78:a3:
f0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D9:8C:14:53:54:DA:3C:4A:A3:45:F6:4C:42:16:7D:FF:27:ED:85
X509v3 Authority Key Identifier:
keyid:F5:15:0A:23:AA:C4:20:FE:EC:AB:FC:9B:5B:AF:9F:02:40:56:33:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RUKI6rEIP7sq_ybW6-fAkBWMzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/pdmMFFNU2jxKo0X2TEIWff8n7YU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/9RUKI6rEIP7sq_ybW6-fAkBWMzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.12.0/23
IPv6:
2a05:5f40::/31
Signature Algorithm: sha256WithRSAEncryption
14:46:43:4a:53:18:e3:db:18:ee:83:bc:0a:05:70:ce:bf:38:
e1:fe:22:61:31:22:38:0d:e3:98:05:94:05:53:55:1a:3f:fb:
84:6b:69:ca:0a:30:c6:e3:24:6e:cf:2f:f3:93:8b:46:2a:e7:
ad:78:35:7c:0c:d6:08:3b:0e:74:e5:62:dc:93:c3:da:a0:7f:
e3:7a:1e:13:7c:5b:18:e1:cb:05:46:13:5c:03:f0:ed:3e:f8:
b1:6c:13:4d:25:1f:b7:9e:26:55:c3:d8:7e:a6:ac:80:ac:4e:
37:b7:a3:7b:20:51:e5:e2:c6:d7:90:6f:cb:1a:45:eb:1e:bc:
8f:95:3f:9e:3c:04:b7:1e:3a:38:36:b0:23:c3:46:50:d5:03:
e6:98:f2:e6:7a:d3:e5:19:42:70:ac:20:ed:da:d9:f6:75:2e:
35:56:35:17:c3:99:c3:c4:60:f5:f7:c6:76:79:27:34:76:7c:
05:9e:f2:2f:01:96:a0:60:e5:85:a4:4b:ed:4a:4c:bc:03:87:
65:98:59:93:3e:76:7b:82:c4:d9:ad:b8:e3:f7:a7:5e:c3:f2:
4f:dd:dd:d0:a3:b5:48:c8:5a:a3:fa:3c:72:52:e3:3f:a6:63:
6e:ad:69:71:64:23:cb:4f:44:1d:72:4a:64:c7:b2:d9:bb:6d:
c3:64:c3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:29 2024 by rpki-client on console-fra.rpki-client.org