Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2a89de-8712-4842-a053-34f24feee664/1/7hwCzfB7n9SoifGzdj31rdT6BRs.roa
File: 7hwCzfB7n9SoifGzdj31rdT6BRs.roa (raw, json)
Hash identifier: tKwA+JG5UpWkpDONZj76jbMdKs3GmVzSkFpPNh4Dm/Y=
Subject key identifier: EE:1C:02:CD:F0:7B:9F:D4:A8:89:F1:B3:76:3D:F5:AD:D4:FA:05:1B
Certificate issuer: /CN=4f9eb093ca13375a2fcdd0198da5501dd6af9486
Certificate serial: 02974AE6
Authority key identifier: 4F:9E:B0:93:CA:13:37:5A:2F:CD:D0:19:8D:A5:50:1D:D6:AF:94:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T56wk8oTN1ovzdAZjaVQHdavlIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a89de-8712-4842-a053-34f24feee664/1/7hwCzfB7n9SoifGzdj31rdT6BRs.roa
Signing time: Fri 20 May 2022 13:42:30 +0000
ROA not before: Fri 20 May 2022 13:42:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199496
IP address blocks: 185.249.76.0/22 maxlen: 32
2a0c:c0::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43469542 (0x2974ae6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9eb093ca13375a2fcdd0198da5501dd6af9486
Validity
Not Before: May 20 13:42:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee1c02cdf07b9fd4a889f1b3763df5add4fa051b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:d6:20:c7:6b:1c:85:ae:97:48:91:4d:43:
ad:19:54:c2:9c:c1:e5:45:00:d4:9d:fa:60:e7:f1:
9c:5c:51:b4:31:09:80:23:28:31:cc:f3:dd:62:61:
70:b3:c2:4a:e9:94:c2:da:56:03:fd:73:3c:81:f5:
73:05:65:78:1e:37:0c:13:bf:28:f7:62:ff:2d:4d:
10:7d:ca:a2:48:9b:5a:c8:39:55:ef:a9:a6:8e:8d:
78:69:af:91:54:90:7b:ad:7c:94:0e:80:4e:90:03:
be:67:7a:74:e3:d7:0e:c3:b5:1d:ac:4e:37:59:26:
59:81:e5:13:8a:5f:34:a6:bc:90:0a:10:b7:64:f7:
19:0f:3b:13:ad:c5:cf:90:9b:a8:68:23:2e:9c:5a:
0c:ac:0d:60:a1:96:09:e3:e2:2c:3e:e3:f0:06:af:
05:a5:7a:d6:cc:40:9e:32:d9:94:fd:b1:dc:38:07:
03:32:9f:a1:54:24:66:eb:08:24:55:0b:0a:02:30:
01:1b:e6:2f:64:94:aa:68:67:af:67:8d:49:c3:a3:
bf:3c:fd:e7:1b:4c:2f:e0:ca:b5:ce:b0:8e:32:6a:
6f:f0:a0:9c:d8:47:f5:af:62:51:90:16:c5:6e:f0:
71:cf:fb:70:75:8c:3c:f2:d5:3d:c4:d6:0a:80:7f:
56:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1C:02:CD:F0:7B:9F:D4:A8:89:F1:B3:76:3D:F5:AD:D4:FA:05:1B
X509v3 Authority Key Identifier:
keyid:4F:9E:B0:93:CA:13:37:5A:2F:CD:D0:19:8D:A5:50:1D:D6:AF:94:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T56wk8oTN1ovzdAZjaVQHdavlIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a89de-8712-4842-a053-34f24feee664/1/7hwCzfB7n9SoifGzdj31rdT6BRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a89de-8712-4842-a053-34f24feee664/1/T56wk8oTN1ovzdAZjaVQHdavlIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.76.0/22
IPv6:
2a0c:c0::/29
Signature Algorithm: sha256WithRSAEncryption
5e:84:9c:55:69:a0:b6:02:b9:b2:25:bc:32:cc:dd:50:77:37:
10:f6:68:43:c3:e5:5f:57:7b:27:14:65:8a:ab:9f:b8:5c:13:
c2:f4:21:c8:fb:b0:0e:8f:ad:26:ac:d7:16:53:d3:9b:bb:41:
7d:92:4c:80:01:87:3a:24:30:82:db:95:4c:5e:dc:43:75:e6:
0a:c6:d3:7e:88:a0:8c:62:8f:37:08:70:ad:a3:e9:cd:8e:3c:
85:62:9a:f3:46:ea:38:97:18:f6:fb:fe:16:46:20:ea:a4:14:
9c:22:38:4f:eb:3b:6e:e8:1e:18:30:07:a5:5f:82:0b:b8:ab:
b3:83:b2:e8:5e:d2:c1:47:4d:c6:d2:16:79:6a:c5:6c:aa:d5:
9e:62:8f:8b:9e:4c:0e:e2:ce:78:7c:64:51:9c:d8:48:f6:b7:
f0:51:54:8b:ba:c8:f4:1e:81:8b:99:ce:bc:2e:94:7b:3f:96:
7a:a3:c3:6f:8f:96:65:63:26:ae:e9:6c:31:e6:6b:db:0b:1d:
5a:8b:b6:28:eb:61:07:49:df:01:93:05:c0:2d:c4:c0:b6:4b:
01:ad:4e:0f:98:62:40:e6:0b:43:4f:83:d1:d8:0a:7c:c2:65:
3f:fe:58:d4:f4:73:f7:b4:93:20:f7:1a:0c:0c:84:87:f6:87:
93:05:7b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:50 2024 by rpki-client on console-fra.rpki-client.org