Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/0XgPqro_vqvvwFrVjVnwhSqae8k.roa
File: 0XgPqro_vqvvwFrVjVnwhSqae8k.roa (raw, json)
Hash identifier: 5untDpzAj9KpccqxbLIjzzYtT6W3CBchmFTwzlGt6dc=
Subject key identifier: D1:78:0F:AA:BA:3F:BE:AB:EF:C0:5A:D5:8D:59:F0:85:2A:9A:7B:C9
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 0183C2F67A5BA5866C3245331CA0E12E8A0F
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/0XgPqro_vqvvwFrVjVnwhSqae8k.roa
Signing time: Mon 10 Oct 2022 17:34:36 +0000
ROA not before: Mon 10 Oct 2022 17:34:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209181
IP address blocks: 85.209.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c2:f6:7a:5b:a5:86:6c:32:45:33:1c:a0:e1:2e:8a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Oct 10 17:34:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1780faaba3fbeabefc05ad58d59f0852a9a7bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:1d:13:89:65:12:35:df:ae:ff:5e:e3:ad:
46:54:2d:0f:0c:8a:c8:f2:47:72:f0:16:6d:ea:8c:
69:65:39:c3:81:61:c0:00:33:52:41:16:82:a9:56:
55:24:1d:ca:a0:8c:5f:c3:cf:a3:97:82:29:44:a1:
91:d7:20:00:d8:6a:cb:89:2b:79:8f:47:40:a6:fc:
ad:4e:75:a5:fa:4b:07:cc:6a:60:ca:fa:f6:9a:35:
af:fb:7a:04:e5:f3:78:4d:2c:6a:c6:c9:96:2f:ff:
35:d9:e3:1e:c7:51:05:79:8d:9d:26:14:91:a8:bc:
fb:a3:e0:05:49:17:a7:36:99:21:3e:1f:4e:86:1f:
8b:6b:4a:ec:70:68:d3:c0:f9:aa:22:8d:e3:3a:e8:
cc:80:b0:d0:43:49:d5:11:fa:2c:cb:2f:29:bb:e3:
60:c6:2c:59:40:41:4a:28:22:f4:4a:e0:86:c4:f0:
6c:41:d2:bb:01:a2:4e:06:b4:56:a6:35:f6:c4:0c:
a9:86:03:71:67:2c:1c:be:39:53:11:1c:f3:a0:ff:
be:92:ac:d8:42:b2:28:9c:20:d1:24:61:f1:f0:f8:
b3:2b:9e:a9:ff:98:77:c8:6b:e7:3f:ca:ee:5e:58:
3e:e6:86:fa:b8:bb:3d:da:f6:c1:ff:95:d7:1e:bb:
14:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:78:0F:AA:BA:3F:BE:AB:EF:C0:5A:D5:8D:59:F0:85:2A:9A:7B:C9
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/0XgPqro_vqvvwFrVjVnwhSqae8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.19.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ed:e1:a0:01:ae:8b:4b:be:a8:e3:75:7c:b4:af:12:4b:29:
52:e6:8c:4e:4e:4a:57:00:4f:f1:03:c7:9a:46:f7:1d:2e:b1:
90:dd:68:b8:82:32:8e:68:7b:2d:01:43:da:0f:d5:9e:9a:bb:
34:d0:b6:e5:bc:d0:f3:64:59:27:00:f2:31:38:74:2b:e5:ed:
26:ec:4c:93:50:fa:d2:f2:6c:6e:2c:d0:62:4e:8e:cc:c8:4e:
16:26:e3:f4:1e:85:39:37:ab:64:31:50:e0:ea:1a:de:a5:65:
3d:b8:c1:75:d3:04:1d:82:fa:2b:26:d9:d4:de:1a:5a:8a:50:
82:cf:a3:c1:e3:e9:a9:33:09:d0:a1:95:ca:b2:a6:0f:bd:26:
ff:17:62:fb:ab:26:34:5e:df:cb:cb:07:ce:f0:8f:04:dd:4d:
78:7f:52:2a:cc:db:a4:dd:15:69:0b:52:31:6b:eb:87:3b:91:
32:e4:d7:ea:d4:0b:2e:0b:09:e0:64:5b:fb:77:31:0e:4a:32:
f4:a0:21:b6:67:da:b3:2f:8d:66:1c:46:0c:3e:e6:e9:13:95:
cf:8e:75:b5:5b:03:42:9d:30:f7:68:e2:15:b5:56:0f:d1:50:
98:2e:6f:b6:b2:16:26:e6:86:d2:09:12:6a:ef:73:34:6b:43:
f9:26:b8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:20 2024 by rpki-client on console-ams.rpki-client.org