Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/lbI63IhxMI4hVoUoH2ADJe_GyYk.roa
File: lbI63IhxMI4hVoUoH2ADJe_GyYk.roa (raw, json)
Hash identifier: P+fvHLa+kH+FYUgMKEeg2RvOQqrPSyYRdnpZhBlb2dg=
Subject key identifier: 95:B2:3A:DC:88:71:30:8E:21:56:85:28:1F:60:03:25:EF:C6:C9:89
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 08DBD14F
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/lbI63IhxMI4hVoUoH2ADJe_GyYk.roa
Signing time: Sat 01 Jan 2022 07:55:57 +0000
ROA not before: Sat 01 Jan 2022 07:55:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212478
IP address blocks: 85.209.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148623695 (0x8dbd14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Jan 1 07:55:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95b23adc8871308e215685281f600325efc6c989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:75:bb:f3:7c:22:78:d4:a9:6a:5a:a8:b7:9c:
a5:4c:45:99:d0:99:dc:d8:39:a1:2a:e5:a6:bc:bf:
29:e1:35:02:dd:a8:74:a3:dd:94:2f:d9:76:53:5c:
d3:07:9c:0a:53:72:3e:49:fe:c6:61:6b:8b:06:04:
8c:dc:7f:39:43:7f:aa:25:90:bf:fc:22:75:f9:20:
f3:30:29:84:1b:b8:2a:d4:38:db:97:79:01:2a:a5:
bc:d3:bc:6e:21:aa:57:ee:d8:6c:6b:25:88:6a:91:
51:9c:10:df:5f:83:a8:08:95:22:43:d9:db:3a:05:
7a:01:fc:22:c4:f0:97:8b:f3:38:4c:14:d9:a6:4a:
5e:86:40:fa:3c:d7:4d:30:e6:9a:d2:d8:2c:5e:db:
ab:f5:07:bc:0b:ff:c7:c9:d4:5a:c9:dc:e7:57:0a:
ef:4a:18:d8:95:c8:3f:da:6b:62:34:ea:10:b3:bc:
08:6e:40:9a:1a:ec:9c:7e:ef:26:3e:9a:dc:41:5a:
54:fe:8e:b3:8f:d2:09:95:b0:f0:e0:3b:f1:2e:82:
58:65:c9:59:8c:13:bc:1b:fe:5a:23:7d:04:23:31:
3d:93:eb:77:f2:a6:63:42:76:3d:53:76:0a:6f:77:
bb:2a:13:b7:eb:a0:0a:43:ed:2b:d4:95:3d:14:14:
4f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B2:3A:DC:88:71:30:8E:21:56:85:28:1F:60:03:25:EF:C6:C9:89
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/lbI63IhxMI4hVoUoH2ADJe_GyYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.16.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:da:89:7f:74:9d:de:06:17:de:db:87:76:70:5f:15:ef:46:
de:82:f9:0c:27:66:c6:2c:bf:d4:4a:24:47:03:51:1d:ac:08:
87:47:9c:db:ff:df:56:a5:a2:f0:32:b0:c9:f8:cc:0b:ac:3a:
a3:f0:d5:b0:57:7d:37:ac:25:ff:00:e7:2e:54:fe:c5:d5:28:
2e:7e:c4:f0:6a:82:1f:53:1a:ec:69:4b:60:6a:e5:6b:a1:70:
0f:6b:7c:cd:99:6e:08:cd:02:42:ab:a0:c1:1d:f3:1b:c0:27:
03:7f:2e:d8:a9:3a:a4:91:61:69:f7:a8:d3:55:26:a0:cb:5b:
41:72:0b:cb:4e:c8:d7:f8:5d:64:57:0c:f8:72:a4:f8:c4:e1:
d5:72:8c:bf:9d:38:f3:2f:f9:d1:8f:54:b4:5d:45:98:a4:fe:
0e:c5:d0:67:15:a4:85:b7:f6:48:c3:23:40:77:66:cd:8b:c4:
c5:ce:64:3b:cc:ef:2c:3f:5c:ea:2c:5f:41:3c:9c:0f:2c:02:
8f:e0:df:a2:b3:9c:e0:e9:ee:ea:2e:37:16:e0:66:15:d3:95:
36:69:09:e2:d6:e3:c1:81:f7:81:fc:28:55:11:07:b3:2d:f4:
8c:43:98:2f:09:fa:19:94:32:a6:64:39:b2:c4:c3:e4:0c:90:
56:e8:50:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:20 2024 by rpki-client on console-ams.rpki-client.org