Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6ecfdf-a94d-4ff0-8800-198c7872df4f/1/l6_frKCfUDbVCN9RLCNp-SeQAaI.roa
File: l6_frKCfUDbVCN9RLCNp-SeQAaI.roa (raw, json)
Hash identifier: FXTaJu85bkkQ3/N7j/RHHqqru6Mv0uTbRh/FLgmaOQM=
Subject key identifier: 97:AF:DF:AC:A0:9F:50:36:D5:08:DF:51:2C:23:69:F9:27:90:01:A2
Certificate issuer: /CN=d34271d123c60ecd7ac5288c72e60e41b5791f9f
Certificate serial: 01856E78EE7AE8B915FBAFFC868051348C4D
Authority key identifier: D3:42:71:D1:23:C6:0E:CD:7A:C5:28:8C:72:E6:0E:41:B5:79:1F:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00Jx0SPGDs16xSiMcuYOQbV5H58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6ecfdf-a94d-4ff0-8800-198c7872df4f/1/l6_frKCfUDbVCN9RLCNp-SeQAaI.roa
Signing time: Sun 01 Jan 2023 17:54:57 +0000
ROA not before: Sun 01 Jan 2023 17:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50599
IP address blocks: 185.235.68.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:ee:7a:e8:b9:15:fb:af:fc:86:80:51:34:8c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34271d123c60ecd7ac5288c72e60e41b5791f9f
Validity
Not Before: Jan 1 17:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97afdfaca09f5036d508df512c2369f9279001a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6e:2e:24:1d:52:e5:0e:15:af:9d:30:d2:4b:
16:16:5c:79:4b:da:8e:fc:7c:e3:90:42:25:a7:23:
cc:54:76:f6:70:ae:98:5f:d4:e1:b7:15:ce:47:c6:
c8:9e:67:d5:6b:5f:a5:07:29:59:12:c8:44:ef:9d:
0f:06:d1:55:ae:df:d4:db:34:ff:f4:ad:e9:ae:9d:
d6:73:70:47:3a:2f:7c:99:01:1f:42:93:59:3f:c8:
7d:b0:a2:fa:d5:df:52:48:d8:52:92:fc:df:40:09:
36:71:aa:6e:cd:83:5d:56:b0:e1:ff:31:fa:98:91:
6c:bd:72:80:89:a6:46:7d:f2:68:76:51:c3:9d:1d:
d7:fb:cf:0a:f3:86:e5:68:cb:18:65:ec:e6:18:d0:
7a:9d:41:ed:e1:a2:c3:39:8c:5e:83:cd:59:74:5e:
cc:b1:eb:85:65:a7:cb:5e:ab:22:47:cd:d5:a1:24:
5a:d2:cc:d0:2e:f4:7b:6b:6d:2c:de:e9:d2:df:5b:
bd:9a:f1:f9:e5:58:19:78:3e:e0:d3:2c:44:df:2b:
f5:5a:d4:30:6c:c6:e1:d7:aa:1b:b2:18:67:15:c7:
bb:87:1b:5b:c7:c2:20:83:31:e7:f8:71:7a:8a:b2:
60:d3:c2:0e:b2:ff:95:ca:db:12:cd:50:fb:f4:1e:
c2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AF:DF:AC:A0:9F:50:36:D5:08:DF:51:2C:23:69:F9:27:90:01:A2
X509v3 Authority Key Identifier:
keyid:D3:42:71:D1:23:C6:0E:CD:7A:C5:28:8C:72:E6:0E:41:B5:79:1F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00Jx0SPGDs16xSiMcuYOQbV5H58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6ecfdf-a94d-4ff0-8800-198c7872df4f/1/l6_frKCfUDbVCN9RLCNp-SeQAaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6ecfdf-a94d-4ff0-8800-198c7872df4f/1/00Jx0SPGDs16xSiMcuYOQbV5H58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.68.0/23
Signature Algorithm: sha256WithRSAEncryption
87:09:ae:26:3c:96:52:58:94:38:b8:17:c0:f2:d1:c6:b3:f3:
7f:43:8e:2f:9b:64:5a:e2:f6:11:1b:20:1e:1e:de:ae:e5:18:
0b:54:38:56:4e:89:b6:91:28:df:2c:40:eb:96:72:66:a3:9b:
fb:8e:e1:b3:47:8b:ea:bf:90:1f:58:d3:81:e2:75:eb:96:df:
85:83:0f:a6:56:dd:6b:16:e3:9f:fe:19:e4:95:6a:30:37:02:
f6:15:08:db:5f:d5:bd:f5:a4:25:1b:d6:ce:a6:7d:8b:c3:a7:
8f:4a:ba:e7:8f:41:f9:59:d8:79:87:24:48:81:3b:0a:b1:f2:
40:86:bc:e7:e5:c3:6c:e3:f3:f6:b1:c3:5c:89:f1:51:b9:16:
51:54:10:24:51:5c:ba:54:f0:8e:d6:0a:96:cb:e9:ee:eb:59:
5d:10:d2:ce:f9:a6:1d:48:0a:2d:5f:1c:0f:6e:c7:fd:5b:6e:
4f:f2:9a:98:cf:a9:c9:08:dc:9b:24:2b:d0:7f:80:07:1d:26:
89:19:c9:0f:77:da:4b:94:3a:ef:d3:19:4e:46:68:32:a7:b3:
63:76:b3:01:f7:86:28:0a:68:39:3d:f6:80:0f:74:26:71:d6:
c3:3e:25:9a:e7:5e:3c:40:35:34:ad:55:eb:6c:99:2f:2b:19:
6c:c9:0b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:57:26 2025 by rpki-client