Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e6e903-f1dc-459f-b5cf-ddcdbd580b2f/1/t_Bxk7C6FVeZOeC7sImJMpB6N80.roa
File: t_Bxk7C6FVeZOeC7sImJMpB6N80.roa (raw, json)
Hash identifier: ZgMOcNEoGBNUEHV6xQ6HrMFBMxdn4mpbqB/xBurSyz8=
Subject key identifier: B7:F0:71:93:B0:BA:15:57:99:39:E0:BB:B0:89:89:32:90:7A:37:CD
Certificate issuer: /CN=ceb0fbf6f0325f64dee9d9c2787265b93d6b3f5b
Certificate serial: 018CC8DF44631C48E448DDA3C6C4DD0690E7
Authority key identifier: CE:B0:FB:F6:F0:32:5F:64:DE:E9:D9:C2:78:72:65:B9:3D:6B:3F:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrD79vAyX2Te6dnCeHJluT1rP1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e6e903-f1dc-459f-b5cf-ddcdbd580b2f/1/t_Bxk7C6FVeZOeC7sImJMpB6N80.roa
Signing time: Tue 02 Jan 2024 06:32:04 +0000
ROA not before: Tue 02 Jan 2024 06:32:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201606
IP address blocks: 185.69.83.0/24 maxlen: 24
185.69.82.0/24 maxlen: 24
185.69.80.0/22 maxlen: 22
185.69.81.0/24 maxlen: 24
185.69.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:44:63:1c:48:e4:48:dd:a3:c6:c4:dd:06:90:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb0fbf6f0325f64dee9d9c2787265b93d6b3f5b
Validity
Not Before: Jan 2 06:32:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7f07193b0ba15579939e0bbb0898932907a37cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:ac:79:93:4f:74:c1:90:bd:b9:02:a1:f4:
62:b2:9c:38:d7:8a:62:7e:08:b2:69:c4:7a:61:eb:
42:a3:03:5d:6d:01:4c:92:4f:01:45:f1:95:2b:72:
c1:4a:3c:91:73:a1:3c:23:3d:2d:55:f0:19:13:8a:
c0:53:1b:1b:46:9c:7f:7e:51:8d:c1:ab:2c:f3:e2:
e8:c2:27:80:7a:a2:7a:30:bb:fc:f3:20:1d:71:3c:
b6:56:ec:97:21:8a:95:0f:e2:c7:85:28:8c:a8:ab:
82:7e:d8:17:71:f9:ce:5d:9e:45:f9:ca:39:08:86:
a2:5f:86:35:81:7c:b2:f9:4f:39:0a:6e:1e:6e:3e:
83:1b:a1:88:3c:53:51:53:18:1c:56:92:52:f7:25:
eb:49:d1:39:01:ef:34:d0:dd:89:92:1a:69:4c:6e:
69:ab:54:95:88:98:2d:c6:08:d1:1e:e3:f8:2a:ac:
c8:87:30:14:6d:fe:7d:9b:87:21:c6:e3:e8:0f:bf:
91:eb:87:3d:f2:02:57:12:21:98:73:4a:1b:da:ea:
b8:a1:95:be:22:07:3b:70:1a:6a:e3:66:36:07:9e:
98:fe:84:a1:83:9b:52:6a:6c:f7:e5:d9:e3:9e:18:
7e:b7:7b:30:55:5d:4a:c0:4e:cf:ff:ce:95:1b:ec:
ba:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F0:71:93:B0:BA:15:57:99:39:E0:BB:B0:89:89:32:90:7A:37:CD
X509v3 Authority Key Identifier:
keyid:CE:B0:FB:F6:F0:32:5F:64:DE:E9:D9:C2:78:72:65:B9:3D:6B:3F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrD79vAyX2Te6dnCeHJluT1rP1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e6e903-f1dc-459f-b5cf-ddcdbd580b2f/1/t_Bxk7C6FVeZOeC7sImJMpB6N80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e6e903-f1dc-459f-b5cf-ddcdbd580b2f/1/zrD79vAyX2Te6dnCeHJluT1rP1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.80.0/22
Signature Algorithm: sha256WithRSAEncryption
45:d0:0b:ab:09:43:98:d1:64:22:02:fa:2f:72:cb:a8:6c:1c:
d4:c0:cf:ed:71:55:e6:6a:37:c9:b8:00:80:94:23:9a:37:8f:
b2:0f:3d:33:49:ab:ed:4b:d2:2e:02:5d:4a:63:a1:74:e6:03:
34:2e:e2:2f:49:dc:0e:e6:8a:65:0e:67:92:cd:9f:9d:ba:47:
fd:0e:25:12:14:9c:48:ca:67:9f:46:79:6c:2a:84:09:98:c8:
27:58:ed:32:e3:d5:23:8a:45:e1:21:e9:6e:10:8d:e1:c0:12:
6c:65:91:00:5e:d7:d1:db:b5:23:a8:15:99:4f:5f:d3:f7:75:
64:54:af:f8:52:d6:5c:64:57:b4:31:ab:a8:79:61:08:33:78:
e3:cc:9b:f7:3d:4e:28:42:35:38:2b:5b:29:4e:c7:10:74:5d:
42:ee:96:72:9f:77:39:ca:95:a9:ef:d7:13:01:85:a1:e1:ec:
4f:53:c7:5f:b0:71:01:59:9c:d2:74:19:a5:b3:a2:3b:c9:e0:
ab:f0:38:b2:2d:04:c5:b1:5a:b7:9d:0a:8d:30:39:8f:52:b5:
b2:d4:51:d4:05:c5:d3:12:86:dd:3b:ea:4d:85:1b:13:fd:b2:
a6:2c:10:8b:bc:dd:c7:a2:49:9d:e2:37:ee:11:69:8f:b6:13:
b1:fd:fc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:33 2024 by rpki-client on console-ams.rpki-client.org