Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/1-vKzwEBG26Gi9g4agwheXj-UZDg.roa
File: 1-vKzwEBG26Gi9g4agwheXj-UZDg.roa (raw, json)
Hash identifier: Sq9YoKz38rAaZD7aL+qlxHX+SVYV6WIWz937joj4tWw=
Subject key identifier: FA:F2:B3:C0:40:46:DB:A1:A2:F6:0E:1A:83:08:5E:5E:3F:94:64:38
Certificate issuer: /CN=006e643d0b67f4b333feacdc4616d4e4f3de32cd
Certificate serial: 0BB96052
Authority key identifier: 00:6E:64:3D:0B:67:F4:B3:33:FE:AC:DC:46:16:D4:E4:F3:DE:32:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AG5kPQtn9LMz_qzcRhbU5PPeMs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/1-vKzwEBG26Gi9g4agwheXj-UZDg.roa
Signing time: Sat 01 Jan 2022 00:58:17 +0000
ROA not before: Sat 01 Jan 2022 00:58:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204703
IP address blocks: 185.153.93.0/24 maxlen: 32
2a0c:f280::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196698194 (0xbb96052)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006e643d0b67f4b333feacdc4616d4e4f3de32cd
Validity
Not Before: Jan 1 00:58:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=faf2b3c04046dba1a2f60e1a83085e5e3f946438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:e4:22:2e:a3:5a:34:e8:71:d0:81:bf:1f:
3a:ca:68:de:05:9f:57:3e:ef:7e:e2:2b:e6:41:0a:
2c:f6:01:5f:87:94:0d:0c:56:90:b0:56:33:65:6c:
ec:0c:1d:f5:48:0e:3e:54:ef:7d:d0:6f:1e:f9:20:
91:5a:d8:96:3c:c0:1a:59:4c:ae:01:7e:86:56:f5:
71:31:e3:5e:01:fc:30:58:99:4f:6e:9f:70:90:bc:
9b:b9:a4:31:53:30:a8:d6:4a:a9:e9:a9:0e:25:de:
27:2d:66:fa:57:82:35:2f:ae:f6:d3:6a:21:a2:19:
6f:84:a4:92:f0:f6:29:11:b0:46:97:6b:43:ee:75:
fe:1c:6f:da:4b:d8:8c:09:e3:f1:23:7a:c3:4c:27:
98:18:26:77:a2:35:82:a7:cc:dd:62:87:c7:b5:cc:
05:0a:a4:eb:07:59:bc:40:e8:93:cd:f9:12:fb:4c:
4a:45:87:dc:6b:52:33:6a:6e:ff:89:17:c4:5a:82:
42:14:6f:e3:1f:10:8d:ba:35:15:75:0f:0f:74:44:
99:79:6f:4b:95:33:73:17:50:55:0d:19:49:c5:6a:
ad:c2:3e:0b:98:7a:18:02:75:af:49:af:87:5c:f8:
eb:0b:98:08:b8:25:71:ad:ef:1b:ad:6d:d3:8f:dd:
9e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F2:B3:C0:40:46:DB:A1:A2:F6:0E:1A:83:08:5E:5E:3F:94:64:38
X509v3 Authority Key Identifier:
keyid:00:6E:64:3D:0B:67:F4:B3:33:FE:AC:DC:46:16:D4:E4:F3:DE:32:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AG5kPQtn9LMz_qzcRhbU5PPeMs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/1-vKzwEBG26Gi9g4agwheXj-UZDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/AG5kPQtn9LMz_qzcRhbU5PPeMs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.93.0/24
IPv6:
2a0c:f280::/29
Signature Algorithm: sha256WithRSAEncryption
3c:4e:5f:3a:ec:70:2d:e3:3d:bf:bb:3f:f9:d8:9e:52:02:8f:
14:5d:31:ba:0c:c0:70:ad:b6:46:6a:18:cc:88:c3:e6:5b:cc:
8b:6c:09:e3:fa:54:3d:32:25:80:29:c5:cc:e7:ee:3d:34:83:
bb:9d:04:31:fa:0e:5e:3a:68:6f:ef:32:99:ec:8a:6b:e3:aa:
2e:7c:e3:b1:43:27:05:85:a8:2f:d6:d2:01:90:6f:3e:24:b6:
7b:50:47:94:0b:b5:6f:5b:31:89:dc:01:9a:a5:8b:72:3d:f7:
4c:8b:d9:de:0b:4a:46:99:bc:fc:ae:1c:f4:87:7a:20:fc:3e:
ff:19:77:3d:bc:73:06:f0:41:27:e5:7c:2a:58:22:57:9f:f9:
aa:81:65:a6:aa:56:e9:93:13:cc:98:d9:ab:f9:6d:c1:67:ac:
e1:6b:bc:cc:98:9c:1a:a5:9b:93:b9:91:dd:4e:0e:f8:97:4a:
68:b6:b5:f1:ad:90:6d:a8:1f:bd:3d:66:ef:92:45:58:0d:01:
05:97:f5:6e:2e:e9:ef:0b:dd:5d:70:28:49:e0:ba:a0:19:b5:
45:0f:e2:22:a9:91:3c:23:bd:79:8f:53:37:db:f5:b1:83:25:
1f:5b:2c:f4:8c:55:fa:16:1f:b8:01:0f:32:55:c4:a0:5f:16:
82:5d:7d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:10 2024 by rpki-client on console-fra.rpki-client.org