Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/OwBHwD5g7bjerfNZU6ggfshDEjw.roa
File: OwBHwD5g7bjerfNZU6ggfshDEjw.roa (raw, json)
Hash identifier: CSu6/Tkt3zqj8ab/5F/GeUUuHp1hn/BjDgTKBUy+1I0=
Subject key identifier: 3B:00:47:C0:3E:60:ED:B8:DE:AD:F3:59:53:A8:20:7E:C8:43:12:3C
Certificate issuer: /CN=006e643d0b67f4b333feacdc4616d4e4f3de32cd
Certificate serial: 0BBA2B2C
Authority key identifier: 00:6E:64:3D:0B:67:F4:B3:33:FE:AC:DC:46:16:D4:E4:F3:DE:32:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AG5kPQtn9LMz_qzcRhbU5PPeMs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/OwBHwD5g7bjerfNZU6ggfshDEjw.roa
Signing time: Sat 01 Jan 2022 00:58:18 +0000
ROA not before: Sat 01 Jan 2022 00:58:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208129
IP address blocks: 185.153.94.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196750124 (0xbba2b2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006e643d0b67f4b333feacdc4616d4e4f3de32cd
Validity
Not Before: Jan 1 00:58:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b0047c03e60edb8deadf35953a8207ec843123c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:20:26:d2:e8:d2:d9:e7:f6:a0:f7:df:28:
85:9d:2a:56:ef:4b:76:7b:73:12:dd:20:5e:c3:90:
4c:c8:c1:3f:46:a7:9a:d0:d2:62:56:09:44:6a:4b:
ae:02:07:84:c9:e0:9a:3e:a8:fe:39:f7:fb:8b:2c:
90:8c:58:64:73:7e:36:4d:c7:06:79:04:68:d9:ef:
c3:7e:a6:6d:c2:75:49:05:38:1e:8c:3e:ce:55:58:
39:90:71:96:86:ce:b1:da:8a:a5:5f:df:89:c2:a7:
73:2d:33:57:07:3f:41:a1:ea:7e:b8:52:50:27:81:
6c:e1:ba:6f:86:fd:cb:5f:a5:0b:87:ed:7b:3d:50:
c0:80:dd:60:52:de:23:ca:0d:d6:17:6b:1c:e7:66:
7f:d4:c0:af:f7:e4:6e:44:77:4c:df:0a:47:73:4a:
51:0f:0d:71:78:de:64:1a:3d:b5:5c:52:8a:ff:ac:
3b:2f:fc:57:8e:d8:a0:0f:8c:d7:e2:05:1f:e4:47:
96:6c:a2:64:99:b4:3a:34:82:2f:a1:4f:5a:3c:98:
11:d1:f7:61:11:c0:8e:c6:f7:25:6d:dd:c9:bf:d4:
a7:6c:b0:64:80:2e:3d:51:8c:4a:c5:4a:5a:e5:b0:
0e:7e:9d:c8:79:eb:19:ec:1d:16:a6:a2:71:e6:cd:
be:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:00:47:C0:3E:60:ED:B8:DE:AD:F3:59:53:A8:20:7E:C8:43:12:3C
X509v3 Authority Key Identifier:
keyid:00:6E:64:3D:0B:67:F4:B3:33:FE:AC:DC:46:16:D4:E4:F3:DE:32:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AG5kPQtn9LMz_qzcRhbU5PPeMs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/OwBHwD5g7bjerfNZU6ggfshDEjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/AG5kPQtn9LMz_qzcRhbU5PPeMs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.94.0/24
Signature Algorithm: sha256WithRSAEncryption
27:61:19:a8:06:8c:58:80:b9:31:83:21:89:dd:be:af:34:35:
43:7f:ba:c0:09:f7:bf:0a:29:7b:bb:08:70:aa:29:cb:d5:34:
06:07:c2:c3:45:19:40:91:30:b6:94:60:32:0e:35:b6:2c:04:
59:57:bd:61:ed:1a:a3:b5:37:f9:9f:bd:71:7c:57:c7:d6:43:
9e:28:40:6d:38:e3:4c:7c:09:ab:71:ce:eb:2a:66:6a:48:70:
b5:61:58:c5:e3:4d:f7:67:8d:31:43:06:a0:8c:d8:d3:9a:31:
47:7d:07:c3:e5:fa:9b:2a:e9:53:03:bd:bc:d1:b9:72:32:db:
05:e4:ec:a1:a8:d8:08:60:04:9b:37:8c:15:4c:cb:1a:26:68:
0e:29:dd:2e:13:d9:24:01:ac:cd:dd:34:0c:26:1e:e6:6e:3a:
85:23:f4:1e:80:03:7b:f3:8d:26:19:24:ee:65:f6:bf:d6:69:
1b:0e:06:29:fc:dc:80:64:81:5b:25:94:0d:a0:a5:d1:a6:4e:
6c:9b:5c:2f:89:2a:7e:92:03:74:2a:63:ce:00:26:1d:9b:65:
20:22:a4:5b:66:5b:fe:62:59:68:3a:33:2a:60:69:9b:9c:f2:
ac:c0:aa:df:28:ab:6c:97:2b:67:56:b3:79:30:7e:2e:a4:4a:
bc:32:e0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:10 2024 by rpki-client on console-fra.rpki-client.org