Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/asgJZ09LT07gZ2FO2Ge6vV3SS4E.roa
File: asgJZ09LT07gZ2FO2Ge6vV3SS4E.roa (raw, json)
Hash identifier: UQV16ewWU/V/8C1FcO2i8jZ+okd9z6uMXJKVh6IWqrk=
Subject key identifier: 6A:C8:09:67:4F:4B:4F:4E:E0:67:61:4E:D8:67:BA:BD:5D:D2:4B:81
Certificate issuer: /CN=006e643d0b67f4b333feacdc4616d4e4f3de32cd
Certificate serial: 0CD52831
Authority key identifier: 00:6E:64:3D:0B:67:F4:B3:33:FE:AC:DC:46:16:D4:E4:F3:DE:32:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AG5kPQtn9LMz_qzcRhbU5PPeMs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/asgJZ09LT07gZ2FO2Ge6vV3SS4E.roa
Signing time: Thu 05 May 2022 11:31:19 +0000
ROA not before: Thu 05 May 2022 11:31:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211883
IP address blocks: 185.153.92.0/24 maxlen: 32
2a0c:f280:1::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215296049 (0xcd52831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006e643d0b67f4b333feacdc4616d4e4f3de32cd
Validity
Not Before: May 5 11:31:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ac809674f4b4f4ee067614ed867babd5dd24b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:b8:ef:33:dc:a7:81:7e:a1:91:65:d1:54:
85:8f:bc:b1:ee:b0:40:d4:9b:45:43:4c:12:83:9a:
62:84:bc:6e:1d:15:f6:63:c3:6c:8e:09:38:8e:09:
c9:f8:af:d2:13:ca:2d:b8:1b:29:0e:2f:80:3d:5d:
af:13:22:30:69:1f:21:33:d7:99:78:9d:7d:f9:86:
33:3c:6a:dd:09:64:73:6a:55:aa:60:d6:5b:7b:bc:
65:f7:cc:02:35:12:28:81:be:00:b1:cb:2f:ae:f8:
14:48:27:61:da:c9:d3:59:23:6e:d0:5d:3d:22:a5:
83:fa:b3:59:a6:46:c8:36:cf:59:4a:0d:46:08:f4:
be:39:55:65:3e:4e:02:d1:12:97:d4:f3:eb:d0:e9:
c2:5f:3d:5d:b7:4b:19:73:5b:11:d7:2c:d8:64:45:
e0:fd:a8:62:ba:35:4c:b6:c5:87:ea:aa:94:ed:7e:
9e:4e:4b:e1:93:80:1f:ce:2a:a4:41:04:2c:96:46:
c0:fe:23:34:9b:e4:95:c6:76:f8:4b:d5:b2:40:59:
96:44:c7:a5:1e:fa:72:f2:7b:9f:12:95:ca:10:10:
d7:f6:dc:12:e9:88:16:2c:3c:59:56:85:2b:ae:19:
07:11:7b:a3:77:1f:1f:79:28:cc:0a:08:95:d8:20:
e4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C8:09:67:4F:4B:4F:4E:E0:67:61:4E:D8:67:BA:BD:5D:D2:4B:81
X509v3 Authority Key Identifier:
keyid:00:6E:64:3D:0B:67:F4:B3:33:FE:AC:DC:46:16:D4:E4:F3:DE:32:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AG5kPQtn9LMz_qzcRhbU5PPeMs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/asgJZ09LT07gZ2FO2Ge6vV3SS4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/AG5kPQtn9LMz_qzcRhbU5PPeMs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.92.0/24
IPv6:
2a0c:f280:1::/48
Signature Algorithm: sha256WithRSAEncryption
6a:a1:2c:5c:12:dc:bf:28:32:eb:e6:4a:47:ef:b8:a4:0c:8f:
34:58:c5:7c:f3:66:1b:80:39:18:1c:07:48:39:1e:8a:fb:5f:
a8:a5:89:17:49:14:dd:98:ac:9d:ef:8d:1e:2c:bb:dd:06:1d:
3f:f1:e2:d1:36:44:c2:36:4d:80:69:1b:10:d3:41:f7:fd:2c:
a6:64:51:ca:82:c5:72:1a:96:a1:92:8e:c8:c9:66:a4:a2:23:
ae:c8:e2:3c:14:d2:6f:35:5c:58:6c:9c:3b:3b:10:13:32:44:
27:56:78:32:38:92:e5:a7:95:65:f7:f6:4e:7f:a9:ae:c1:55:
0d:18:61:21:08:63:ee:50:d2:39:6f:c6:d5:40:14:79:78:0f:
e3:60:c9:5d:4d:e5:b1:2c:d2:f3:d6:f4:cb:37:eb:39:7c:19:
15:68:22:1e:0e:30:8f:6e:cc:d8:da:4a:18:3d:db:30:03:6f:
ca:aa:90:16:8c:a2:4d:93:6b:c2:f6:f2:8d:7b:57:26:67:73:
de:e5:34:94:e0:32:52:ef:fb:88:d3:93:95:f5:9d:05:d0:ec:
5f:34:e7:41:87:78:67:de:b9:7f:b8:ca:98:23:fe:16:3e:fa:
0b:a5:95:e5:bc:0c:50:ae:f2:5a:04:ee:cf:98:fa:c4:99:94:
25:b1:f0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:10 2024 by rpki-client on console-fra.rpki-client.org