Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/55244b-8bb5-4367-b924-4429040f3817/1/Kb365YNF-vpfhfUiFBGWNptxWvU.roa
File: Kb365YNF-vpfhfUiFBGWNptxWvU.roa (raw, json)
Hash identifier: oYO3C6vUOw5OQ3Py92/YaiG9In7+y8zg//Lq9r9zyI8=
Subject key identifier: 29:BD:FA:E5:83:45:FA:FA:5F:85:F5:22:14:11:96:36:9B:71:5A:F5
Certificate issuer: /CN=6a8185b7863fc2c5b54fe4cd26d7adff6a0e1281
Certificate serial: 01856D25F4D215737401FF37A2D26385E63A
Authority key identifier: 6A:81:85:B7:86:3F:C2:C5:B5:4F:E4:CD:26:D7:AD:FF:6A:0E:12:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aoGFt4Y_wsW1T-TNJtet_2oOEoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/55244b-8bb5-4367-b924-4429040f3817/1/Kb365YNF-vpfhfUiFBGWNptxWvU.roa
Signing time: Sun 01 Jan 2023 11:44:42 +0000
ROA not before: Sun 01 Jan 2023 11:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49305
IP address blocks: 178.255.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:25:f4:d2:15:73:74:01:ff:37:a2:d2:63:85:e6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8185b7863fc2c5b54fe4cd26d7adff6a0e1281
Validity
Not Before: Jan 1 11:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29bdfae58345fafa5f85f522141196369b715af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9c:00:a7:b6:8d:3a:6c:36:36:5f:5c:fb:24:
b4:7d:c5:82:fb:6c:36:85:d1:18:9f:86:94:64:de:
f9:85:66:b5:79:74:9f:dc:a3:52:1e:a2:8e:73:02:
dd:58:e4:35:94:3a:6a:c7:32:d3:8f:c8:24:cc:8c:
65:e3:0f:10:b2:25:30:aa:66:44:0e:a7:c8:0a:8a:
04:2b:22:cd:09:ca:f0:81:cb:e7:0d:46:b7:66:02:
6d:42:e5:68:1a:ea:3f:d6:e4:93:b2:0f:2e:ed:54:
b9:9d:ca:cc:66:00:c9:c7:f9:16:3d:80:d4:3c:47:
08:51:6b:41:84:51:df:da:d4:06:48:72:34:a1:b3:
8e:7e:9d:86:be:c4:b2:f7:20:4b:8c:02:1e:0c:2f:
63:7f:48:e8:8b:78:32:f2:6f:4d:b4:00:a6:f0:6d:
6e:78:db:93:49:65:47:93:81:09:56:52:ca:b8:b5:
77:2e:bf:12:9d:43:29:03:20:a1:b3:42:3a:37:cc:
00:9f:7e:96:c8:19:91:ac:38:46:67:08:35:1c:d3:
73:dd:96:ea:d0:51:32:7c:fd:b8:c5:60:cf:85:64:
57:be:e6:e4:63:f3:ed:5c:64:e0:e3:5f:01:b7:1e:
18:ed:9b:a3:81:3a:f4:4d:98:28:97:69:7e:cb:81:
99:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BD:FA:E5:83:45:FA:FA:5F:85:F5:22:14:11:96:36:9B:71:5A:F5
X509v3 Authority Key Identifier:
keyid:6A:81:85:B7:86:3F:C2:C5:B5:4F:E4:CD:26:D7:AD:FF:6A:0E:12:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aoGFt4Y_wsW1T-TNJtet_2oOEoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/55244b-8bb5-4367-b924-4429040f3817/1/Kb365YNF-vpfhfUiFBGWNptxWvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/55244b-8bb5-4367-b924-4429040f3817/1/aoGFt4Y_wsW1T-TNJtet_2oOEoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.217.0/24
Signature Algorithm: sha256WithRSAEncryption
31:e1:9c:11:11:8b:27:9f:9e:1a:db:de:e2:6b:29:e5:74:fb:
05:5e:3f:2b:21:4d:da:4a:6b:dd:3b:03:64:34:0a:1a:2f:d6:
d1:49:da:c1:aa:ee:e1:15:76:e6:78:04:60:8d:72:9b:f3:af:
1b:63:1d:eb:5f:20:46:ad:ea:43:e4:aa:a3:f2:60:6a:7e:6f:
36:31:c8:e5:06:a1:73:99:68:a6:df:ec:9e:77:3e:90:84:8b:
cd:34:65:a1:24:07:2b:9e:87:ad:9e:54:6d:89:f8:44:1c:b3:
20:9c:1c:4f:c0:ce:08:aa:e7:29:46:cf:eb:c1:73:b2:78:6b:
68:e2:4f:d4:15:10:8f:50:6c:83:09:52:93:61:ca:a5:7e:31:
c9:00:51:44:cd:71:15:36:d1:9d:1e:14:90:13:0d:18:07:ef:
14:a9:92:f6:a6:02:08:5b:db:e6:14:c9:2a:0b:ca:48:24:2d:
13:7a:5a:98:5e:0f:10:59:cd:b7:9a:03:4e:11:40:73:63:7d:
b5:e8:be:f6:17:f1:e4:69:59:5e:5b:e5:9d:68:87:11:71:03:
48:91:98:2e:de:a9:fc:45:20:ac:39:58:d7:e8:b5:f8:17:6d:
f4:a3:fe:b7:6d:51:0e:9c:a4:46:64:b6:dc:83:51:bf:9e:5e:
f7:cd:36:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:52 2024 by rpki-client on console-fra.rpki-client.org