Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/l5k4NEuYZX8dtKtOyeeckOBuqiI.roa
File: l5k4NEuYZX8dtKtOyeeckOBuqiI.roa (raw, json)
Hash identifier: UUkiM+myp15Hdi8LeBBRxtXuFI3JYW43tp23I70TuQ4=
Subject key identifier: 97:99:38:34:4B:98:65:7F:1D:B4:AB:4E:C9:E7:9C:90:E0:6E:AA:22
Certificate issuer: /CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Certificate serial: 018A70D44639CE24085C694F0204A2058143
Authority key identifier: B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/l5k4NEuYZX8dtKtOyeeckOBuqiI.roa
Signing time: Thu 07 Sep 2023 18:07:54 +0000
ROA not before: Thu 07 Sep 2023 18:07:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47516
IP address blocks: 185.136.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:70:d4:46:39:ce:24:08:5c:69:4f:02:04:a2:05:81:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Validity
Not Before: Sep 7 18:07:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=979938344b98657f1db4ab4ec9e79c90e06eaa22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:c6:dd:32:80:4e:b8:a8:2c:b1:72:34:7b:
92:aa:db:ee:7b:af:2d:09:39:f4:e7:02:a7:96:dd:
c3:4c:e2:d6:68:9f:49:f0:c9:0f:5b:83:da:18:74:
2c:02:9b:9a:ea:fa:01:b5:ec:11:67:62:7b:65:da:
8d:f1:8f:67:1f:28:0c:74:22:0a:d9:ed:c9:82:b1:
38:a7:5c:d1:11:c8:2f:ad:cd:e4:05:cc:25:93:a3:
cb:b7:91:3d:84:2b:ce:04:bf:99:60:c7:3b:9c:ec:
a1:ff:d3:40:b7:0c:01:c0:3e:9a:24:82:e3:8c:f6:
1f:4a:7a:44:ae:ec:00:ef:37:b7:2d:fc:83:ce:7d:
e0:39:5e:62:48:29:ef:31:0e:ab:95:aa:9e:53:58:
9a:5c:6a:30:74:8d:fb:be:44:0c:77:83:29:ba:bf:
82:ae:6f:31:b0:74:d6:02:de:ac:30:08:29:4f:18:
4d:57:b6:cb:b4:cf:aa:2b:44:7a:44:18:d6:d7:61:
8c:4a:6d:e9:de:62:0a:ec:cb:46:d9:c7:fa:20:e1:
a1:42:b8:2a:de:9b:75:b9:b3:8d:89:3a:01:19:06:
da:55:a0:d3:4c:9b:ff:6e:4e:c6:98:65:b3:3e:4e:
e7:06:85:f2:9b:fe:11:b3:0f:0d:1b:91:05:83:02:
9f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:99:38:34:4B:98:65:7F:1D:B4:AB:4E:C9:E7:9C:90:E0:6E:AA:22
X509v3 Authority Key Identifier:
keyid:B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/l5k4NEuYZX8dtKtOyeeckOBuqiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/twWU8mXww-sA58_Cj-yFkMimMqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.206.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:a4:01:ed:9d:b0:5d:ce:40:fc:63:90:22:b8:72:5c:6a:8c:
e7:7b:9a:49:f2:89:63:db:1f:f5:bf:81:bf:46:c9:cf:90:ea:
8e:65:1b:2e:00:2e:45:d0:6d:eb:cb:53:1a:9f:e3:9f:ff:66:
6a:1c:48:b7:0f:da:93:14:56:47:5e:92:f9:61:2f:33:47:34:
91:03:70:50:9d:24:dc:4a:3f:92:62:92:2a:d0:f2:cc:85:7a:
53:13:58:2f:a7:0b:c1:cd:1b:e8:b6:2e:85:74:a3:3c:56:ca:
dd:c6:e7:b6:75:b6:89:89:c4:9b:74:1d:5f:42:65:6b:69:50:
d9:bc:1a:f6:6f:06:38:4f:eb:32:15:32:61:16:b9:13:46:61:
1b:8c:dd:e9:db:05:2e:85:fe:c6:66:70:4a:30:82:16:76:53:
59:ff:f8:03:ae:d1:2c:da:89:45:1a:a7:cc:84:c1:61:f2:df:
b6:0a:e5:30:1d:51:ce:16:50:c0:1b:fd:50:b4:f3:9b:7e:7d:
15:93:1e:74:a4:39:10:09:4d:9b:75:c2:15:b4:15:93:87:4f:
e0:ed:11:6a:ae:b1:d4:df:cd:f5:87:9c:8a:b9:c8:f5:ff:c8:
d4:74:69:84:85:cc:55:68:d1:85:5c:50:2e:eb:e1:74:5c:47:
b3:8b:e7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:27 2024 by rpki-client on console-fra.rpki-client.org