Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/6o5ziaCqPYUgesFhqsVIRscUMq4.roa
File: 6o5ziaCqPYUgesFhqsVIRscUMq4.roa (raw, json)
Hash identifier: 8+18cMZ5zZgOEAvwOmImjlw/TciUDrapDRuXqtth95I=
Subject key identifier: EA:8E:73:89:A0:AA:3D:85:20:7A:C1:61:AA:C5:48:46:C7:14:32:AE
Certificate issuer: /CN=60d3ac4825dca7eec97005dba3b0bff27904f58a
Certificate serial: 01856D6F8AD7E91274E3FB29F418231BD20C
Authority key identifier: 60:D3:AC:48:25:DC:A7:EE:C9:70:05:DB:A3:B0:BF:F2:79:04:F5:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/6o5ziaCqPYUgesFhqsVIRscUMq4.roa
Signing time: Sun 01 Jan 2023 13:05:04 +0000
ROA not before: Sun 01 Jan 2023 13:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30740
IP address blocks: 185.144.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:8a:d7:e9:12:74:e3:fb:29:f4:18:23:1b:d2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d3ac4825dca7eec97005dba3b0bff27904f58a
Validity
Not Before: Jan 1 13:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea8e7389a0aa3d85207ac161aac54846c71432ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:52:88:91:0d:0a:f5:95:61:4c:ae:04:31:b9:
a3:1d:f6:1b:fa:1b:7d:f8:b4:07:a6:d2:68:b5:c9:
81:79:44:c6:3f:3c:23:46:53:00:14:cb:20:e8:2b:
eb:bc:ff:b9:9b:1e:56:64:cd:53:db:44:bc:dc:7e:
7e:f4:20:fb:f1:42:55:b9:fa:21:88:da:de:f2:e4:
6e:af:87:48:d9:5c:70:15:b0:1c:fd:f1:ab:37:10:
e2:bf:59:65:92:0a:45:ae:98:80:42:a7:f4:44:d7:
cc:27:b5:0b:fd:12:dd:c1:95:00:c2:9e:f2:c5:7b:
88:fd:ef:7c:98:99:23:6a:5e:53:30:36:9a:e4:b9:
f1:f2:37:90:16:45:5a:b4:c9:71:25:3c:04:69:e9:
35:51:c6:17:6f:e7:0d:f7:da:8d:47:69:4d:68:1c:
e0:30:94:0c:72:49:02:e2:07:02:a7:dd:dd:7a:5c:
53:c8:7b:e5:da:5f:a2:f5:5a:cb:87:c7:f9:3c:16:
65:05:f1:3f:78:7b:6d:80:9d:b7:3f:f9:d0:4a:05:
f5:45:30:3a:fc:d5:01:af:33:5f:61:fd:59:2b:f6:
e7:9e:fe:39:3c:08:70:99:cb:e1:d8:ca:c7:32:c8:
ad:17:1b:aa:20:da:86:c0:3b:82:f9:ba:05:e2:6b:
0e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8E:73:89:A0:AA:3D:85:20:7A:C1:61:AA:C5:48:46:C7:14:32:AE
X509v3 Authority Key Identifier:
keyid:60:D3:AC:48:25:DC:A7:EE:C9:70:05:DB:A3:B0:BF:F2:79:04:F5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/6o5ziaCqPYUgesFhqsVIRscUMq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.109.0/24
Signature Algorithm: sha256WithRSAEncryption
89:1c:de:f2:41:2c:87:0c:b1:a4:98:f6:c7:df:44:e1:e7:0e:
2b:72:51:59:09:ca:de:c3:61:92:f4:15:9a:03:00:c6:58:f3:
18:79:3e:61:08:f5:2d:e1:25:e6:7b:00:87:1c:7d:3c:12:95:
de:f3:a6:f7:26:24:5f:7d:b0:95:7c:76:ff:4f:fc:8b:7e:aa:
7b:2e:13:d2:66:98:19:2b:db:0c:16:76:2a:b3:d4:73:c0:38:
af:dd:e6:bf:15:10:ef:85:20:7b:6a:d5:1c:f3:c1:35:c9:32:
72:99:9d:e2:fb:d0:c5:d4:fe:78:cf:d9:d2:0c:d5:b1:67:f8:
dd:7d:be:12:2d:cb:aa:8d:5b:59:72:67:26:7b:98:07:38:04:
58:b3:92:bd:02:07:e6:46:27:e1:e2:41:5d:ff:6b:3a:a4:2a:
ab:6f:82:15:5f:4f:8c:ad:f1:04:f0:0a:30:0f:50:82:2b:85:
47:21:11:d8:2d:ca:07:2a:ce:d1:b4:0b:3a:c9:9a:5e:bb:0b:
6f:fb:26:ea:97:ae:ad:b3:9a:a4:98:bb:98:e9:af:21:52:2f:
43:81:2a:0a:a6:00:fa:60:c0:98:e4:8f:ae:ac:d7:8c:96:e9:
9a:0b:6b:f2:c6:a5:3c:96:ec:9c:cd:63:c6:2e:7a:1e:37:cb:
c4:a1:ba:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 16:30:57 2023 by rpki-client on console-fra.rpki-client.org