Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/bUt8tAtVvoMUVI-VL3XvLwNtyJw.roa
File: bUt8tAtVvoMUVI-VL3XvLwNtyJw.roa (raw, json)
Hash identifier: qIeahNWCXIDEPUg0hW2XKjtwCyd4p7yb7r71fp3SYsM=
Subject key identifier: 6D:4B:7C:B4:0B:55:BE:83:14:54:8F:95:2F:75:EF:2F:03:6D:C8:9C
Certificate issuer: /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial: 018635D8D6207D35CBDD800A6348ECAA80B3
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/bUt8tAtVvoMUVI-VL3XvLwNtyJw.roa
Signing time: Thu 09 Feb 2023 11:04:08 +0000
ROA not before: Thu 09 Feb 2023 11:04:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 195.184.92.0/23 maxlen: 24
193.37.236.0/24 maxlen: 24
185.2.163.0/24 maxlen: 24
185.2.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:35:d8:d6:20:7d:35:cb:dd:80:0a:63:48:ec:aa:80:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Validity
Not Before: Feb 9 11:04:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d4b7cb40b55be8314548f952f75ef2f036dc89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4f:43:95:9f:be:ce:6c:74:9d:7c:6f:2d:e4:
d5:bb:f9:96:f5:90:ff:76:5c:f9:17:de:b0:db:a8:
4f:9c:b6:52:d6:e0:94:fd:eb:ae:af:77:a9:e9:b0:
70:62:64:d5:6f:b4:3b:a3:ff:eb:63:77:d5:83:66:
67:6e:81:c7:cc:5d:db:d3:aa:0a:a8:51:de:bf:d9:
cf:8b:e3:81:47:5c:ea:7f:df:ea:66:76:80:0d:2d:
96:af:45:fe:ac:89:b0:05:2c:dd:26:a0:af:86:dc:
0d:e6:5b:7d:40:29:ce:09:17:c2:88:62:46:08:f2:
0b:2b:e8:cb:7e:7d:a7:dd:ac:ac:43:f3:df:ab:fb:
ba:a1:b1:25:e3:9e:8a:59:15:64:d8:b9:ae:d2:57:
cb:82:9d:19:ea:9c:65:03:7c:31:da:fd:31:50:b3:
2b:e8:0a:58:68:f0:6e:74:68:3b:98:06:7b:f5:ca:
a7:34:9e:c0:04:f5:e4:05:fc:79:84:79:15:9f:0c:
df:38:62:4b:0a:ac:cd:ff:93:f9:47:20:03:c8:4c:
9d:e6:68:70:ef:4c:c7:2b:4c:95:0c:3f:bd:71:a6:
9f:11:28:3a:40:ec:b7:e0:83:ce:5d:bb:38:3c:77:
3b:ce:af:96:6a:7e:5b:12:84:a6:3a:f0:2c:37:74:
c9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4B:7C:B4:0B:55:BE:83:14:54:8F:95:2F:75:EF:2F:03:6D:C8:9C
X509v3 Authority Key Identifier:
keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/bUt8tAtVvoMUVI-VL3XvLwNtyJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.162.0/23
193.37.236.0/24
195.184.92.0/23
Signature Algorithm: sha256WithRSAEncryption
23:2e:de:a5:b7:ab:b4:dc:b7:ca:c4:1e:8d:9a:59:8f:8b:ba:
29:c0:67:1d:f9:ec:73:6e:71:b3:2e:29:46:7f:96:7a:0d:49:
d7:12:6f:22:8f:ae:ad:8f:85:a5:6f:63:ad:f1:45:52:61:04:
cf:43:a9:ec:47:96:08:64:df:45:b1:0a:e2:90:b2:6b:48:a2:
1e:54:b5:ee:a2:4f:9f:65:68:b0:b8:8e:22:f2:ea:45:7f:bf:
a7:7a:38:62:ff:e8:06:3d:9f:25:e8:55:28:9c:8f:df:ec:49:
29:50:c3:4b:17:65:68:90:ce:f1:79:bd:e2:3e:74:dc:93:ab:
43:b3:1a:f4:35:79:30:6d:bb:60:49:14:eb:41:57:ee:0f:7f:
5e:7c:1c:68:be:00:1b:75:b3:d2:80:3c:fb:4c:1d:64:80:8b:
b1:cd:10:36:2c:97:83:ad:b8:a9:86:0c:f2:d5:7d:88:f7:be:
11:78:60:2e:e6:49:bc:93:46:d5:e3:43:14:84:f0:9e:c0:61:
dd:43:f6:ab:4b:1a:72:3b:4d:35:01:57:82:d7:2d:54:f2:ca:
18:47:bc:c0:86:2c:42:ad:c1:20:6f:8a:84:0c:60:f4:33:f2:
d5:2d:86:5a:aa:b1:2c:ff:18:d3:37:62:72:33:4c:c9:08:cb:
a9:4a:1a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:46 2024 by rpki-client on console-fra.rpki-client.org