Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/b15_G8M0VQS6_8SppLSY9EjjA0A.roa
File: b15_G8M0VQS6_8SppLSY9EjjA0A.roa (raw, json)
Hash identifier: B35FDU5Ji3hE2MEwR2yi+lmGAmMEm2SOgHG9dkjzFN0=
Subject key identifier: 6F:5E:7F:1B:C3:34:55:04:BA:FF:C4:A9:A4:B4:98:F4:48:E3:03:40
Certificate issuer: /CN=eead7e8a2349f402a87bfb32ab6e9946f8c4c3f0
Certificate serial: 018CC6B9012B0E020FE6B00CA05C21778F51
Authority key identifier: EE:AD:7E:8A:23:49:F4:02:A8:7B:FB:32:AB:6E:99:46:F8:C4:C3:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7q1-iiNJ9AKoe_syq26ZRvjEw_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/b15_G8M0VQS6_8SppLSY9EjjA0A.roa
Signing time: Mon 01 Jan 2024 20:31:02 +0000
ROA not before: Mon 01 Jan 2024 20:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202422
IP address blocks: 185.136.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:01:2b:0e:02:0f:e6:b0:0c:a0:5c:21:77:8f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eead7e8a2349f402a87bfb32ab6e9946f8c4c3f0
Validity
Not Before: Jan 1 20:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f5e7f1bc3345504baffc4a9a4b498f448e30340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:95:dc:9e:c5:f5:ea:9a:c5:bc:d0:0e:3c:94:
f4:1e:c4:ed:a8:4e:74:08:5a:7e:a7:e8:70:59:8c:
63:6f:1a:b7:6f:2e:62:45:1c:5f:72:45:fd:e1:5a:
07:b4:f1:56:06:4b:5d:fe:e9:a7:45:15:08:48:b3:
dd:43:48:da:cb:54:94:9e:41:85:01:93:67:03:eb:
dd:f2:1c:f3:b9:29:a3:2e:97:02:39:b7:be:7b:b3:
26:03:fc:ff:fa:c0:e9:af:40:f4:9a:b6:14:3d:27:
1e:67:e6:aa:de:66:60:61:4c:a0:2c:0a:1e:76:ab:
d5:bd:cf:fe:b9:eb:ce:37:98:fd:12:6a:18:c8:ec:
7f:60:1b:9d:60:31:00:43:3d:c4:61:86:fc:ca:4d:
04:e4:b3:a7:85:0d:fd:4e:10:77:15:7b:1b:f2:15:
75:a9:4d:13:ca:7c:c5:8f:38:c7:41:45:5c:7c:e3:
cb:04:47:da:73:20:41:ea:3f:33:d8:15:88:b3:26:
2c:51:fb:ef:f1:8b:18:8b:c1:ee:af:76:c5:a0:d6:
ff:07:77:91:05:a7:79:f9:bf:e6:7e:94:1b:a3:ba:
78:bc:2f:df:17:2e:13:10:b2:15:4b:33:d8:ec:72:
7b:96:d9:d6:7f:4a:3d:f4:fb:7e:bc:a5:62:a5:a3:
9e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5E:7F:1B:C3:34:55:04:BA:FF:C4:A9:A4:B4:98:F4:48:E3:03:40
X509v3 Authority Key Identifier:
keyid:EE:AD:7E:8A:23:49:F4:02:A8:7B:FB:32:AB:6E:99:46:F8:C4:C3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q1-iiNJ9AKoe_syq26ZRvjEw_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/b15_G8M0VQS6_8SppLSY9EjjA0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/7q1-iiNJ9AKoe_syq26ZRvjEw_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.60.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:0d:b3:ea:35:7d:1e:89:9f:43:05:cb:7d:73:d5:88:25:6d:
89:61:12:29:a4:20:64:e9:98:27:c0:2b:85:af:1c:33:d6:9d:
76:4d:ea:0c:fb:68:93:38:2e:54:c7:21:0f:03:3c:9e:79:cb:
0a:d4:0b:bd:c4:71:7e:ba:f6:93:41:78:f9:a5:27:fb:af:7b:
6a:84:7e:d7:1c:8b:14:25:46:84:d9:c1:fc:86:0b:c4:05:9b:
2a:67:8d:f7:6e:57:8f:95:70:77:2b:64:d3:88:49:ed:9d:3b:
08:3d:dd:69:b0:7a:13:81:b2:f1:52:a3:68:e3:b1:a9:e8:be:
26:03:9f:35:8a:d0:e2:d4:75:b2:43:9a:96:10:be:3b:1d:2b:
42:4e:32:f4:e3:b8:46:81:fb:b2:8f:3a:84:37:8d:cb:00:27:
8c:ae:6d:31:0e:7a:b9:8e:44:ac:12:8e:73:6e:5b:a4:1d:b7:
6c:c0:c4:df:bb:ee:f4:29:8a:e6:53:aa:90:35:78:27:56:e0:
d7:05:5a:f9:a7:8e:63:82:62:2e:3f:14:29:fa:d2:ac:42:4e:
e3:30:9e:36:16:68:e4:47:76:f2:d4:2c:ca:64:70:db:29:64:
68:a3:7d:c0:6c:60:85:75:2a:94:74:8e:0a:32:67:40:f0:12:
aa:83:31:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:08 2025 by rpki-client