Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1560f1-bcc2-411a-8565-ec4a8af5a98e/1/2--aBE3_ubeGWBXNTGAZZmfaVX8.roa
File: 2--aBE3_ubeGWBXNTGAZZmfaVX8.roa (raw, json)
Hash identifier: IzSQV2lBRDNzGtKSKua2ZKOHC1KXWMws3ZK8sLTiGy8=
Subject key identifier: DB:EF:9A:04:4D:FF:B9:B7:86:58:15:CD:4C:60:19:66:67:DA:55:7F
Certificate issuer: /CN=6a9a54dfdb2aadd1f1efa90be1f02d8b214c6a3e
Certificate serial: 018C3A0CC61296BCA1056AA4975B08E650C5
Authority key identifier: 6A:9A:54:DF:DB:2A:AD:D1:F1:EF:A9:0B:E1:F0:2D:8B:21:4C:6A:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/appU39sqrdHx76kL4fAtiyFMaj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1560f1-bcc2-411a-8565-ec4a8af5a98e/1/2--aBE3_ubeGWBXNTGAZZmfaVX8.roa
Signing time: Tue 05 Dec 2023 12:56:04 +0000
ROA not before: Tue 05 Dec 2023 12:56:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1820
IP address blocks: 31.223.224.0/21 maxlen: 32
195.177.72.0/22 maxlen: 32
185.16.228.0/22 maxlen: 32
2a00:6180::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3a:0c:c6:12:96:bc:a1:05:6a:a4:97:5b:08:e6:50:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9a54dfdb2aadd1f1efa90be1f02d8b214c6a3e
Validity
Not Before: Dec 5 12:56:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbef9a044dffb9b7865815cd4c60196667da557f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:95:41:d0:51:48:3a:66:c8:0e:0e:d7:00:
ac:ac:b1:4d:c7:67:c4:17:83:d7:0d:5a:14:a2:b1:
9c:15:0c:5d:4d:58:bb:8f:9b:27:a1:92:06:82:ef:
83:e6:7d:f1:2b:41:90:fb:f1:3d:c0:4a:d9:f0:b1:
6c:78:03:1b:91:2e:77:29:d4:4b:70:03:45:35:1c:
b2:49:34:ef:9d:9b:c3:c3:eb:b7:ae:02:97:29:a6:
60:c8:ab:11:03:0a:71:2c:cb:3d:92:0a:8f:91:93:
a9:01:b4:69:4f:74:65:d1:f0:b8:4c:12:6b:e8:62:
f5:44:75:ed:d8:eb:39:13:30:92:ba:8e:1a:bf:24:
76:c4:b7:47:3e:b0:28:51:90:5d:2d:69:0d:f3:60:
b6:64:9f:87:0b:3e:8c:d4:fd:5f:fc:94:ec:af:bf:
93:7d:f6:0c:b3:9d:4a:63:0f:42:b1:a3:26:aa:23:
71:7e:98:cd:70:e8:e0:24:c5:87:6e:8d:a9:b4:37:
3c:0f:42:98:a9:31:0c:39:00:ac:14:50:73:91:bc:
90:fc:6c:de:2c:4c:0d:a0:ae:4a:f4:3d:05:15:7f:
8b:96:02:e9:48:e8:37:34:07:da:e6:38:6e:dd:ee:
eb:8f:74:1e:87:f5:15:8b:1b:eb:97:7d:c5:8d:63:
81:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EF:9A:04:4D:FF:B9:B7:86:58:15:CD:4C:60:19:66:67:DA:55:7F
X509v3 Authority Key Identifier:
keyid:6A:9A:54:DF:DB:2A:AD:D1:F1:EF:A9:0B:E1:F0:2D:8B:21:4C:6A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/appU39sqrdHx76kL4fAtiyFMaj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1560f1-bcc2-411a-8565-ec4a8af5a98e/1/2--aBE3_ubeGWBXNTGAZZmfaVX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1560f1-bcc2-411a-8565-ec4a8af5a98e/1/appU39sqrdHx76kL4fAtiyFMaj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.224.0/21
185.16.228.0/22
195.177.72.0/22
IPv6:
2a00:6180::/29
Signature Algorithm: sha256WithRSAEncryption
7b:74:5f:f2:47:5b:6d:90:3d:84:d8:cc:04:b4:4d:ad:ea:29:
4c:75:c5:47:05:30:89:fe:d1:a3:90:50:92:f8:c9:76:b3:e9:
5e:df:bf:59:92:b2:3c:43:00:64:b1:48:5c:58:6f:ea:08:df:
88:72:80:34:5d:55:39:79:66:20:5f:e9:b2:4c:b8:32:8c:6b:
90:69:e2:61:0c:2a:1d:8f:17:f9:5f:fe:0f:07:77:19:ed:51:
d2:3f:40:70:82:d2:dc:dd:57:e6:66:3a:32:c0:fb:b5:c4:3d:
95:60:65:95:9f:42:81:5c:e1:ae:2d:fc:48:e4:4b:f8:e3:82:
2f:d7:a3:f5:52:64:53:e0:71:ad:f8:62:78:a5:dd:23:77:7a:
6e:4a:82:c2:25:dc:68:fb:9f:71:dd:a0:7e:18:63:16:ff:2c:
1a:11:5e:0a:d8:4c:93:8b:7a:b6:97:d3:cf:36:c2:ee:e5:f3:
38:ca:84:c2:ab:fc:05:a7:5c:e3:68:e0:af:03:4d:8e:80:9e:
9f:fe:60:cf:24:aa:2b:50:34:61:6c:93:65:74:65:c4:32:94:
f0:19:24:f1:a8:09:ae:e0:bd:e0:a1:12:08:6c:1e:23:ef:0e:
91:e8:d2:ef:af:67:ef:47:95:8f:36:90:20:50:aa:24:bf:da:
79:ed:0b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:42 2024 by rpki-client on console-ams.rpki-client.org