Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1560f1-bcc2-411a-8565-ec4a8af5a98e/1/okKpPq4qihYbXlOjO9xemH_aVH4.roa
File: okKpPq4qihYbXlOjO9xemH_aVH4.roa (raw, json)
Hash identifier: zgPcnUVB69II4/JknoTEx54Bhc1FzugZ45U0pgqyucU=
Subject key identifier: A2:42:A9:3E:AE:2A:8A:16:1B:5E:53:A3:3B:DC:5E:98:7F:DA:54:7E
Certificate issuer: /CN=6a9a54dfdb2aadd1f1efa90be1f02d8b214c6a3e
Certificate serial: 018B4C8AF18FB7FE623F71ED6F1CF63152FB
Authority key identifier: 6A:9A:54:DF:DB:2A:AD:D1:F1:EF:A9:0B:E1:F0:2D:8B:21:4C:6A:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/appU39sqrdHx76kL4fAtiyFMaj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1560f1-bcc2-411a-8565-ec4a8af5a98e/1/okKpPq4qihYbXlOjO9xemH_aVH4.roa
Signing time: Fri 20 Oct 2023 10:04:16 +0000
ROA not before: Fri 20 Oct 2023 10:04:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.16.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4c:8a:f1:8f:b7:fe:62:3f:71:ed:6f:1c:f6:31:52:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9a54dfdb2aadd1f1efa90be1f02d8b214c6a3e
Validity
Not Before: Oct 20 10:04:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a242a93eae2a8a161b5e53a33bdc5e987fda547e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d4:57:5f:53:43:0b:5d:6d:cf:0f:cf:0d:45:
d4:8f:5b:c4:c0:9a:62:7f:fa:17:ce:1d:94:9b:1a:
31:0f:5a:f1:ea:b7:63:fb:fb:6c:7d:6a:dc:dd:db:
b1:a9:33:5a:96:5a:04:15:a9:f8:50:47:30:0f:83:
4d:79:7e:21:ef:b3:40:35:0c:ba:f7:0f:b0:39:ac:
84:2b:90:ef:6a:e7:00:f8:32:39:d3:bb:35:1f:51:
e8:79:ce:f7:3f:fc:37:09:6b:a9:30:6f:ee:52:b3:
69:a0:22:13:da:99:4d:2f:b5:ca:2b:21:fc:0c:6a:
49:0a:ca:50:21:ad:6a:37:d5:80:70:6e:81:86:41:
a2:f0:df:d5:fe:0c:de:a0:98:76:99:0b:db:2a:12:
87:3c:de:5e:24:bf:88:3f:de:47:03:a8:ab:41:0b:
8b:fd:a8:ea:31:97:97:e2:cf:4a:29:61:da:bc:21:
c9:4f:1e:da:e1:42:e7:39:43:8c:7e:95:90:68:e4:
28:93:51:40:0e:74:21:f7:20:17:59:d9:bf:fe:75:
f4:17:df:fb:aa:08:91:bf:6c:f9:61:94:a0:9b:db:
6d:40:d1:60:de:8a:46:26:27:35:82:c4:35:29:29:
e8:ef:60:2c:3f:1a:17:57:0c:d9:da:85:69:b7:d0:
01:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:42:A9:3E:AE:2A:8A:16:1B:5E:53:A3:3B:DC:5E:98:7F:DA:54:7E
X509v3 Authority Key Identifier:
keyid:6A:9A:54:DF:DB:2A:AD:D1:F1:EF:A9:0B:E1:F0:2D:8B:21:4C:6A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/appU39sqrdHx76kL4fAtiyFMaj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1560f1-bcc2-411a-8565-ec4a8af5a98e/1/okKpPq4qihYbXlOjO9xemH_aVH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1560f1-bcc2-411a-8565-ec4a8af5a98e/1/appU39sqrdHx76kL4fAtiyFMaj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.231.0/24
Signature Algorithm: sha256WithRSAEncryption
01:83:51:6d:f5:20:94:a7:fc:bb:7b:eb:ad:da:a5:23:d0:b6:
0a:6e:a9:9f:12:90:9c:fa:e4:e6:cd:40:84:b9:24:44:b8:e0:
6f:be:98:87:3b:0d:fc:49:d8:31:f1:0e:bc:7f:52:7b:26:97:
ed:5d:11:3b:3c:d8:37:0d:5b:2c:a7:45:4b:3d:b5:db:3b:be:
e8:3a:f2:68:50:1f:56:d9:46:ca:af:0e:15:3e:bc:cb:9b:af:
20:c8:8e:46:3d:7a:34:0e:8f:d0:38:7a:d5:72:5e:e9:33:e2:
46:c2:e5:c9:e8:95:90:18:ce:f7:c7:b1:5e:17:cf:da:ba:7d:
a1:d0:05:45:31:6b:40:5e:bf:3a:86:05:ae:18:4d:3a:1d:86:
98:34:b2:ce:3b:10:76:9f:b6:e3:6e:18:55:54:f3:2c:a1:bd:
84:6e:3e:1e:87:ac:c2:d6:5f:97:5b:06:6e:d9:f5:b0:34:25:
8c:c0:64:71:e0:b2:62:48:4f:ed:82:bf:53:4b:55:9d:16:05:
0f:ad:be:3e:b2:f5:cc:ea:82:16:51:be:44:cc:ce:5d:66:e7:
23:fe:f5:f3:82:a8:ea:3a:5e:a8:03:e5:16:15:c6:c5:e2:b1:
ed:3d:94:ab:c6:dc:71:91:34:a8:b8:a6:6c:5f:8d:d8:97:04:
71:a6:c9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:51 2024 by rpki-client on console-fra.rpki-client.org