Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/269252-7a19-4499-913c-527992ad2cb4/1/BWrB1eLkTxU63kQ1Lc4hzPhkckU.roa
File: BWrB1eLkTxU63kQ1Lc4hzPhkckU.roa (raw, json)
Hash identifier: m3bGl4Ecnpi8T98Sqp/pbwMSQBT6QYSCmaOmXuQiL2I=
Subject key identifier: 05:6A:C1:D5:E2:E4:4F:15:3A:DE:44:35:2D:CE:21:CC:F8:64:72:45
Certificate issuer: /CN=6ab9de72a8f18862bc48aa00e66449eb1004a159
Certificate serial: 01882086B427804EF07A17BD4FB6D27521D4
Authority key identifier: 6A:B9:DE:72:A8:F1:88:62:BC:48:AA:00:E6:64:49:EB:10:04:A1:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arnecqjxiGK8SKoA5mRJ6xAEoVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/269252-7a19-4499-913c-527992ad2cb4/1/BWrB1eLkTxU63kQ1Lc4hzPhkckU.roa
Signing time: Mon 15 May 2023 17:47:58 +0000
ROA not before: Mon 15 May 2023 17:47:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 185.235.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b4:27:80:4e:f0:7a:17:bd:4f:b6:d2:75:21:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab9de72a8f18862bc48aa00e66449eb1004a159
Validity
Not Before: May 15 17:47:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=056ac1d5e2e44f153ade44352dce21ccf8647245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:4a:87:8a:e9:4b:5c:bc:b2:76:5e:ff:18:
16:4d:f2:82:59:7a:87:94:82:e5:ee:6d:d3:6c:88:
49:3f:fd:0e:8e:54:be:32:1e:6f:a1:ca:18:53:e0:
80:14:54:00:66:d7:33:20:0d:27:97:3d:b7:87:58:
dc:4c:ed:60:0b:49:a6:cd:e0:21:03:a1:cf:59:11:
21:07:61:7e:9e:97:e1:4e:59:f9:f4:af:0c:b9:d0:
de:dd:d5:f3:e2:43:24:ec:af:a2:34:9a:86:43:93:
5b:08:3b:27:60:f2:e6:ff:3a:ef:40:ae:8a:b3:a8:
9c:1d:5d:66:58:e3:6a:88:70:d0:ae:0c:8a:60:47:
85:2c:49:e7:c8:d9:5f:6b:f0:3d:94:67:b6:a1:b1:
c7:16:a3:7b:a8:5f:f6:ab:39:c2:7e:4e:db:44:b5:
ad:0e:2f:90:8e:33:c1:5b:7a:f2:c1:f5:55:2c:6c:
30:0e:b3:a1:79:68:12:7d:c9:27:31:28:92:fd:d3:
08:09:77:a0:df:60:20:65:64:d0:78:34:f7:76:62:
f5:cc:4d:b7:55:7b:64:4f:24:6b:29:2f:56:6d:51:
d8:e3:02:d2:b2:57:19:f1:98:9a:13:cc:42:6b:45:
c3:5e:6d:eb:54:92:57:3a:47:4c:39:32:e7:ce:9c:
14:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6A:C1:D5:E2:E4:4F:15:3A:DE:44:35:2D:CE:21:CC:F8:64:72:45
X509v3 Authority Key Identifier:
keyid:6A:B9:DE:72:A8:F1:88:62:BC:48:AA:00:E6:64:49:EB:10:04:A1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arnecqjxiGK8SKoA5mRJ6xAEoVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/269252-7a19-4499-913c-527992ad2cb4/1/BWrB1eLkTxU63kQ1Lc4hzPhkckU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/269252-7a19-4499-913c-527992ad2cb4/1/arnecqjxiGK8SKoA5mRJ6xAEoVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.225.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:16:0a:23:80:d3:5d:4e:d1:6d:4d:58:ff:6b:90:dd:12:19:
d4:f5:03:75:78:45:99:9d:f7:b1:d6:63:cd:13:2f:ae:10:1e:
e8:b1:a0:51:83:89:b4:2a:5c:10:78:b3:0b:bf:e2:98:b8:28:
26:7a:83:5d:8e:63:9b:86:46:c9:aa:49:24:5a:44:8d:e2:0e:
4c:44:92:fd:5c:3c:c4:a7:81:94:da:53:3a:20:8a:05:ab:df:
cd:df:6f:84:f8:4e:b2:4f:72:6d:79:3e:2e:99:4f:5b:2b:fd:
21:17:60:6b:0f:98:a1:62:30:63:00:56:66:db:dd:b1:8d:32:
47:89:64:ae:5f:f1:e8:79:7d:fb:ae:32:bb:0b:b8:9a:99:1d:
2f:d7:1f:31:2f:15:f4:9e:c1:d3:0b:1b:3f:46:19:1a:9d:43:
b1:9b:be:e0:15:25:f0:2f:c9:db:f5:b3:32:9f:08:ab:27:03:
92:ca:9d:f9:ce:f1:7e:92:b6:10:d6:7f:51:d8:84:c0:f4:ed:
ae:63:7b:28:77:30:05:6b:69:22:31:8d:03:77:26:e9:53:00:
16:cf:46:89:8d:df:32:44:08:49:84:f2:26:99:4b:94:09:e7:
c2:81:4b:3e:02:39:7b:84:68:6c:d5:37:e8:e9:83:c4:1f:a1:
76:47:1f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 31 15:54:06 2023 by rpki-client on console-fra.rpki-client.org