Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/6bea5d-80fd-47bc-b1c5-38746bb859cd/1/hhFFgiBoAQIqRlfzmRcUMkuLN10.roa
File: hhFFgiBoAQIqRlfzmRcUMkuLN10.roa (raw, json)
Hash identifier: BYF+oxNDOxyK/3eLDdiNovaoZz7DfE8O5RUk0lmABq4=
Subject key identifier: 86:11:45:82:20:68:01:02:2A:46:57:F3:99:17:14:32:4B:8B:37:5D
Certificate issuer: /CN=1b5eb04fe15554fdb9a2433a126cad20987a694d
Certificate serial: 01856F79A770190A1D983695954AF41F0C66
Authority key identifier: 1B:5E:B0:4F:E1:55:54:FD:B9:A2:43:3A:12:6C:AD:20:98:7A:69:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G16wT-FVVP25okM6EmytIJh6aU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/6bea5d-80fd-47bc-b1c5-38746bb859cd/1/hhFFgiBoAQIqRlfzmRcUMkuLN10.roa
Signing time: Sun 01 Jan 2023 22:35:21 +0000
ROA not before: Sun 01 Jan 2023 22:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.184.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:a7:70:19:0a:1d:98:36:95:95:4a:f4:1f:0c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b5eb04fe15554fdb9a2433a126cad20987a694d
Validity
Not Before: Jan 1 22:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86114582206801022a4657f3991714324b8b375d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7a:14:16:23:53:20:2a:cb:3c:ce:48:25:86:
ea:91:d8:e7:61:a9:d5:c8:79:2c:16:43:53:aa:34:
0b:bc:38:7f:d5:fd:12:36:87:5b:54:04:b5:c1:ec:
eb:aa:ea:03:28:9b:7c:6b:af:35:32:e5:7c:bc:ca:
ad:e1:6d:04:22:53:ed:3a:87:dd:22:07:88:1f:20:
c1:47:dd:9f:68:33:15:c5:d9:f2:50:de:5a:53:77:
9c:7c:a7:d4:33:fc:17:cf:35:5b:68:92:82:e3:13:
f9:7c:1a:bc:df:52:9a:05:78:2d:c3:fd:9e:ae:71:
a3:ef:f4:1c:60:be:18:1f:c1:09:c3:d2:9a:32:b8:
98:21:2e:23:22:5a:ad:da:fb:9d:56:ee:7b:4f:95:
f9:e2:41:0b:8f:5b:ee:a9:23:3b:94:db:31:7a:85:
25:8d:09:ba:8b:f2:21:ef:28:0a:c9:8a:41:20:49:
25:32:b8:43:0c:e1:09:12:ec:60:d4:84:e0:2f:8d:
47:11:a9:7b:3f:51:55:f2:78:09:d7:48:f6:a6:77:
40:5f:87:48:88:31:d2:5f:38:45:27:88:ba:2b:78:
e3:de:3a:28:0e:99:f2:91:d5:c6:55:bf:de:21:4f:
85:7b:7d:de:7b:3f:f5:61:51:fc:8c:a2:85:98:68:
7a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:11:45:82:20:68:01:02:2A:46:57:F3:99:17:14:32:4B:8B:37:5D
X509v3 Authority Key Identifier:
keyid:1B:5E:B0:4F:E1:55:54:FD:B9:A2:43:3A:12:6C:AD:20:98:7A:69:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G16wT-FVVP25okM6EmytIJh6aU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/6bea5d-80fd-47bc-b1c5-38746bb859cd/1/hhFFgiBoAQIqRlfzmRcUMkuLN10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/6bea5d-80fd-47bc-b1c5-38746bb859cd/1/G16wT-FVVP25okM6EmytIJh6aU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.216.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:d5:6f:51:1e:b3:27:a1:0d:ec:ba:e6:d6:04:3f:f8:d0:ee:
2e:a3:73:5d:ae:87:8a:d0:b2:b6:bf:c5:e8:5f:2c:b0:91:80:
b4:c6:df:bc:00:51:41:64:67:7c:65:1d:8d:3f:ac:01:89:3c:
17:79:74:45:fb:0c:00:eb:15:e3:96:f3:ef:a3:f5:c2:cc:df:
93:7f:39:35:52:eb:79:e9:a5:47:6c:79:2c:c9:ba:9e:d9:00:
31:42:db:f9:c8:0a:e2:10:54:30:33:d3:01:85:b0:20:c0:02:
c1:5b:fe:f8:11:d7:b1:fe:46:d7:73:14:0c:67:80:61:a7:4b:
6e:02:0a:84:7d:3f:ac:44:56:af:c9:6f:ae:c6:fd:00:eb:cf:
7a:6c:5d:be:e5:d3:0e:2b:7c:d1:2d:7a:c3:16:70:af:81:57:
97:c7:e4:cd:91:5e:15:0b:4a:d5:d3:ff:ff:91:1b:99:85:4d:
a1:c1:7b:36:54:ff:cd:2c:e7:93:06:f6:05:c1:74:9d:d6:d8:
7e:4e:d5:38:2a:88:37:c4:a3:da:58:e3:ab:80:6e:90:2e:aa:
bf:01:61:06:c5:09:30:32:a4:d6:a6:88:a2:b1:50:a5:6d:b1:
c7:d8:3e:24:1f:ba:ee:43:87:bd:01:5f:4a:e4:1c:cb:d1:ff:
49:00:2b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:41 2024 by rpki-client on console-fra.rpki-client.org