Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b06a8b-4077-444e-819f-edf1638850ed/1/G22A7fCdf1BluUSp-MdHvC0k7Hw.roa
File: G22A7fCdf1BluUSp-MdHvC0k7Hw.roa (raw, json)
Hash identifier: 1S2qAnJPKUF29wTcozflLmYqWJEqWDnZM0CD1+hfEDA=
Subject key identifier: 1B:6D:80:ED:F0:9D:7F:50:65:B9:44:A9:F8:C7:47:BC:2D:24:EC:7C
Certificate issuer: /CN=6b99815d0a0bdd8ab82bb0235318db7e73b93dfb
Certificate serial: 01991990
Authority key identifier: 6B:99:81:5D:0A:0B:DD:8A:B8:2B:B0:23:53:18:DB:7E:73:B9:3D:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5mBXQoL3Yq4K7AjUxjbfnO5Pfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b06a8b-4077-444e-819f-edf1638850ed/1/G22A7fCdf1BluUSp-MdHvC0k7Hw.roa
Signing time: Sat 01 Jan 2022 10:57:14 +0000
ROA not before: Sat 01 Jan 2022 10:57:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 185.99.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26810768 (0x1991990)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b99815d0a0bdd8ab82bb0235318db7e73b93dfb
Validity
Not Before: Jan 1 10:57:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b6d80edf09d7f5065b944a9f8c747bc2d24ec7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:80:4c:a6:c4:9c:bc:37:3b:cb:5d:ef:04:
89:07:ff:57:e5:3e:2d:52:3b:d8:4e:31:d7:67:b0:
9e:62:c2:2f:d2:64:41:6d:32:53:a4:28:1c:4d:40:
d3:da:c6:e4:f6:b6:65:41:dd:09:b8:27:e9:95:4c:
0e:59:53:27:66:a7:b1:b8:1b:75:6f:1f:33:12:66:
f5:5f:85:fc:a4:1e:6b:0e:1a:e9:9b:5c:d1:46:83:
c1:d6:f8:5f:a2:7c:a1:a5:bb:8e:92:56:fa:a8:e4:
0e:02:91:2e:56:db:fe:64:0e:72:f5:cd:22:fb:b4:
7f:77:43:e3:bb:50:2c:2c:cf:20:6e:b7:ae:db:ea:
86:77:2c:70:75:33:4b:49:ec:f2:ba:4c:81:84:dd:
30:8d:e0:08:b6:fd:4a:fa:bc:4f:b4:e9:20:52:5d:
67:50:8f:7a:f1:4c:02:33:ef:17:8a:a7:96:6a:0a:
d8:bd:c4:78:12:dd:84:08:d6:ca:ca:8f:25:3f:23:
4f:44:53:2c:a3:54:1b:74:a2:d0:10:54:cc:ca:d6:
9a:1e:7f:eb:d8:e0:41:38:af:6d:9d:c6:a4:82:fb:
b4:3e:b4:72:b6:5b:38:82:d1:40:7a:dd:64:79:a7:
bd:ce:8e:5d:fd:44:68:26:29:ed:01:ae:b7:7f:33:
79:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6D:80:ED:F0:9D:7F:50:65:B9:44:A9:F8:C7:47:BC:2D:24:EC:7C
X509v3 Authority Key Identifier:
keyid:6B:99:81:5D:0A:0B:DD:8A:B8:2B:B0:23:53:18:DB:7E:73:B9:3D:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5mBXQoL3Yq4K7AjUxjbfnO5Pfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06a8b-4077-444e-819f-edf1638850ed/1/G22A7fCdf1BluUSp-MdHvC0k7Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06a8b-4077-444e-819f-edf1638850ed/1/a5mBXQoL3Yq4K7AjUxjbfnO5Pfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.23.0/24
Signature Algorithm: sha256WithRSAEncryption
68:29:e9:0d:24:d6:4a:70:70:34:cd:a7:c0:5d:a4:74:d1:ed:
f9:45:cf:f6:5a:fe:09:05:dc:12:bc:b3:86:8e:da:e7:bb:8e:
b7:05:d1:de:f9:4a:d5:f7:91:59:1e:d7:05:ce:e9:7c:e8:a3:
6c:86:49:4d:59:25:6a:e1:51:44:48:ad:4f:0e:fd:5e:c3:46:
3b:93:48:0d:41:30:4c:27:70:fe:70:d8:88:fe:3a:29:44:40:
07:57:8e:68:a0:4c:10:ba:98:92:89:66:5d:5e:f8:2b:9b:87:
98:78:de:66:9f:8b:7d:4a:71:55:f0:5b:2a:bd:4b:cb:df:8d:
74:00:1b:c0:26:5c:7f:37:e0:ca:d1:81:46:68:62:48:92:58:
3a:24:37:cd:29:a2:11:ee:a2:ad:06:ee:02:14:e3:83:32:29:
3e:3f:29:b3:4e:24:e5:f1:23:ac:d9:76:39:85:37:74:c5:d6:
e3:0a:5c:69:de:64:a0:2a:4c:ef:cd:06:cc:94:d2:25:06:53:
de:06:c9:25:9e:c9:f0:52:7d:81:29:c7:52:31:4a:1c:f3:57:
c3:76:34:2b:07:66:90:da:a5:d2:a9:27:65:5c:3d:66:d2:b9:
d8:87:30:40:a7:24:ed:5a:d6:51:d0:61:d2:9c:22:1e:5c:84:
bd:80:49:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:12 2024 by rpki-client on console-fra.rpki-client.org