Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b06a8b-4077-444e-819f-edf1638850ed/1/GQe6Ta_sAox-LBNpL9TCeLh9kJ8.roa
File: GQe6Ta_sAox-LBNpL9TCeLh9kJ8.roa (raw, json)
Hash identifier: 7PTxG7vFNhd2NABPU9S40srzIjCUtkaRx5Y9aVb6vlc=
Subject key identifier: 19:07:BA:4D:AF:EC:02:8C:7E:2C:13:69:2F:D4:C2:78:B8:7D:90:9F
Certificate issuer: /CN=6b99815d0a0bdd8ab82bb0235318db7e73b93dfb
Certificate serial: 0185737162686ECF4DFA891CAFD2658E3501
Authority key identifier: 6B:99:81:5D:0A:0B:DD:8A:B8:2B:B0:23:53:18:DB:7E:73:B9:3D:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5mBXQoL3Yq4K7AjUxjbfnO5Pfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b06a8b-4077-444e-819f-edf1638850ed/1/GQe6Ta_sAox-LBNpL9TCeLh9kJ8.roa
Signing time: Mon 02 Jan 2023 17:04:48 +0000
ROA not before: Mon 02 Jan 2023 17:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 185.99.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:71:62:68:6e:cf:4d:fa:89:1c:af:d2:65:8e:35:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b99815d0a0bdd8ab82bb0235318db7e73b93dfb
Validity
Not Before: Jan 2 17:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1907ba4dafec028c7e2c13692fd4c278b87d909f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dc:e0:a9:c9:11:c6:69:79:07:82:09:f4:de:
08:d9:31:03:02:0d:da:b6:c8:6b:61:e4:5a:30:52:
92:9a:16:b9:49:d7:ef:c9:d0:12:96:68:03:45:b7:
89:86:03:b8:84:41:68:eb:8f:bd:b9:e5:bf:ae:cc:
c9:a0:68:5b:31:3a:f3:14:c8:83:f5:a8:82:df:8e:
d9:40:94:07:9c:ef:d8:1b:7d:5c:85:30:5c:89:a8:
69:26:a7:2a:0c:12:66:0a:cb:c6:c5:33:61:61:0a:
e1:63:eb:b4:aa:40:00:5a:8b:1d:fd:84:6b:0e:61:
2a:0c:45:0d:41:b4:04:2f:5e:f8:03:41:99:d0:a4:
2e:78:6c:39:a4:fe:f2:e7:e5:ac:15:c1:d4:98:b1:
dc:63:f0:0b:79:10:69:ad:a5:f2:a4:e4:59:33:11:
ea:12:ba:c2:4a:16:43:a5:ac:c8:00:47:89:6b:00:
0e:79:da:70:2a:0b:22:94:d8:20:4a:97:ee:dc:5a:
21:fb:9c:5e:0f:30:c8:af:3e:e6:fe:32:02:ff:7c:
d0:c1:de:fe:4b:5b:8a:48:18:dd:3c:bd:ee:de:66:
81:c0:45:89:0b:97:4c:18:eb:37:47:ed:ce:82:ea:
b1:cc:0b:c4:75:9e:9f:2d:bc:c7:5a:06:c7:fc:ef:
f7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:07:BA:4D:AF:EC:02:8C:7E:2C:13:69:2F:D4:C2:78:B8:7D:90:9F
X509v3 Authority Key Identifier:
keyid:6B:99:81:5D:0A:0B:DD:8A:B8:2B:B0:23:53:18:DB:7E:73:B9:3D:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5mBXQoL3Yq4K7AjUxjbfnO5Pfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06a8b-4077-444e-819f-edf1638850ed/1/GQe6Ta_sAox-LBNpL9TCeLh9kJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06a8b-4077-444e-819f-edf1638850ed/1/a5mBXQoL3Yq4K7AjUxjbfnO5Pfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.23.0/24
Signature Algorithm: sha256WithRSAEncryption
06:8c:4c:a3:1b:3c:b5:11:3c:48:9b:28:ea:59:13:b0:08:4f:
41:59:9f:11:89:ed:96:17:44:de:2d:4b:05:f5:6b:98:73:9c:
9b:3a:d3:00:0b:e0:42:4c:c1:93:ea:38:62:95:38:4b:4c:3f:
4d:ec:32:f3:ad:5a:46:ec:80:e0:ae:52:64:43:1e:ca:64:89:
60:ca:81:09:c6:b4:20:63:30:31:c2:7f:2d:d5:54:b6:72:e3:
6b:07:f8:a6:01:92:e2:20:89:07:ec:25:56:15:73:ff:ea:49:
7e:76:92:96:6d:58:c2:9e:0c:35:61:a5:f5:34:05:49:73:37:
e5:85:47:02:95:33:74:ed:b4:2b:9d:11:42:86:70:7a:6e:09:
f0:a3:8c:c4:1d:9b:43:6e:47:89:6a:87:18:5f:7c:51:c7:c2:
5d:cd:8f:13:84:c2:7f:4b:55:d0:54:39:e6:95:24:cc:dc:6b:
f1:19:30:e2:14:b2:bd:c0:8c:ca:20:87:ad:7a:b1:2c:d5:86:
67:cb:1b:a2:ea:fe:22:cd:3b:9a:a4:a5:86:e7:b8:f7:e9:b5:
a6:17:0b:36:47:f9:c6:24:84:82:1c:13:c9:ac:aa:26:61:14:
43:d5:82:f1:6a:0c:44:ac:55:36:8b:63:96:52:d4:bc:f9:8f:
ae:6e:27:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:12 2024 by rpki-client on console-fra.rpki-client.org