Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b4fab5-aa01-4a70-88d0-fbd9bf622f44/1/6ZgGj-KnnRFg0pbGl5vb0dOP6Kc.roa
File: 6ZgGj-KnnRFg0pbGl5vb0dOP6Kc.roa (raw, json)
Hash identifier: XOn2xvEHL8sE1T47yd6dDt93myfM3U1P4PtgGtWUcEo=
Subject key identifier: E9:98:06:8F:E2:A7:9D:11:60:D2:96:C6:97:9B:DB:D1:D3:8F:E8:A7
Certificate issuer: /CN=eb317e1be7bb6f82cb9c34a096dc088f5f8f92ca
Certificate serial: 01856E38D2C14891C34E4F7E0C206E8CA903
Authority key identifier: EB:31:7E:1B:E7:BB:6F:82:CB:9C:34:A0:96:DC:08:8F:5F:8F:92:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zF-G-e7b4LLnDSgltwIj1-Pkso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b4fab5-aa01-4a70-88d0-fbd9bf622f44/1/6ZgGj-KnnRFg0pbGl5vb0dOP6Kc.roa
Signing time: Sun 01 Jan 2023 16:44:55 +0000
ROA not before: Sun 01 Jan 2023 16:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206961
IP address blocks: 185.165.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:d2:c1:48:91:c3:4e:4f:7e:0c:20:6e:8c:a9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb317e1be7bb6f82cb9c34a096dc088f5f8f92ca
Validity
Not Before: Jan 1 16:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e998068fe2a79d1160d296c6979bdbd1d38fe8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6d:b8:3c:de:ac:12:32:1a:8f:a5:47:ec:2f:
60:c5:1c:94:4e:f9:0c:f0:8d:8a:d7:62:cc:db:ba:
d5:0d:60:3c:57:ff:f6:50:82:54:14:d9:41:9c:d4:
d5:78:c4:90:5b:6e:b1:31:4b:47:00:fa:85:28:48:
1d:17:77:79:99:9e:74:63:ba:11:2d:55:ad:13:4c:
77:b8:10:8b:d2:74:42:23:83:c7:b7:57:f0:b2:49:
b9:9a:88:6d:2a:33:f0:15:c8:b2:15:45:cf:66:f9:
45:d9:0c:03:66:76:3c:f4:24:c2:7b:48:1c:be:3f:
df:0e:ea:e7:71:0a:f5:00:4f:16:5d:66:d7:9c:ff:
fd:90:d7:fa:18:0e:d4:f0:86:0d:c9:b7:5a:2a:ef:
3d:b2:c0:77:0c:2c:d4:cf:63:49:d2:db:19:27:31:
67:5e:b5:fa:18:79:0b:2e:53:af:d1:6b:cc:95:30:
ed:9a:61:d8:43:a8:62:7a:cb:d6:e0:2a:3b:c0:c4:
fd:78:00:65:a4:d4:72:61:c9:ee:6c:9f:08:c4:ee:
ce:f2:10:a8:76:35:bc:ac:7c:bd:95:e7:7b:05:7b:
b2:f7:39:4f:01:60:8a:78:99:f9:9e:4e:c1:8c:b9:
2e:dd:e2:51:1a:c5:71:84:d6:5c:2d:81:14:17:6b:
c2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:98:06:8F:E2:A7:9D:11:60:D2:96:C6:97:9B:DB:D1:D3:8F:E8:A7
X509v3 Authority Key Identifier:
keyid:EB:31:7E:1B:E7:BB:6F:82:CB:9C:34:A0:96:DC:08:8F:5F:8F:92:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zF-G-e7b4LLnDSgltwIj1-Pkso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4fab5-aa01-4a70-88d0-fbd9bf622f44/1/6ZgGj-KnnRFg0pbGl5vb0dOP6Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4fab5-aa01-4a70-88d0-fbd9bf622f44/1/6zF-G-e7b4LLnDSgltwIj1-Pkso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.124.0/22
Signature Algorithm: sha256WithRSAEncryption
13:ca:7f:e9:4d:a0:79:a4:4e:39:3b:0b:68:8a:79:3f:fd:9e:
d8:19:7f:a1:8b:41:16:62:02:35:eb:95:24:2e:71:b6:81:aa:
47:ac:bc:1d:01:b9:3c:ca:94:3e:b7:d8:b9:05:15:af:32:f1:
cc:8f:68:bf:26:c5:27:af:12:f3:7c:69:0e:5e:63:ea:79:08:
98:b5:28:2c:ee:87:53:18:7f:71:5f:0c:50:fc:db:22:1b:ce:
20:9e:a8:dc:40:43:91:73:7a:da:58:da:6e:d4:7c:cc:7e:a9:
df:36:ea:d4:e5:09:e4:bf:08:2a:5c:d5:4a:64:a0:52:cf:d2:
6c:c4:c3:fe:2b:9a:7a:2a:e8:7a:f4:3f:01:6d:f8:ed:ce:42:
79:9b:06:40:26:1d:a6:ab:1b:18:d5:40:c0:29:57:6f:a8:85:
97:1a:cb:24:f4:0c:24:cd:6f:20:46:34:90:da:e7:e8:71:b1:
66:3b:f8:85:91:32:8b:fb:68:30:75:7f:65:9f:dc:1f:5c:ac:
e8:b8:da:d2:db:2e:93:e8:c3:60:08:d5:ce:29:6b:ff:03:c0:
0c:3c:52:78:47:c9:1c:10:75:6c:df:c9:d8:d6:2f:f7:5a:32:
61:db:66:42:fb:d4:7c:10:e3:8e:08:10:d2:5c:27:be:ce:e3:
8e:3b:e1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:52 2024 by rpki-client on console-fra.rpki-client.org