Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9c6c86-6aad-4f61-9750-c6dea957b0e0/1/FsKT9wFg18xE2IRljf_BYgzVGE8.roa
File: FsKT9wFg18xE2IRljf_BYgzVGE8.roa (raw, json)
Hash identifier: 5lU+5wxmxihzHn/f6mayzoQ/+5PzmFyee0RAD7bH1PI=
Subject key identifier: 16:C2:93:F7:01:60:D7:CC:44:D8:84:65:8D:FF:C1:62:0C:D5:18:4F
Certificate issuer: /CN=1b18c11dfa0abb0532ce3e28ca2077e901f1ab1e
Certificate serial: 0185FFB30C01F9D02F63DDA739C1FC0261E3
Authority key identifier: 1B:18:C1:1D:FA:0A:BB:05:32:CE:3E:28:CA:20:77:E9:01:F1:AB:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxjBHfoKuwUyzj4oyiB36QHxqx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9c6c86-6aad-4f61-9750-c6dea957b0e0/1/FsKT9wFg18xE2IRljf_BYgzVGE8.roa
Signing time: Sun 29 Jan 2023 22:43:22 +0000
ROA not before: Sun 29 Jan 2023 22:43:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9032
IP address blocks: 213.184.128.0/20 maxlen: 20
213.184.144.0/21 maxlen: 21
213.184.152.0/23 maxlen: 23
2a00:6540::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ff:b3:0c:01:f9:d0:2f:63:dd:a7:39:c1:fc:02:61:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b18c11dfa0abb0532ce3e28ca2077e901f1ab1e
Validity
Not Before: Jan 29 22:43:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16c293f70160d7cc44d884658dffc1620cd5184f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ad:7f:53:3a:b9:18:e2:f7:df:84:7d:79:3f:
8e:cb:0d:b4:3b:16:eb:60:09:8e:3d:65:19:41:bc:
f4:64:02:0f:de:9a:2a:bc:85:67:86:a6:92:ac:ff:
c0:bd:28:5e:27:3a:05:6d:4b:6f:84:0f:d0:89:52:
11:34:c0:77:f3:a3:55:71:d9:8c:34:27:97:44:93:
03:8e:3c:78:3f:77:59:d0:a0:21:60:d7:f6:fc:73:
12:9e:5f:38:a7:27:97:7a:70:7e:a0:12:45:82:58:
24:e1:5b:d1:3d:74:32:73:f5:3f:f3:3b:fe:9f:c5:
99:d0:3c:b0:a0:57:f1:df:f0:55:c3:67:04:8d:53:
e9:49:65:1e:86:f7:b5:6f:99:f2:ac:a0:6d:54:ee:
90:97:ec:44:ca:21:68:ea:b2:9c:8f:08:99:bb:c4:
f7:7c:3b:65:78:b2:2a:1b:f8:0d:ff:32:a0:88:84:
4d:42:3c:33:91:55:3f:b6:a7:aa:6c:6a:91:cc:dd:
56:b8:1f:ea:38:fe:d3:93:4c:33:5e:34:54:c1:45:
51:a7:0f:ac:46:af:e6:fc:c1:7b:1b:06:b0:ec:9b:
01:d6:80:02:b7:0c:fa:ed:12:de:f6:d5:1e:bb:d2:
c7:aa:9e:74:38:f3:cb:b7:18:3a:17:a7:ec:3f:f2:
4d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C2:93:F7:01:60:D7:CC:44:D8:84:65:8D:FF:C1:62:0C:D5:18:4F
X509v3 Authority Key Identifier:
keyid:1B:18:C1:1D:FA:0A:BB:05:32:CE:3E:28:CA:20:77:E9:01:F1:AB:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxjBHfoKuwUyzj4oyiB36QHxqx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9c6c86-6aad-4f61-9750-c6dea957b0e0/1/FsKT9wFg18xE2IRljf_BYgzVGE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9c6c86-6aad-4f61-9750-c6dea957b0e0/1/GxjBHfoKuwUyzj4oyiB36QHxqx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.184.128.0-213.184.153.255
IPv6:
2a00:6540::/29
Signature Algorithm: sha256WithRSAEncryption
11:82:e0:4a:7e:46:3b:9c:ca:6a:24:ed:4f:b2:35:e8:d5:29:
ac:d8:99:bd:49:d9:07:2a:ce:4e:72:86:d1:4d:9b:09:5b:de:
39:27:ae:2e:c9:11:7c:3b:0a:06:dc:51:ff:57:fc:4b:86:61:
47:3e:6f:ac:77:62:8c:78:30:f9:38:e1:a2:48:a1:ad:4c:72:
be:f8:18:4f:d1:db:70:01:f1:f1:2a:e8:0e:38:d4:d5:ba:8c:
ee:f0:70:14:fc:33:d2:30:06:a3:0d:ed:0f:74:69:a6:6c:30:
0a:b7:d8:a3:3c:8a:4a:24:15:06:de:6e:e3:1e:b7:24:af:bf:
10:0d:77:77:76:bc:7a:4a:ed:df:35:bd:35:39:fd:4d:13:53:
42:60:b1:1c:ba:d0:f6:0c:aa:dc:2e:ba:aa:55:5f:bf:7a:1a:
1d:c2:9e:ab:fc:74:52:40:49:44:60:90:b9:dc:c8:b5:11:f4:
f8:93:da:9f:a2:ed:d3:2c:39:97:ab:6f:36:a8:23:32:b2:49:
a2:25:8e:3c:a9:11:d7:82:13:23:a8:c6:d7:95:b2:eb:ab:52:
d5:1c:a0:be:21:ad:f6:84:6d:e2:79:ba:52:55:51:82:e0:f0:
e9:c3:63:f3:76:18:95:2e:75:ad:5d:18:a5:95:da:ad:be:00:
09:fb:d9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:50 2023 by rpki-client on console-fra.rpki-client.org