Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8f730d-1344-49c7-a2dd-cbd7fe0da736/1/DF6kj_nJS_Fw0LJ3juWUTm0yfzw.roa
File: DF6kj_nJS_Fw0LJ3juWUTm0yfzw.roa (raw, json)
Hash identifier: 2IQXOufX7P4sfD0CaN6gr9+cqUuUwvekJ0C++2xZNsU=
Subject key identifier: 0C:5E:A4:8F:F9:C9:4B:F1:70:D0:B2:77:8E:E5:94:4E:6D:32:7F:3C
Certificate issuer: /CN=168243615fc13a255d8523a85b750e2b650426dd
Certificate serial: 01856D53EF3EFD5DE9057FCEF9C1359D385B
Authority key identifier: 16:82:43:61:5F:C1:3A:25:5D:85:23:A8:5B:75:0E:2B:65:04:26:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoJDYV_BOiVdhSOoW3UOK2UEJt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/8f730d-1344-49c7-a2dd-cbd7fe0da736/1/DF6kj_nJS_Fw0LJ3juWUTm0yfzw.roa
Signing time: Sun 01 Jan 2023 12:34:55 +0000
ROA not before: Sun 01 Jan 2023 12:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59955
IP address blocks: 185.9.136.0/24 maxlen: 24
185.9.139.0/24 maxlen: 24
185.9.137.0/24 maxlen: 24
185.9.138.0/24 maxlen: 24
2a02:dec0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:ef:3e:fd:5d:e9:05:7f:ce:f9:c1:35:9d:38:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168243615fc13a255d8523a85b750e2b650426dd
Validity
Not Before: Jan 1 12:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c5ea48ff9c94bf170d0b2778ee5944e6d327f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cc:7a:30:30:49:3f:4c:84:d2:0f:e2:76:4d:
69:50:71:b3:97:55:e8:7c:f1:28:7b:2b:59:61:14:
ba:76:98:9b:cd:5f:f7:eb:93:d8:45:d0:e2:be:56:
04:90:45:0c:27:48:06:d0:85:7c:a9:6c:37:69:fa:
a8:6d:33:d8:22:b8:b7:4b:30:24:4c:47:fb:eb:c3:
20:56:5c:1f:d4:34:8e:8d:27:bf:16:80:04:cd:51:
d9:d0:e8:f9:2e:06:57:1f:e4:eb:fc:67:f7:8b:b1:
45:de:33:68:b1:fd:58:eb:6e:48:54:d3:9d:ef:9e:
2b:55:51:62:c5:5c:22:b3:f9:cd:29:6f:ef:d3:5c:
92:2c:a8:b7:fe:9a:e7:3d:da:4f:2a:1b:81:cd:b0:
6d:ca:bf:6f:3f:3d:93:9d:e3:d9:fe:4e:ea:9d:aa:
3a:57:92:77:d4:d2:60:58:de:eb:f4:cb:67:f4:61:
c7:9e:15:23:12:d6:69:e6:24:3f:ce:f1:dd:0e:0b:
2c:19:cb:28:28:ef:63:10:8f:07:85:c3:87:e6:fe:
ce:ad:ba:d2:94:a8:f1:be:b7:3e:2b:d4:29:19:ac:
a6:e3:8f:74:1d:d4:f6:9b:53:86:c7:50:37:b5:e1:
4a:47:6c:5d:e5:ec:b0:ef:85:86:f4:2a:8a:37:ba:
41:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5E:A4:8F:F9:C9:4B:F1:70:D0:B2:77:8E:E5:94:4E:6D:32:7F:3C
X509v3 Authority Key Identifier:
keyid:16:82:43:61:5F:C1:3A:25:5D:85:23:A8:5B:75:0E:2B:65:04:26:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoJDYV_BOiVdhSOoW3UOK2UEJt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8f730d-1344-49c7-a2dd-cbd7fe0da736/1/DF6kj_nJS_Fw0LJ3juWUTm0yfzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8f730d-1344-49c7-a2dd-cbd7fe0da736/1/FoJDYV_BOiVdhSOoW3UOK2UEJt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.136.0/22
IPv6:
2a02:dec0::/32
Signature Algorithm: sha256WithRSAEncryption
44:f2:37:b6:15:34:c2:1a:47:12:51:42:b5:cb:85:fd:02:ae:
48:a8:0e:13:36:99:5e:96:bf:ab:2b:24:75:b3:37:bd:e5:90:
2e:38:ef:ce:a0:fc:ab:fd:9e:6f:2d:1e:a4:8f:00:1c:47:52:
c1:3b:13:35:b5:f3:0c:0e:28:44:5e:7e:85:3c:12:9e:f8:30:
a1:58:59:d8:a7:c5:1a:96:a5:93:53:b5:77:47:54:60:ff:bf:
ef:ff:3c:20:92:a5:1f:50:6a:d5:c5:1a:03:69:ab:2e:0b:ed:
fa:1f:eb:d3:34:23:7a:26:9d:76:0f:e8:e5:dc:2b:5e:6b:01:
dd:82:9c:6f:d2:d3:f5:3f:7c:48:8e:2d:39:ae:64:7f:ff:b5:
bd:3c:bf:e2:17:1e:7d:09:5d:0e:37:72:98:ea:76:6d:e7:2b:
b5:4b:ea:d3:f8:09:42:5c:3d:de:62:5f:19:a8:da:be:a5:7b:
f8:4b:11:f1:09:d0:8b:2b:ad:77:e9:92:6a:51:e9:95:4a:32:
8b:61:c4:44:1d:ce:90:31:37:69:6d:ca:b0:9c:35:60:04:13:
f0:48:d6:2f:1b:86:d5:65:9f:57:50:32:ad:d8:c7:80:07:b4:
1f:2a:00:fb:b9:5a:b8:88:06:9e:06:8c:d0:c4:07:f8:5f:ec:
3c:98:1d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:46 2024 by rpki-client on console-ams.rpki-client.org