Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7dee10-9313-4825-a1dd-8cb741aa8710/1/G6agnEMMGdJTUlbVqfZ4OkptU3A.roa
File: G6agnEMMGdJTUlbVqfZ4OkptU3A.roa (raw, json)
Hash identifier: rsG/RMExwVFz4c4JDuC/0V8aReBhcHFfCe2Cff0mN/g=
Subject key identifier: 1B:A6:A0:9C:43:0C:19:D2:53:52:56:D5:A9:F6:78:3A:4A:6D:53:70
Certificate issuer: /CN=233db899154a9825d1b31dd05a5838d270aaf4f4
Certificate serial: 018682CFFFAC9B820E88E403B3778F1F91CB
Authority key identifier: 23:3D:B8:99:15:4A:98:25:D1:B3:1D:D0:5A:58:38:D2:70:AA:F4:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iz24mRVKmCXRsx3QWlg40nCq9PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7dee10-9313-4825-a1dd-8cb741aa8710/1/G6agnEMMGdJTUlbVqfZ4OkptU3A.roa
Signing time: Fri 24 Feb 2023 09:45:14 +0000
ROA not before: Fri 24 Feb 2023 09:45:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136923
IP address blocks: 185.25.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:cf:ff:ac:9b:82:0e:88:e4:03:b3:77:8f:1f:91:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233db899154a9825d1b31dd05a5838d270aaf4f4
Validity
Not Before: Feb 24 09:45:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ba6a09c430c19d2535256d5a9f6783a4a6d5370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:eb:c4:25:95:3e:35:41:3e:2a:9d:11:53:77:
ac:75:ee:26:8e:db:a1:02:7b:f6:16:9f:62:16:66:
34:dd:13:34:df:7b:1a:8a:1e:fb:c4:d7:36:50:ea:
9c:ad:2c:4e:56:30:e4:6f:1a:3f:23:59:2a:fd:e3:
69:cd:16:4b:bd:59:e4:0f:c3:5d:b2:4c:85:4e:3b:
d8:79:03:ab:6c:c2:98:b7:cc:15:28:50:5a:ba:77:
f4:31:79:61:04:d7:b7:40:6b:c6:11:ec:28:99:87:
21:21:25:d8:30:d6:06:8e:28:66:a6:bb:e3:26:a0:
90:5b:ab:fe:ec:b7:39:f9:31:2b:66:c0:d4:b4:e9:
23:6f:05:c0:17:26:12:51:7a:04:79:d1:52:bc:d3:
a9:41:31:58:c4:42:53:cf:83:e3:7a:a1:ae:8b:8a:
98:0a:b3:4a:65:16:bb:5e:af:c9:e4:08:89:34:02:
9e:93:9f:b2:15:33:c1:f0:d7:16:c3:08:6e:76:6f:
18:a4:0d:5c:03:d2:94:7d:ef:57:5a:76:de:29:b8:
16:bd:f7:5d:27:7f:1c:9f:37:96:c3:15:31:8b:cf:
81:fd:28:01:06:d5:3c:db:79:65:8a:68:8c:0a:50:
bc:43:19:ca:5d:3b:42:aa:3b:c2:f7:c5:5a:41:75:
99:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A6:A0:9C:43:0C:19:D2:53:52:56:D5:A9:F6:78:3A:4A:6D:53:70
X509v3 Authority Key Identifier:
keyid:23:3D:B8:99:15:4A:98:25:D1:B3:1D:D0:5A:58:38:D2:70:AA:F4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz24mRVKmCXRsx3QWlg40nCq9PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7dee10-9313-4825-a1dd-8cb741aa8710/1/G6agnEMMGdJTUlbVqfZ4OkptU3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7dee10-9313-4825-a1dd-8cb741aa8710/1/Iz24mRVKmCXRsx3QWlg40nCq9PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.104.0/24
Signature Algorithm: sha256WithRSAEncryption
63:53:4c:fc:8c:f0:6c:03:29:8b:96:57:34:38:73:4e:c0:26:
69:45:f2:e4:7f:1c:7d:f8:9b:09:00:36:a7:75:ad:e3:0b:fb:
00:1e:e2:5e:5f:60:f2:29:47:77:f6:18:1c:44:bc:78:99:0e:
24:53:50:f8:ec:de:8d:5b:1b:89:0c:fd:de:10:ea:c0:4e:d9:
fd:2e:fa:5b:18:b6:a4:cf:48:b7:88:41:72:87:9b:97:ad:4d:
4b:c2:5b:60:c9:3f:67:3d:13:50:7c:b5:7e:44:37:e9:c0:23:
46:2b:52:4d:ce:ec:05:9a:77:7f:31:22:9e:16:1c:23:eb:99:
e3:15:b1:d0:7d:48:b5:42:06:fb:f1:df:78:cd:2a:ec:9b:e7:
bf:21:34:30:29:cd:09:58:f8:6c:b5:a6:a3:79:1c:9d:10:7f:
70:63:05:1a:44:3e:0f:14:4a:bc:09:be:65:21:55:0a:9a:ad:
e8:cf:db:0b:76:8f:0b:74:94:b3:85:ee:ef:f6:aa:6a:f7:52:
7f:06:df:03:60:38:a6:bf:59:79:c8:c1:a5:91:cc:c9:31:4f:
3e:33:c9:15:19:a0:35:37:3f:5c:a5:dd:bb:50:96:5e:ae:48:
78:ff:a8:52:34:46:f8:df:da:96:65:34:aa:eb:25:b0:b8:81:
85:aa:38:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org