Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/a-DE213F0CFLwQtY0cW4iGSi9sE.roa
File: a-DE213F0CFLwQtY0cW4iGSi9sE.roa (raw, json)
Hash identifier: XOnh1c8y2/v8bZrLqbpLB1pGd+WP8cBC3Jeghuc0/So=
Subject key identifier: 6B:E0:C4:DB:5D:C5:D0:21:4B:C1:0B:58:D1:C5:B8:88:64:A2:F6:C1
Certificate issuer: /CN=ca0a1f8cf3b8016be8832f78b101b364e1114025
Certificate serial: 027B2005
Authority key identifier: CA:0A:1F:8C:F3:B8:01:6B:E8:83:2F:78:B1:01:B3:64:E1:11:40:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygofjPO4AWvogy94sQGzZOERQCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/a-DE213F0CFLwQtY0cW4iGSi9sE.roa
Signing time: Sat 01 Jan 2022 16:11:09 +0000
ROA not before: Sat 01 Jan 2022 16:11:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.243.1.0/24 maxlen: 24
2a0d:3c80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41623557 (0x27b2005)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0a1f8cf3b8016be8832f78b101b364e1114025
Validity
Not Before: Jan 1 16:11:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6be0c4db5dc5d0214bc10b58d1c5b88864a2f6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:40:7e:a3:3d:4c:2c:59:6e:b5:cb:b4:4e:fc:
9d:7a:dd:cf:44:ad:8b:13:1f:99:0b:2e:ea:3c:22:
7a:a0:34:e7:50:b4:2f:fd:ad:a2:fb:a6:87:f0:b9:
7d:a0:eb:ed:02:43:a8:24:f8:55:d5:a7:49:fc:29:
ab:43:a2:a3:ea:7c:19:97:43:f9:7d:10:08:14:2b:
1e:c1:79:ff:20:42:85:bd:a6:56:98:9f:d7:a1:67:
cf:c8:28:76:f3:ad:6b:d6:77:f7:a9:69:23:1a:63:
43:ba:35:18:0f:ed:36:6e:c2:ee:55:ad:29:55:eb:
29:6f:0f:2e:de:67:11:1a:27:c9:b8:91:f8:5c:da:
9f:ae:49:b5:44:1c:92:8a:1a:48:d4:fa:89:19:28:
93:8c:3c:68:ca:da:b6:ed:73:eb:cc:c0:87:c4:db:
5d:7f:71:1c:c8:cf:03:a4:fc:c1:79:69:43:ec:3f:
b4:16:0b:7f:1c:77:3b:29:ca:35:78:65:f6:2c:67:
0a:a2:a4:2b:4c:ab:8b:36:20:ad:c6:13:56:59:b3:
98:ff:ab:37:27:e0:b2:f6:30:ff:16:d3:83:dc:b5:
39:f2:82:7b:4a:e4:f7:40:c0:12:21:5d:09:0a:85:
47:37:53:26:02:2d:03:c4:6b:39:f5:9f:19:29:7c:
36:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E0:C4:DB:5D:C5:D0:21:4B:C1:0B:58:D1:C5:B8:88:64:A2:F6:C1
X509v3 Authority Key Identifier:
keyid:CA:0A:1F:8C:F3:B8:01:6B:E8:83:2F:78:B1:01:B3:64:E1:11:40:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygofjPO4AWvogy94sQGzZOERQCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/a-DE213F0CFLwQtY0cW4iGSi9sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/ygofjPO4AWvogy94sQGzZOERQCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.1.0/24
IPv6:
2a0d:3c80::/48
Signature Algorithm: sha256WithRSAEncryption
6a:e1:e9:bc:ad:1a:e2:77:fd:99:87:d0:53:47:e5:57:df:0c:
c5:af:13:a2:f4:bc:d2:94:17:46:56:21:b9:6d:8f:94:3e:67:
d5:df:0c:05:6b:20:42:c5:c1:cd:26:bc:39:98:fc:f7:85:34:
2a:ab:0a:dc:95:96:93:38:b1:2b:52:e8:51:d5:77:ed:21:a5:
09:ce:12:38:2f:4f:4b:5c:e5:28:ab:7d:c6:8b:dd:ce:80:fd:
16:ef:86:41:3d:0b:7b:39:01:2d:72:f7:95:08:0b:fb:3f:9d:
44:cf:19:e6:c9:28:5e:60:cd:c9:11:c2:3d:26:0c:61:bc:49:
bb:a5:8a:5f:31:24:39:30:86:d2:72:98:78:9c:61:46:30:45:
30:6b:da:0c:87:44:0b:7c:95:b7:40:f0:89:c2:9d:a0:8b:fe:
14:b1:11:5c:5a:3a:63:75:bc:78:9b:bd:1e:61:18:67:c8:a5:
40:fc:8c:ca:17:57:eb:cc:b6:6c:3c:25:82:5f:fe:22:4b:48:
4d:07:c7:73:69:ba:d3:d2:1c:cc:1f:a6:45:65:ce:82:99:0f:
d9:41:63:63:2e:4e:05:7f:78:3b:44:87:17:d0:c0:0f:8c:b4:
e8:af:f5:f2:7a:ca:82:27:8c:c0:51:f1:6b:b3:33:32:83:f4:
16:c7:fb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:49 2024 by rpki-client on console-fra.rpki-client.org