Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/B6oEj69tVPSfUKx1VK6-sr5vV5Q.roa
File: B6oEj69tVPSfUKx1VK6-sr5vV5Q.roa (raw, json)
Hash identifier: apREPoBZ4ua9WZ7TmbhnN/OWK5n2f4X7wRNZHVcvtKM=
Subject key identifier: 07:AA:04:8F:AF:6D:54:F4:9F:50:AC:75:54:AE:BE:B2:BE:6F:57:94
Certificate issuer: /CN=60614515907e8eac99806617d5f69c40db91a3f5
Certificate serial: 01856C136E513472C40C68310EAE269B4806
Authority key identifier: 60:61:45:15:90:7E:8E:AC:99:80:66:17:D5:F6:9C:40:DB:91:A3:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGFFFZB-jqyZgGYX1facQNuRo_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/B6oEj69tVPSfUKx1VK6-sr5vV5Q.roa
Signing time: Sun 01 Jan 2023 06:44:50 +0000
ROA not before: Sun 01 Jan 2023 06:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51790
IP address blocks: 185.185.91.0/24 maxlen: 24
185.185.90.0/23 maxlen: 23
2a0b:4e87::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:6e:51:34:72:c4:0c:68:31:0e:ae:26:9b:48:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60614515907e8eac99806617d5f69c40db91a3f5
Validity
Not Before: Jan 1 06:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07aa048faf6d54f49f50ac7554aebeb2be6f5794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:05:08:73:c2:55:68:66:9d:f8:a9:7c:b3:41:
e2:98:99:9b:1a:f1:5b:b3:50:7e:16:4d:2a:7c:15:
9b:33:e4:48:38:26:f4:88:fd:45:54:35:85:3c:00:
48:c1:7d:17:1f:c7:d4:ba:ec:de:64:4c:b3:c5:ba:
61:c2:51:f9:0b:ec:fc:1b:01:d7:b8:63:2d:d7:ef:
76:b8:b6:8b:15:d2:f4:13:25:33:9f:30:9d:bd:f1:
3d:82:d3:59:6b:66:34:62:d5:6c:94:7e:14:db:56:
6f:6f:92:68:d8:4c:a5:be:d1:db:fa:32:94:6f:ab:
35:c0:b8:3d:26:52:06:76:cf:37:5d:6b:5d:a2:06:
79:13:ca:5f:fb:6d:37:74:99:fe:29:16:22:d8:92:
75:6d:3f:0a:56:09:72:1d:c7:ea:35:22:56:24:b4:
4e:d1:55:65:ca:cf:62:30:5c:55:d7:2b:4f:82:08:
44:df:c0:bd:63:35:b1:be:25:54:37:22:61:70:c5:
75:c8:da:ee:9a:96:62:9e:0a:16:25:1f:9c:41:db:
ed:25:76:3f:e7:7e:4c:1e:54:6d:a4:4d:c7:a6:ba:
81:1b:a9:7f:cf:98:6d:b2:84:6e:e6:3a:9b:d9:f3:
d1:55:b0:38:ff:30:31:bb:c0:f7:21:03:78:6a:27:
b2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AA:04:8F:AF:6D:54:F4:9F:50:AC:75:54:AE:BE:B2:BE:6F:57:94
X509v3 Authority Key Identifier:
keyid:60:61:45:15:90:7E:8E:AC:99:80:66:17:D5:F6:9C:40:DB:91:A3:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGFFFZB-jqyZgGYX1facQNuRo_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/B6oEj69tVPSfUKx1VK6-sr5vV5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/YGFFFZB-jqyZgGYX1facQNuRo_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.90.0/23
IPv6:
2a0b:4e87::/32
Signature Algorithm: sha256WithRSAEncryption
64:9d:b8:0d:10:18:d4:7f:5c:63:54:10:d9:73:d5:79:e2:83:
c5:fc:8c:ef:2e:6a:03:d5:3b:d2:96:42:e2:e2:7c:cb:d6:8f:
79:69:f3:13:8d:78:e1:0f:ea:71:d0:44:29:78:fb:66:d4:42:
51:a6:0f:d6:93:9c:9b:27:29:66:76:fd:7b:5e:11:53:98:76:
00:6e:37:4e:6d:b8:13:c6:c0:68:41:97:93:32:e7:95:bb:d1:
41:59:fb:08:bb:96:ea:2e:7d:fb:09:a2:67:e6:f0:41:7e:e2:
c3:07:7d:a6:68:3a:27:72:85:1a:6c:ab:27:11:46:d6:fc:0e:
de:b5:c6:c0:8f:6c:ad:2e:ad:8e:43:31:1e:04:54:4d:3c:ec:
fa:59:a3:cc:7f:27:b2:c9:47:d5:60:2e:52:5b:99:22:fa:10:
83:36:d4:b5:91:b4:98:13:02:b2:4a:57:fe:7e:d1:d0:bf:d3:
2c:cd:82:2e:21:3e:9d:b7:ab:d1:b5:d9:37:f0:9f:38:d0:29:
19:9a:4c:8f:25:09:65:e5:7c:7a:b2:2c:2e:76:23:26:29:36:
ca:a1:03:a6:03:c3:d0:9e:87:e6:60:77:74:ab:95:2b:79:54:
ee:a5:94:21:c7:ad:13:8f:bd:a1:75:08:c0:51:02:fb:f1:e1:
fc:8f:03:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:58 2025 by rpki-client