Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/57d581-3994-4d83-a1b0-968470b650f4/1/FtYctERnDaH_yaEUvKj2SzvWna0.roa
File: FtYctERnDaH_yaEUvKj2SzvWna0.roa (raw, json)
Hash identifier: lUa9X8q/szUZutzX7KicNHwaMp51YJOJCU8lRiwxaYs=
Subject key identifier: 16:D6:1C:B4:44:67:0D:A1:FF:C9:A1:14:BC:A8:F6:4B:3B:D6:9D:AD
Certificate issuer: /CN=ff836ed8cd29b81b8421a1dab920905e2ed76184
Certificate serial: 01856F42B128DE843EBDF86BEF4233196A99
Authority key identifier: FF:83:6E:D8:CD:29:B8:1B:84:21:A1:DA:B9:20:90:5E:2E:D7:61:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4Nu2M0puBuEIaHauSCQXi7XYYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/57d581-3994-4d83-a1b0-968470b650f4/1/FtYctERnDaH_yaEUvKj2SzvWna0.roa
Signing time: Sun 01 Jan 2023 21:35:19 +0000
ROA not before: Sun 01 Jan 2023 21:35:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203690
IP address blocks: 185.184.10.0/24 maxlen: 24
2a0b:2180:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:b1:28:de:84:3e:bd:f8:6b:ef:42:33:19:6a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff836ed8cd29b81b8421a1dab920905e2ed76184
Validity
Not Before: Jan 1 21:35:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16d61cb444670da1ffc9a114bca8f64b3bd69dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2f:c8:62:a7:8b:9d:b7:06:f0:b1:ff:17:cf:
e0:a2:9d:3d:fb:55:19:ee:87:5a:78:63:ca:cc:84:
ac:a6:ab:f5:30:f3:1b:79:83:18:8a:87:af:40:12:
4c:a1:78:a0:72:64:c9:20:83:84:00:5e:7a:15:e6:
aa:53:60:f4:04:29:03:2b:60:06:02:f5:f9:4b:09:
d8:c4:5e:25:a8:50:f2:da:3e:51:44:8a:1f:32:3b:
6f:8a:42:66:9e:09:11:27:9f:dc:48:21:c4:14:81:
c8:2a:b2:af:dd:8b:96:af:79:ab:af:1f:c7:f3:56:
3e:93:8d:ae:b4:0c:f6:08:6a:4c:42:79:1e:d0:61:
67:52:5b:72:b6:44:c6:6a:09:f3:13:ce:82:7f:28:
44:df:b6:d4:d0:6d:8f:ec:ac:97:db:74:10:55:71:
e8:9a:84:70:2d:1b:07:36:4a:a0:85:04:ff:8c:5e:
7f:e5:c1:1a:8f:81:61:31:2f:b2:41:a0:8a:94:2a:
d1:63:a4:f2:83:12:8f:1f:ca:bf:a1:68:c6:8a:ea:
fa:2c:ab:b9:dc:9d:3d:e0:c9:63:f8:2b:c7:04:0b:
95:05:83:05:cf:65:79:6a:a7:8c:2e:e0:84:26:00:
47:fe:de:d9:70:f7:94:d8:b5:f0:cd:19:f5:10:29:
e1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D6:1C:B4:44:67:0D:A1:FF:C9:A1:14:BC:A8:F6:4B:3B:D6:9D:AD
X509v3 Authority Key Identifier:
keyid:FF:83:6E:D8:CD:29:B8:1B:84:21:A1:DA:B9:20:90:5E:2E:D7:61:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4Nu2M0puBuEIaHauSCQXi7XYYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/57d581-3994-4d83-a1b0-968470b650f4/1/FtYctERnDaH_yaEUvKj2SzvWna0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/57d581-3994-4d83-a1b0-968470b650f4/1/_4Nu2M0puBuEIaHauSCQXi7XYYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.10.0/24
IPv6:
2a0b:2180:2::/48
Signature Algorithm: sha256WithRSAEncryption
52:6d:0e:c1:f3:0f:46:a0:a0:b2:8d:0d:b8:55:23:77:15:32:
b4:08:4a:c2:30:e5:01:2d:7c:70:a0:da:53:d5:13:66:d2:fd:
82:73:83:80:d0:10:ca:a1:ea:db:24:ef:ce:59:cd:fe:2e:20:
ea:af:ca:cf:32:68:b9:85:68:79:37:b1:60:06:e7:9e:8b:70:
49:5b:75:fb:62:bc:47:0d:49:ec:9b:c9:a2:21:6c:ef:c9:e7:
18:46:57:4a:00:9c:3a:54:4b:a8:c8:50:02:79:0e:96:c3:01:
b3:9e:99:f4:17:88:57:c9:4d:d6:6e:41:96:c4:95:60:a7:c0:
0b:96:c7:99:d2:60:36:09:69:eb:67:4b:b2:5f:ab:ce:80:22:
e8:28:7a:23:23:5b:6a:5b:66:07:c2:23:76:d2:d8:7d:39:7f:
e7:07:e7:97:58:a3:a5:a2:d3:e1:14:39:4f:1c:3c:4a:3c:82:
ed:03:6a:35:d8:80:28:d4:52:ca:02:4b:2c:7c:b0:f2:8f:2a:
d2:75:61:63:5e:d3:fe:30:6c:b1:86:09:de:72:d6:b2:54:c8:
b0:fe:7a:41:9e:2c:9b:27:f2:cc:9b:bb:e8:42:87:29:20:cd:
a3:41:2e:b4:53:e1:bb:88:38:5c:55:0b:de:a5:31:46:bd:ad:
7d:f5:d5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:11 2024 by rpki-client on console-fra.rpki-client.org