Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a28ef5-14c4-4341-8f19-9106bfbfe74d/1/atv574G00RGdmu2u8oBrBvEveiI.roa
File: atv574G00RGdmu2u8oBrBvEveiI.roa (raw, json)
Hash identifier: f4hvmUMz+PjjzWXT0N4wvGbHrJgy7lYCohp0Y92WhU8=
Subject key identifier: 6A:DB:F9:EF:81:B4:D1:11:9D:9A:ED:AE:F2:80:6B:06:F1:2F:7A:22
Certificate issuer: /CN=bcc01bf8e98ba7b2b0e11a8e0fbc4b39a11b8673
Certificate serial: 01856DDD37554DF8BAAE10CFBE3C73D39BAB
Authority key identifier: BC:C0:1B:F8:E9:8B:A7:B2:B0:E1:1A:8E:0F:BC:4B:39:A1:1B:86:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMAb-OmLp7Kw4RqOD7xLOaEbhnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a28ef5-14c4-4341-8f19-9106bfbfe74d/1/atv574G00RGdmu2u8oBrBvEveiI.roa
Signing time: Sun 01 Jan 2023 15:04:52 +0000
ROA not before: Sun 01 Jan 2023 15:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34569
IP address blocks: 185.218.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:37:55:4d:f8:ba:ae:10:cf:be:3c:73:d3:9b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc01bf8e98ba7b2b0e11a8e0fbc4b39a11b8673
Validity
Not Before: Jan 1 15:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6adbf9ef81b4d1119d9aedaef2806b06f12f7a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:c7:31:2f:b9:f7:9a:7b:7e:bd:96:71:2a:
01:4c:0e:19:c9:a7:65:40:8d:f4:d8:74:5b:b6:75:
f7:65:ed:ee:c0:c7:ae:bc:d3:81:ac:9b:b3:27:45:
85:2b:3b:d7:aa:6a:6e:8b:56:5d:d4:12:3a:3f:16:
65:b8:98:33:e3:14:18:52:46:56:89:dd:e5:8f:61:
bd:73:b1:83:b1:f2:f0:80:53:58:9b:11:8d:28:f8:
a4:ce:f6:3f:82:38:88:60:f6:fd:19:e7:a4:50:5c:
f4:c3:bd:19:71:00:47:13:70:c1:2f:14:77:2c:79:
45:73:5e:c5:af:bf:2b:ea:af:fd:18:ae:e9:70:cf:
fb:25:b9:6f:3d:98:e0:9a:f7:49:d0:f5:e0:b3:2a:
89:93:c5:e9:78:65:60:74:12:72:c7:8e:6b:fd:0f:
4d:9e:52:bd:ff:5e:33:63:20:86:3b:47:40:c4:5d:
96:37:66:54:e9:7c:94:62:64:72:61:f0:c2:68:f6:
01:2b:27:ab:db:2b:dd:eb:b9:5e:87:b5:0d:89:15:
08:b6:89:44:ca:6c:49:bd:5a:34:e7:a3:c5:3a:7e:
67:b7:60:68:63:46:c0:c0:1b:24:37:d2:78:b8:39:
3a:a6:1c:be:da:56:87:a5:72:1d:48:97:6c:b2:70:
1c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DB:F9:EF:81:B4:D1:11:9D:9A:ED:AE:F2:80:6B:06:F1:2F:7A:22
X509v3 Authority Key Identifier:
keyid:BC:C0:1B:F8:E9:8B:A7:B2:B0:E1:1A:8E:0F:BC:4B:39:A1:1B:86:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMAb-OmLp7Kw4RqOD7xLOaEbhnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a28ef5-14c4-4341-8f19-9106bfbfe74d/1/atv574G00RGdmu2u8oBrBvEveiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a28ef5-14c4-4341-8f19-9106bfbfe74d/1/vMAb-OmLp7Kw4RqOD7xLOaEbhnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.64.0/22
Signature Algorithm: sha256WithRSAEncryption
45:ef:19:b6:aa:e7:88:a2:9d:2d:cc:08:1e:17:15:ff:14:1d:
ba:a3:76:ca:c6:16:ed:21:ca:b2:2e:e5:4a:fb:94:83:10:f1:
83:1a:c8:c8:85:c3:59:f5:b5:ce:49:1b:75:fe:c5:b1:7c:50:
df:51:82:cb:b3:1e:9d:5c:ac:f7:64:dc:59:9f:fb:8a:8f:aa:
11:3f:cd:b2:e4:d2:b4:7a:ef:47:dc:c2:3e:c2:de:06:82:66:
4b:7e:0a:01:60:0d:26:f6:b0:68:44:df:52:8b:3b:95:d6:49:
29:ac:a7:c4:04:ef:59:76:4b:34:40:c5:fc:cc:f4:8d:ab:44:
05:d4:fe:69:6d:4f:5f:dc:e1:ce:04:8e:25:1b:4d:61:e6:10:
6b:f2:e4:29:b8:94:e6:ca:af:7d:7d:c8:b9:c1:f2:07:fa:03:
f5:cd:87:da:0e:a5:77:0e:f0:8f:02:79:fa:e3:97:e3:15:ad:
42:63:b1:cf:f2:0b:3a:d9:ec:c5:a4:f2:5d:b7:cf:8d:a8:ec:
bd:f4:90:2a:bf:05:04:dc:c0:e2:aa:6e:ad:a9:d3:1f:a2:f7:
5e:86:7c:d6:f8:b1:d1:91:cf:52:c1:6c:07:36:68:e0:1d:c1:
2a:65:f7:42:e8:81:14:8f:05:60:15:59:e5:4c:88:a9:23:75:
46:4b:e7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:38 2024 by rpki-client on console-ams.rpki-client.org