Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/yK8UEnGtRaBhPLgZDIDbHUAgU0w.roa
File: yK8UEnGtRaBhPLgZDIDbHUAgU0w.roa (raw, json)
Hash identifier: zeVdrLt1srwW9bwu2xqQYXwvLdiOKNsPwQY8DXF3+nU=
Subject key identifier: C8:AF:14:12:71:AD:45:A0:61:3C:B8:19:0C:80:DB:1D:40:20:53:4C
Certificate issuer: /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial: 018555EC865DA4C712D6CB278E2206D72F9E
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/yK8UEnGtRaBhPLgZDIDbHUAgU0w.roa
Signing time: Tue 27 Dec 2022 23:30:42 +0000
ROA not before: Tue 27 Dec 2022 23:30:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212815
IP address blocks: 185.171.202.0/24 maxlen: 24
2a10:4646:200::/44 maxlen: 44
2a10:4640::/32 maxlen: 32
2a10:4640::/48 maxlen: 48
2a10:4640:1::/48 maxlen: 48
2a10:4640:4::/48 maxlen: 48
2a10:4640:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:55:ec:86:5d:a4:c7:12:d6:cb:27:8e:22:06:d7:2f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Validity
Not Before: Dec 27 23:30:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8af141271ad45a0613cb8190c80db1d4020534c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:7f:f7:25:80:fe:b8:61:1f:5b:e2:0b:5e:
e4:16:b5:57:52:04:07:54:df:ca:24:97:6b:f1:b1:
49:54:a0:e3:55:3c:c7:30:45:ae:e7:ed:ed:41:01:
de:f9:a3:9a:2b:65:3a:50:f2:45:9d:c1:40:bf:7b:
a0:02:45:2c:40:db:86:25:6d:ef:22:3a:c8:a0:98:
e3:87:48:12:17:4d:b2:1e:1c:e9:b6:f5:7b:db:01:
96:4a:ba:b7:ef:76:f7:20:27:a2:56:86:62:a6:f7:
c9:c7:51:ac:05:72:88:e1:e5:d9:0d:45:78:fe:72:
52:63:fc:18:b8:12:76:a8:59:d5:20:19:f2:4d:d7:
1e:95:35:10:9d:00:ef:8a:60:57:29:23:6c:1c:eb:
a3:8e:a0:6a:50:ea:f1:5a:8e:2e:0c:0b:22:39:fc:
c2:00:81:55:fb:bc:9e:40:8a:93:0f:7c:aa:d2:03:
6c:0d:b5:44:22:1c:02:7d:03:6c:a5:fc:f6:5b:8c:
3b:4f:b1:2a:19:e7:72:ac:de:ca:07:a2:22:06:43:
3b:18:4e:12:12:04:0b:8e:a0:e0:4e:1e:7f:52:80:
ed:ae:03:cd:f9:b3:34:e4:8b:60:72:59:9a:c7:44:
58:b7:5e:cc:e5:cf:5c:62:d2:fd:7e:94:58:ab:5f:
e3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AF:14:12:71:AD:45:A0:61:3C:B8:19:0C:80:DB:1D:40:20:53:4C
X509v3 Authority Key Identifier:
keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/yK8UEnGtRaBhPLgZDIDbHUAgU0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.202.0/24
IPv6:
2a10:4640::/32
2a10:4646:200::/44
Signature Algorithm: sha256WithRSAEncryption
12:8c:d8:d3:87:81:45:96:dd:a1:04:45:e1:7c:f1:70:21:a2:
5e:ba:52:8f:c9:5e:7b:dd:25:5a:7e:a4:4a:a9:41:d0:fd:2b:
ff:b2:d2:93:46:3a:1e:f0:2a:87:d7:6e:c0:18:0f:91:60:3d:
69:15:70:2b:05:d9:68:62:0d:99:fa:c8:4a:05:c2:59:c4:6b:
9f:d3:7d:54:94:33:b0:3d:ca:0b:16:37:ff:73:b6:98:4c:64:
39:86:94:d7:61:49:fa:48:76:a3:d9:ea:51:41:e9:26:9c:af:
13:4d:5a:d9:06:3e:28:4e:e3:59:5e:13:b5:b4:96:32:5f:c1:
01:1a:05:64:32:55:3c:92:4c:33:60:a7:2f:c0:21:b2:59:53:
03:d8:43:84:b4:e8:af:f7:50:ce:cb:2d:91:8a:5e:56:51:f7:
2c:27:d8:49:0c:67:f0:e6:70:dc:c5:1f:77:51:d5:f0:0f:be:
2a:89:9d:19:2b:9a:2e:2c:11:73:f2:90:e7:59:0a:fa:42:d6:
df:d2:61:62:25:58:95:34:fa:f3:14:f8:61:9b:32:ae:cd:3a:
cf:a4:08:d2:dd:3b:00:0e:21:ee:d6:0a:8e:7e:04:84:96:05:
ba:9a:b9:66:fa:63:c0:4d:dc:5a:11:63:a1:13:74:f8:f2:f9:
f3:d8:49:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:35 2024 by rpki-client on console-fra.rpki-client.org