Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/3a0cc5-3851-4b93-9163-0be4625badb4/1/byekCF0wntNzpjJ83EirxHmTHfE.roa
File: byekCF0wntNzpjJ83EirxHmTHfE.roa (raw, json)
Hash identifier: z0b5ioMxxprH5ChMpJ4Mg7gwhfyq/MAJGEXkyWSn6V8=
Subject key identifier: 6F:27:A4:08:5D:30:9E:D3:73:A6:32:7C:DC:48:AB:C4:79:93:1D:F1
Certificate issuer: /CN=dc8125409986b77e0bd094ad87baff3eb4a25d67
Certificate serial: 0602080D
Authority key identifier: DC:81:25:40:99:86:B7:7E:0B:D0:94:AD:87:BA:FF:3E:B4:A2:5D:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3IElQJmGt34L0JSth7r_PrSiXWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/3a0cc5-3851-4b93-9163-0be4625badb4/1/byekCF0wntNzpjJ83EirxHmTHfE.roa
Signing time: Sat 01 Jan 2022 05:56:58 +0000
ROA not before: Sat 01 Jan 2022 05:56:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44063
IP address blocks: 185.179.176.0/23 maxlen: 23
185.179.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100796429 (0x602080d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8125409986b77e0bd094ad87baff3eb4a25d67
Validity
Not Before: Jan 1 05:56:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f27a4085d309ed373a6327cdc48abc479931df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d3:e5:9e:c3:9a:7e:c8:c6:f4:94:85:28:6c:
81:9e:80:a8:15:7e:12:ee:cf:06:24:06:f4:ab:71:
66:d2:55:5c:29:cc:1b:bb:db:25:03:40:5f:2a:50:
21:01:27:a5:27:24:a4:26:4f:79:ec:39:39:52:d1:
6b:e9:0d:70:a7:31:61:9b:a3:c4:a8:2c:23:b7:a1:
44:81:ea:21:61:34:71:4f:90:98:ae:c3:1b:d0:57:
6e:47:87:da:cd:94:a1:2e:13:1b:2d:dc:54:3b:1a:
e1:75:14:a7:39:7e:7f:4c:98:3c:52:1d:aa:11:f4:
36:6f:f3:e1:85:82:45:42:5c:e8:02:06:50:a5:a7:
69:0c:9d:4e:28:2d:96:0f:e2:54:ed:29:4e:82:e0:
0a:6a:52:6e:c4:dc:8a:b6:2e:f6:5b:b6:a8:30:5c:
7a:53:18:b6:d5:f5:e4:6c:b4:77:d7:e1:05:84:d2:
97:a7:f3:d7:64:f9:0c:e6:12:52:00:10:35:24:92:
ef:86:0c:5c:4c:59:e9:66:11:7c:9d:3e:e9:9e:d1:
d5:18:47:cd:d6:0b:a1:aa:35:07:c8:5f:1c:48:6e:
b8:7f:24:0b:04:e5:93:cf:83:43:02:80:ce:86:b0:
74:a6:fb:53:3b:a4:b9:a0:b5:3c:e7:19:9f:12:bb:
f1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:27:A4:08:5D:30:9E:D3:73:A6:32:7C:DC:48:AB:C4:79:93:1D:F1
X509v3 Authority Key Identifier:
keyid:DC:81:25:40:99:86:B7:7E:0B:D0:94:AD:87:BA:FF:3E:B4:A2:5D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IElQJmGt34L0JSth7r_PrSiXWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3a0cc5-3851-4b93-9163-0be4625badb4/1/byekCF0wntNzpjJ83EirxHmTHfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3a0cc5-3851-4b93-9163-0be4625badb4/1/3IElQJmGt34L0JSth7r_PrSiXWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.176.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:08:fa:b1:96:95:59:c3:6c:de:a9:99:6a:85:e7:e3:e3:ec:
70:9c:4f:9b:91:1a:13:11:34:28:6e:a1:cf:69:f3:40:fa:4f:
8f:d4:01:41:23:58:4b:9a:9c:d8:34:09:e1:66:9d:31:99:11:
11:49:08:43:0c:58:9e:ad:5b:e7:5d:83:05:82:a9:f6:cd:1a:
f1:62:0b:9d:05:ec:ee:7b:22:02:01:c4:a9:a0:6c:eb:77:26:
52:e4:c4:e0:e7:f0:5c:73:d3:ca:e1:4e:bc:51:5e:77:4d:54:
15:5b:de:9d:5a:10:c1:b4:f8:a8:61:cb:dd:be:ba:fb:26:be:
4c:3a:38:fa:6f:69:dc:0a:40:4e:60:11:23:a5:6f:c5:3a:c2:
e7:2c:f5:34:ac:ff:c0:26:41:4c:b4:44:1e:b4:62:67:13:71:
58:50:d7:c6:f1:15:22:5d:63:2c:58:62:08:f7:3c:20:03:8a:
18:8f:f8:76:6a:98:ef:44:21:b7:cf:6a:db:d2:fe:88:fc:ba:
31:5a:db:9a:6b:31:28:2b:0b:e0:10:1f:cd:e2:1c:2b:9b:bc:
50:1a:b2:71:68:bf:84:34:4f:f0:80:82:2e:ac:16:7d:57:98:
06:98:12:0a:87:42:f3:1e:21:c7:7b:f3:dc:be:1f:86:d3:11:
83:6f:53:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:34 2023 by rpki-client on console-fra.rpki-client.org