Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/70x2T9wxIZ6RPLIYL6_Pv-1b9TA.roa
File: 70x2T9wxIZ6RPLIYL6_Pv-1b9TA.roa (raw, json)
Hash identifier: Q+JeBI1/NXT88mZAy96bef1vOI6EEttG64okKc8wwtc=
Subject key identifier: EF:4C:76:4F:DC:31:21:9E:91:3C:B2:18:2F:AF:CF:BF:ED:5B:F5:30
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 01856FF93C920F67F3EF805A71C02BE1F427
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/70x2T9wxIZ6RPLIYL6_Pv-1b9TA.roa
Signing time: Mon 02 Jan 2023 00:54:43 +0000
ROA not before: Mon 02 Jan 2023 00:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 185.229.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:3c:92:0f:67:f3:ef:80:5a:71:c0:2b:e1:f4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Jan 2 00:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef4c764fdc31219e913cb2182fafcfbfed5bf530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:43:92:ab:0a:19:33:0a:9a:2c:c2:20:9d:b3:
12:bc:b8:7b:27:c6:46:48:e2:26:c5:b3:3c:90:76:
0c:51:b5:8d:be:94:88:1a:8b:a8:bd:24:19:25:26:
45:db:a7:99:f4:a6:d2:90:94:98:e0:84:fa:76:66:
f6:86:3e:27:54:ff:57:a8:e4:f3:68:e5:c0:5d:26:
fb:48:c9:97:52:ff:4a:77:b8:8e:99:28:42:c5:4b:
71:93:cc:f3:5c:62:a6:a5:54:63:b5:ee:8e:1c:56:
ab:f6:75:3d:aa:7c:57:79:6d:87:cb:2a:a1:af:36:
a2:47:c3:c7:19:73:8c:80:ea:c1:30:15:90:2a:77:
fc:75:5e:fd:b7:13:ea:6b:de:35:25:2c:cc:49:3c:
79:b0:eb:d6:52:4b:d9:4d:3a:d9:a7:79:af:dd:1f:
77:02:1e:bb:4e:9b:8a:fc:d8:0d:3f:d7:0a:73:d3:
c4:e7:8d:e2:4b:df:27:0a:48:8b:a2:36:50:49:36:
21:b3:ec:71:ff:2d:09:25:de:ec:8a:5f:7a:30:0e:
c4:c6:46:23:7c:5a:6f:80:85:0b:ae:ad:57:f4:bf:
e2:dd:d9:b0:bc:cf:6b:bc:2d:f4:1e:04:2f:56:e0:
13:65:e2:ba:6e:b5:c8:b7:74:d0:8c:15:92:f8:98:
de:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4C:76:4F:DC:31:21:9E:91:3C:B2:18:2F:AF:CF:BF:ED:5B:F5:30
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/70x2T9wxIZ6RPLIYL6_Pv-1b9TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.202.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:20:42:80:55:1f:f8:3d:b3:5f:e0:a7:66:d8:13:e6:4c:3b:
43:cd:54:61:e1:ae:b3:ef:d0:ee:02:48:92:22:db:41:82:5c:
f4:86:a9:b7:b1:5f:eb:7d:bc:93:ce:7e:b0:b6:de:6e:65:b6:
52:83:94:08:68:39:9f:97:d7:31:ac:03:67:c2:74:59:1b:7a:
3e:8b:27:8d:40:92:09:3e:ec:6a:be:cd:65:5f:34:87:ba:22:
64:ed:ec:05:2d:03:86:9f:94:5b:fe:44:1a:4f:5f:3e:14:5d:
35:42:39:7f:70:ec:77:05:6d:7e:75:9f:db:a3:34:b7:39:ae:
cb:c9:3f:84:41:4e:bb:4e:1d:7c:4e:24:a1:eb:de:57:30:b5:
68:77:00:3d:c7:77:9b:87:17:60:a4:46:b8:9f:e1:be:8a:09:
2a:98:9b:48:66:f3:29:32:17:81:ba:d3:03:69:d4:c2:17:68:
8e:45:53:1a:5f:e7:b4:a3:fd:8b:d0:6b:7f:c7:d9:fd:30:1f:
ce:98:02:01:64:7c:8d:7a:2f:6a:73:ec:a1:e8:4e:5e:46:d5:
c9:d4:1f:8a:c0:c9:71:ec:62:9f:76:8a:f6:0e:f4:b8:14:3c:
7e:ab:7f:da:74:76:29:f2:bd:c8:70:69:8a:cc:49:28:a1:49:
60:02:24:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:46 2024 by rpki-client on console-ams.rpki-client.org