Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/a72e3a-05d6-4e0c-b5a7-2e90076b5e71/1/bGqk9J1e72gQnmtkqYqk55BFFlk.roa
File: bGqk9J1e72gQnmtkqYqk55BFFlk.roa (raw, json)
Hash identifier: CC6+Y4j6mBNvfzWdA1hXftD3kXJzBcvwzZbtyFRhS3o=
Subject key identifier: 6C:6A:A4:F4:9D:5E:EF:68:10:9E:6B:64:A9:8A:A4:E7:90:45:16:59
Certificate issuer: /CN=1ac119ecfed677b267ef3e205fd3d035f3f31979
Certificate serial: 0185734CDB233DA2CB650D33C025DF2087A1
Authority key identifier: 1A:C1:19:EC:FE:D6:77:B2:67:EF:3E:20:5F:D3:D0:35:F3:F3:19:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsEZ7P7Wd7Jn7z4gX9PQNfPzGXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/a72e3a-05d6-4e0c-b5a7-2e90076b5e71/1/bGqk9J1e72gQnmtkqYqk55BFFlk.roa
Signing time: Mon 02 Jan 2023 16:24:54 +0000
ROA not before: Mon 02 Jan 2023 16:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57878
IP address blocks: 185.115.206.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:4c:db:23:3d:a2:cb:65:0d:33:c0:25:df:20:87:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac119ecfed677b267ef3e205fd3d035f3f31979
Validity
Not Before: Jan 2 16:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c6aa4f49d5eef68109e6b64a98aa4e790451659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a7:da:db:83:5d:a1:c0:e2:7b:48:4b:7f:c6:
f6:7b:c5:75:11:4f:c1:1a:d8:8a:db:b6:30:64:2e:
44:2a:7b:bb:9e:a1:33:28:96:92:b5:3f:b1:72:4e:
b5:eb:8e:25:fe:f8:39:8d:1a:90:4d:10:59:e4:47:
a6:bf:db:e9:40:18:b8:23:f3:d1:a3:71:0a:17:fd:
46:23:50:be:2a:a6:22:cb:f8:53:bf:57:12:f8:1e:
88:27:cd:92:fe:30:bd:b7:88:e4:ea:0a:2c:e7:9f:
f5:5b:20:f9:27:af:9e:bb:38:a5:83:68:37:09:c6:
22:fa:fe:d2:35:50:4f:b2:d9:79:b1:23:ea:92:c2:
d4:8e:ac:8a:30:2a:04:d2:28:d9:4c:d0:2f:d9:6b:
aa:e4:50:84:89:5b:eb:f4:8c:bd:01:5c:54:9d:b4:
55:df:82:88:a2:f9:aa:45:3c:df:bb:2b:2f:6c:dd:
8c:4a:f1:fa:fe:2b:6b:a0:cf:b4:42:87:ee:92:76:
72:ca:2b:8f:78:16:25:b4:f5:95:4f:a0:7d:30:02:
22:ec:a9:30:58:d6:c2:ed:66:56:31:b3:80:ff:8e:
79:33:b7:e6:00:c1:10:3f:27:3a:76:bf:2e:62:b4:
63:e8:a2:bb:85:27:cb:42:c5:6a:ef:b5:5c:dd:67:
7d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6A:A4:F4:9D:5E:EF:68:10:9E:6B:64:A9:8A:A4:E7:90:45:16:59
X509v3 Authority Key Identifier:
keyid:1A:C1:19:EC:FE:D6:77:B2:67:EF:3E:20:5F:D3:D0:35:F3:F3:19:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsEZ7P7Wd7Jn7z4gX9PQNfPzGXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a72e3a-05d6-4e0c-b5a7-2e90076b5e71/1/bGqk9J1e72gQnmtkqYqk55BFFlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a72e3a-05d6-4e0c-b5a7-2e90076b5e71/1/GsEZ7P7Wd7Jn7z4gX9PQNfPzGXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.206.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:da:e2:1f:5d:38:22:b2:fd:68:a9:ca:e0:ec:cd:26:8c:1d:
2b:a3:8a:e1:af:e8:63:c0:c7:1f:53:f1:20:0a:44:6d:9c:65:
20:75:7d:8c:d0:5c:b3:48:f1:05:06:20:5a:cf:fa:18:2c:37:
15:1f:c4:ed:17:a7:7b:41:05:5b:cd:45:a4:49:24:12:6a:60:
9c:d8:17:b7:be:33:5d:ac:1f:e5:a1:25:23:b0:14:c2:87:f8:
24:e8:c8:0d:84:0e:a4:6c:15:c0:72:59:b7:95:de:cd:9a:ff:
ce:9b:6f:d8:fb:1b:8f:5d:35:33:48:63:19:57:aa:4f:bd:23:
79:74:13:0a:0f:6a:95:ea:2d:99:98:11:dc:19:e2:df:17:a1:
1d:6a:2b:94:8f:7a:7b:0b:6d:46:f6:23:70:4b:64:13:a8:ed:
6f:ef:2c:0a:93:88:0f:f4:74:8d:f1:71:a0:39:4a:8b:27:16:
64:ca:22:14:9f:aa:70:42:b4:9e:49:ca:1e:d7:82:f8:c7:13:
38:4e:61:02:f8:c5:8e:24:b9:99:df:4c:22:38:39:46:12:e5:
b6:83:a2:52:a9:1c:b7:ba:ae:f5:12:6e:ca:d8:de:55:bc:35:
92:4c:bd:54:66:f4:84:9f:d9:02:d9:e5:96:2a:64:4b:44:d8:
2d:2d:74:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:24 2024 by rpki-client on console-ams.rpki-client.org