Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/4eyoZEKp63SZkSQX8u7l4bkco9E.roa
File: 4eyoZEKp63SZkSQX8u7l4bkco9E.roa (raw, json)
Hash identifier: wJXiif9cdDB8GVLS7adM4zz7IU5DA0jEnfL4YUnQTNk=
Subject key identifier: E1:EC:A8:64:42:A9:EB:74:99:91:24:17:F2:EE:E5:E1:B9:1C:A3:D1
Certificate issuer: /CN=dbe0cae6dc3c918c7ea8cd278f497f854dca3dc8
Certificate serial: DABDEA
Authority key identifier: DB:E0:CA:E6:DC:3C:91:8C:7E:A8:CD:27:8F:49:7F:85:4D:CA:3D:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DK5tw8kYx-qM0nj0l_hU3KPcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/4eyoZEKp63SZkSQX8u7l4bkco9E.roa
Signing time: Wed 11 May 2022 22:09:55 +0000
ROA not before: Wed 11 May 2022 22:09:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 185.122.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14335466 (0xdabdea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0cae6dc3c918c7ea8cd278f497f854dca3dc8
Validity
Not Before: May 11 22:09:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1eca86442a9eb7499912417f2eee5e1b91ca3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ad:a8:23:19:eb:f5:32:50:64:d4:75:38:36:
a5:c8:54:0f:c0:0e:42:b1:42:69:81:e8:00:35:d5:
7d:d6:1c:7d:36:9f:26:9b:8d:08:01:12:52:a4:21:
a2:32:77:1a:cc:e8:86:78:de:57:c9:5a:53:ec:54:
0d:f6:0f:1d:99:01:0d:6c:1e:a5:25:a1:ef:cf:16:
0a:3b:17:73:8a:86:b1:52:4a:e6:df:af:d6:04:b9:
c9:11:87:89:3f:c5:17:a9:3e:b9:c1:5a:8e:ec:20:
90:48:9e:28:03:32:16:e0:1b:ef:7e:37:6d:84:cb:
5c:be:b1:2b:ba:48:5c:84:5d:32:f5:52:9a:ae:e5:
0d:64:f9:d6:7c:f9:29:90:a0:f7:e2:cf:13:73:ac:
bd:8f:53:09:58:4c:cf:8d:2b:bd:c2:79:38:36:e8:
fc:0b:b3:f6:e3:31:a9:1b:fa:bc:88:ee:a9:7f:bb:
0d:ef:6f:9a:5c:c5:0c:cd:a2:14:6e:f6:c9:5d:91:
c4:08:97:38:81:84:45:5e:a8:62:ba:09:3a:da:c1:
30:ac:a4:b3:d3:f4:1f:05:53:63:40:70:49:a6:3c:
2d:b7:ac:49:e3:bf:dc:38:da:48:b1:48:c6:8f:71:
bc:ca:d7:c8:b9:ad:29:f0:45:91:88:58:69:0e:84:
cd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EC:A8:64:42:A9:EB:74:99:91:24:17:F2:EE:E5:E1:B9:1C:A3:D1
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:E6:DC:3C:91:8C:7E:A8:CD:27:8F:49:7F:85:4D:CA:3D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DK5tw8kYx-qM0nj0l_hU3KPcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/4eyoZEKp63SZkSQX8u7l4bkco9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/2-DK5tw8kYx-qM0nj0l_hU3KPcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.206.0/24
Signature Algorithm: sha256WithRSAEncryption
35:0f:eb:9c:ff:08:0f:08:da:d3:56:99:96:0d:91:5b:45:c5:
12:d4:64:2d:e8:13:43:35:1d:63:13:49:b9:59:a5:07:3a:8e:
01:33:1f:9b:9d:48:7d:6c:f4:d1:a5:0d:50:ed:f3:0e:4c:48:
ce:9b:7b:16:c3:2e:08:e2:78:06:bf:f9:e9:c8:27:60:85:3b:
00:45:5a:d9:c6:3c:f9:9e:fe:21:f4:b3:ba:60:d4:2e:b1:9b:
63:d8:e6:02:ad:ee:2c:7c:2d:70:b6:1a:31:99:09:fa:36:a9:
29:17:11:f4:88:ad:80:01:39:d1:47:3f:7e:90:53:28:ef:e2:
35:e4:b1:1b:78:a8:c0:34:43:85:ef:24:e5:02:db:f0:c9:b9:
f1:c1:81:85:30:18:f6:8a:94:42:e0:fb:45:58:fe:aa:f9:c2:
bd:00:64:0d:4d:48:63:e7:26:f2:72:91:42:43:1f:f9:8f:56:
31:90:78:43:98:82:1f:75:72:ca:b4:d3:25:45:af:dc:e0:1c:
38:35:cd:eb:d8:80:a2:b3:d3:30:97:cc:d5:aa:da:0f:fa:ba:
f6:52:48:47:76:4c:53:d6:12:29:b7:86:e2:71:36:42:8e:4a:
0d:f7:7a:72:7c:01:cd:be:82:ad:52:c0:5c:df:ed:c2:0c:4e:
79:4e:8d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:42 2024 by rpki-client on console-fra.rpki-client.org