Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/vwDm6B82sN8GLyZ2_pQ5bpqv7CE.roa
File: vwDm6B82sN8GLyZ2_pQ5bpqv7CE.roa (raw, json)
Hash identifier: sfwiRNLwmOIct27FaQwl74olNqrTnJtLQ29gLvp9UMA=
Subject key identifier: BF:00:E6:E8:1F:36:B0:DF:06:2F:26:76:FE:94:39:6E:9A:AF:EC:21
Certificate issuer: /CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
Certificate serial: 01856E26663FB8CADCC89D7469C3B4FD7736
Authority key identifier: 62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/vwDm6B82sN8GLyZ2_pQ5bpqv7CE.roa
Signing time: Sun 01 Jan 2023 16:24:48 +0000
ROA not before: Sun 01 Jan 2023 16:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44709
IP address blocks: 185.139.231.0/24 maxlen: 24
195.238.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:66:3f:b8:ca:dc:c8:9d:74:69:c3:b4:fd:77:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
Validity
Not Before: Jan 1 16:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf00e6e81f36b0df062f2676fe94396e9aafec21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:4a:55:47:9b:44:50:4f:30:4a:50:9c:76:
76:75:78:23:c5:5e:78:2e:62:dd:3c:9f:0b:3c:71:
e7:0a:c7:bc:18:5c:cd:98:02:7a:27:4b:82:ea:36:
08:7f:47:32:05:0d:9e:7e:f5:2d:51:c1:0c:39:c2:
8a:51:81:56:03:43:4e:f2:81:37:c1:b8:4c:c2:b6:
e6:9c:11:95:8d:99:67:ed:8b:aa:ec:b0:2c:c0:f2:
a7:a7:bc:c0:43:a1:ac:b2:58:46:0c:c6:71:62:66:
2f:f4:8f:73:19:f7:33:77:b1:85:97:8e:60:b9:59:
35:a7:3b:fc:a8:14:4d:5f:df:03:48:20:d4:29:1c:
58:b2:f1:0b:f7:9d:55:51:74:04:1d:9a:7c:95:5d:
b9:66:1e:87:2d:27:d9:8f:68:c6:a2:42:e6:38:87:
1e:32:22:d3:0b:67:b3:12:da:e9:e0:18:78:4c:6a:
78:5b:0b:a3:fd:dc:13:c9:36:eb:d8:00:b6:f2:4d:
52:74:ad:0e:17:93:95:b3:28:f9:60:19:c0:51:bc:
2a:01:d4:21:83:db:e5:4f:bb:63:4c:ea:4d:fd:d3:
cf:28:dc:14:db:9d:ef:5e:1f:2e:cc:82:90:da:ec:
48:2a:6e:5e:39:5c:0d:d2:cb:a9:ab:b4:e7:b0:75:
48:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:00:E6:E8:1F:36:B0:DF:06:2F:26:76:FE:94:39:6E:9A:AF:EC:21
X509v3 Authority Key Identifier:
keyid:62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/vwDm6B82sN8GLyZ2_pQ5bpqv7CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/YkHuLESs6KczhMJVrXfGwfBFJIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.231.0/24
195.238.120.0/24
Signature Algorithm: sha256WithRSAEncryption
62:f3:b7:b5:40:83:af:19:df:6c:48:73:a6:7e:ee:2b:ff:09:
a0:08:3c:1b:19:52:18:fa:ab:35:77:7d:67:3f:fb:5b:b4:19:
b5:11:59:37:87:dd:cd:6a:e4:ed:63:80:8b:82:9f:b9:ce:58:
e0:5b:71:89:f9:d3:9a:db:60:63:27:b1:53:b4:70:b6:a7:a1:
ca:ce:b6:c3:45:06:56:bd:2e:df:f8:f7:d3:04:47:5b:8a:d1:
8a:a2:e6:62:f4:e6:f5:f6:38:32:6a:a5:5d:15:45:4e:8e:18:
8d:7f:55:4c:b6:f9:f8:de:53:a8:b7:3b:b8:c6:54:54:fa:33:
27:dd:c1:6d:95:64:e7:26:3c:32:f3:a0:93:bc:13:10:59:ce:
6b:dd:9d:78:1f:a8:cd:4a:a8:fd:69:94:c8:85:a9:26:4a:ea:
b9:f4:2f:1c:d9:05:14:59:39:d7:cd:ed:d7:0c:43:4f:9f:1e:
a2:36:ce:76:da:34:4e:84:38:18:58:86:1f:da:1b:34:7a:76:
6a:f6:37:07:1a:b4:14:05:6f:a6:b1:bc:b7:62:84:ae:6c:f6:
c1:63:8a:9c:85:45:29:8b:09:d9:1c:f2:3d:6a:0f:d3:99:4e:
d0:2a:b8:e3:10:f6:f2:d0:1f:01:73:50:49:21:0c:31:c5:1d:
58:92:bb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:06 2024 by rpki-client on console-fra.rpki-client.org