Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d19231-9c27-4c59-8c4a-147fcbca4ebc/1/Sq6ybITlhnX8YHFKOTxYczq5nCU.roa
File: Sq6ybITlhnX8YHFKOTxYczq5nCU.roa (raw, json)
Hash identifier: 4dXLfe24M9gMk/DXws3UuL2wkxjeKoY0nkTnElJlGKg=
Subject key identifier: 4A:AE:B2:6C:84:E5:86:75:FC:60:71:4A:39:3C:58:73:3A:B9:9C:25
Certificate issuer: /CN=59458bb10febd400bfcff15381bfd6db29e32935
Certificate serial: 0188BADC5B255647A368290C5F36962F96D4
Authority key identifier: 59:45:8B:B1:0F:EB:D4:00:BF:CF:F1:53:81:BF:D6:DB:29:E3:29:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUWLsQ_r1AC_z_FTgb_W2ynjKTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d19231-9c27-4c59-8c4a-147fcbca4ebc/1/Sq6ybITlhnX8YHFKOTxYczq5nCU.roa
Signing time: Wed 14 Jun 2023 17:03:03 +0000
ROA not before: Wed 14 Jun 2023 17:03:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.92.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ba:dc:5b:25:56:47:a3:68:29:0c:5f:36:96:2f:96:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59458bb10febd400bfcff15381bfd6db29e32935
Validity
Not Before: Jun 14 17:03:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4aaeb26c84e58675fc60714a393c58733ab99c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:38:0c:04:3e:f8:e7:3f:f3:36:22:c9:dc:
80:3d:f0:5b:04:8a:b3:a1:ea:3a:d9:5f:e7:ab:ae:
53:e2:01:d5:93:63:87:45:ac:88:1f:f3:44:ef:c0:
87:48:aa:83:f8:23:50:df:b0:d9:62:ef:c0:ad:77:
ec:45:02:3e:a8:56:69:32:93:f6:2e:f2:2f:4d:f5:
33:01:87:4b:e1:06:97:4f:cb:14:53:18:3b:62:f2:
8c:49:2b:57:40:2b:76:f9:ce:2b:9e:c5:8f:77:8c:
3b:db:1c:25:37:cb:50:f0:03:a1:d8:9e:98:d4:fd:
5b:c1:3a:e7:6d:1f:27:0e:f6:ab:1b:c7:81:3d:08:
03:8e:f0:93:e6:a3:91:5e:14:34:27:ec:a1:2b:62:
97:f6:06:e2:80:f5:cb:d6:c4:c7:67:4d:72:e6:72:
ee:b9:73:38:d0:7b:52:43:72:74:5b:1c:5b:cf:19:
99:da:4a:f8:99:ef:a5:ae:61:2e:9d:81:c1:25:1b:
ce:35:c7:9a:4c:e8:ce:05:0a:9e:61:af:e8:39:89:
97:bc:56:48:c9:f1:18:6d:9a:d8:25:73:68:c6:f8:
15:c1:dd:3e:f9:b5:75:91:6c:03:b6:85:ed:3d:b6:
24:79:6f:2e:74:61:bd:62:80:c2:90:a5:87:8b:79:
f1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AE:B2:6C:84:E5:86:75:FC:60:71:4A:39:3C:58:73:3A:B9:9C:25
X509v3 Authority Key Identifier:
keyid:59:45:8B:B1:0F:EB:D4:00:BF:CF:F1:53:81:BF:D6:DB:29:E3:29:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUWLsQ_r1AC_z_FTgb_W2ynjKTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d19231-9c27-4c59-8c4a-147fcbca4ebc/1/Sq6ybITlhnX8YHFKOTxYczq5nCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d19231-9c27-4c59-8c4a-147fcbca4ebc/1/WUWLsQ_r1AC_z_FTgb_W2ynjKTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.211.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:eb:e0:28:ac:5d:31:6b:98:db:0b:86:57:67:97:00:70:b3:
a5:c3:97:46:90:ae:df:97:d9:b2:63:9f:7e:fc:b2:80:ed:eb:
77:0d:42:6d:fe:d7:18:7d:a2:86:ad:0f:ad:47:55:a8:fb:00:
78:96:61:2c:5d:fc:1e:d6:31:51:66:93:22:9a:03:02:50:1d:
62:d2:f2:b1:d8:40:a4:67:f7:2e:7c:cd:1c:39:da:df:be:0f:
ff:37:9e:00:e3:93:d4:59:b6:39:c9:38:8b:af:43:fe:19:d1:
c7:dd:e0:92:02:6f:e5:e3:33:9e:29:3c:c4:da:88:e9:8d:5b:
3d:51:58:27:2b:de:96:0e:15:74:7f:ed:ac:9c:9c:c5:7f:d5:
e0:1d:fc:0e:7b:d7:07:c4:65:85:2e:50:09:1b:f4:95:ad:e8:
d4:62:8c:88:b3:87:8f:a5:0b:54:db:83:f3:8d:ef:ed:af:65:
5a:47:a2:4d:47:28:71:17:c4:ad:98:d9:cf:15:06:8c:31:72:
da:a0:02:4b:d5:8f:a1:ec:27:71:4c:28:0f:0f:b3:1e:f5:3a:
1b:62:93:01:12:7d:16:6c:26:b6:d6:54:d7:98:aa:a4:3a:a1:
ce:29:6f:a3:52:90:f5:d9:1f:9a:b9:51:39:cf:72:0c:02:37:
11:7d:bf:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:12 2024 by rpki-client on console-ams.rpki-client.org