Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/4AomDvxT3aO6gDoiDw_JMa4vU_s.roa
File: 4AomDvxT3aO6gDoiDw_JMa4vU_s.roa (raw, json)
Hash identifier: wdM6sAnDEhlZf5snvvMtDigr86y/INJH8B3ddpsFMN0=
Subject key identifier: E0:0A:26:0E:FC:53:DD:A3:BA:80:3A:22:0F:0F:C9:31:AE:2F:53:FB
Certificate issuer: /CN=6dc0d05f8ee9e958fc95de65dc59a2141c5f1efd
Certificate serial: 0187E5AB532F0AE3B67ED32D14F3F9D11D6C
Authority key identifier: 6D:C0:D0:5F:8E:E9:E9:58:FC:95:DE:65:DC:59:A2:14:1C:5F:1E:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bcDQX47p6Vj8ld5l3FmiFBxfHv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/4AomDvxT3aO6gDoiDw_JMa4vU_s.roa
Signing time: Thu 04 May 2023 07:30:23 +0000
ROA not before: Thu 04 May 2023 07:30:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43298
IP address blocks: 185.71.67.0/24 maxlen: 24
185.71.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e5:ab:53:2f:0a:e3:b6:7e:d3:2d:14:f3:f9:d1:1d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc0d05f8ee9e958fc95de65dc59a2141c5f1efd
Validity
Not Before: May 4 07:30:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e00a260efc53dda3ba803a220f0fc931ae2f53fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:39:17:b0:a3:2b:46:d6:6e:ed:9f:c0:03:
1b:50:2a:54:d1:9f:b1:6a:8a:56:83:38:94:41:93:
38:99:a6:0e:ec:7f:34:f0:c1:05:b3:62:c3:51:29:
01:07:a2:36:35:6f:35:cd:3c:24:35:75:df:dc:ad:
4f:93:1d:02:18:9a:9e:99:b0:d7:70:05:ec:96:11:
fc:c9:e6:30:fb:8b:95:61:38:9a:bb:2c:69:4f:3d:
23:ab:d1:aa:d7:86:aa:9c:b5:9f:50:4f:1a:2e:d7:
ef:6d:34:0f:b5:e3:e1:a3:fb:24:84:02:78:02:3f:
4e:07:50:65:37:2f:f4:43:79:16:d0:8c:34:40:04:
c2:f0:b7:0e:8c:25:b7:e4:62:c8:67:dc:e8:49:13:
a8:1a:5e:eb:48:62:f7:c1:a4:e9:57:17:fc:83:08:
8c:98:a0:41:56:be:29:47:e5:8d:bd:f2:53:4f:6c:
5f:40:22:35:3c:81:f6:ee:ad:53:79:3c:8b:b1:bc:
91:52:a0:0b:eb:b5:a3:92:59:d0:a5:50:cb:1d:7e:
5a:b8:88:fa:87:4a:79:83:f0:84:a1:9f:9a:e9:e0:
6c:94:01:46:a6:4c:15:3e:00:88:b6:d6:69:e1:f9:
d4:e2:26:9e:2f:ca:01:1b:69:eb:57:84:7a:54:d9:
55:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0A:26:0E:FC:53:DD:A3:BA:80:3A:22:0F:0F:C9:31:AE:2F:53:FB
X509v3 Authority Key Identifier:
keyid:6D:C0:D0:5F:8E:E9:E9:58:FC:95:DE:65:DC:59:A2:14:1C:5F:1E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcDQX47p6Vj8ld5l3FmiFBxfHv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/4AomDvxT3aO6gDoiDw_JMa4vU_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/bcDQX47p6Vj8ld5l3FmiFBxfHv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.65.0/24
185.71.67.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:d5:15:72:14:9b:4d:b4:ef:fd:80:8e:5f:da:ab:f5:67:82:
dc:87:27:a4:87:f2:6c:bb:f6:c3:3e:ab:83:b5:a7:e4:a6:7d:
d1:ac:d6:cc:e3:03:5e:ff:49:49:80:ed:2c:bb:37:04:3b:17:
1d:f3:c1:fe:5b:64:d3:1d:c4:b7:a7:c6:b9:e0:36:47:d0:09:
54:a0:71:8e:29:b4:a9:ab:09:a2:53:52:cd:bc:e6:df:96:54:
6a:8f:b6:40:41:2a:07:b0:fa:f1:28:8e:21:8f:17:4b:fb:30:
56:8b:b9:08:1f:4a:1b:9b:6f:83:ce:04:f9:38:db:86:60:f0:
6a:29:15:14:39:2a:5c:45:77:0c:8b:0c:e8:2c:41:0a:2c:8a:
bf:e8:92:92:ab:80:7e:ec:62:e5:4b:38:f6:76:e2:e9:08:6c:
66:5f:97:c4:1b:bc:76:c0:56:7a:d9:5a:5d:bd:50:a7:ee:f6:
7d:3e:6f:ba:1f:65:28:cc:f0:29:87:0f:44:7f:4f:f7:32:05:
73:0c:48:16:7e:f3:e0:51:ee:2f:16:57:7f:5a:cf:49:e0:8b:
c9:75:5a:18:3d:e3:40:84:80:01:c5:7f:d4:13:21:81:aa:6d:
d1:14:8b:c8:ab:5a:9b:bf:16:e5:18:00:22:e1:f1:1e:f1:0f:
02:67:fe:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:08 2025 by rpki-client