Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/94ac03-8404-4926-bd48-cf99baa4a09b/1/6WKPyykNZbisz3RFk2AihUpXFdg.roa
File: 6WKPyykNZbisz3RFk2AihUpXFdg.roa (raw, json)
Hash identifier: pBxhY3JYbuIKeT+XYnRjbp1uDIb5HMiY1fExZMVOR5M=
Subject key identifier: E9:62:8F:CB:29:0D:65:B8:AC:CF:74:45:93:60:22:85:4A:57:15:D8
Certificate issuer: /CN=e4bd042ef1c9e868ac901a127fd789eb519e00f1
Certificate serial: 0FA7F81B
Authority key identifier: E4:BD:04:2E:F1:C9:E8:68:AC:90:1A:12:7F:D7:89:EB:51:9E:00:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L0ELvHJ6GiskBoSf9eJ61GeAPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/94ac03-8404-4926-bd48-cf99baa4a09b/1/6WKPyykNZbisz3RFk2AihUpXFdg.roa
Signing time: Sat 01 Jan 2022 10:57:06 +0000
ROA not before: Sat 01 Jan 2022 10:57:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207037
IP address blocks: 185.161.84.0/22 maxlen: 22
2a0b:6c00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262666267 (0xfa7f81b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bd042ef1c9e868ac901a127fd789eb519e00f1
Validity
Not Before: Jan 1 10:57:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9628fcb290d65b8accf7445936022854a5715d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:cf:93:77:f3:a3:f3:36:97:98:94:a1:45:
6b:39:6c:32:0b:9d:86:48:5a:4e:a1:51:a7:39:a8:
d0:01:b5:33:31:df:e4:59:fa:19:97:9c:5c:15:76:
68:e8:10:ca:2f:a5:b6:b7:51:d3:60:99:d5:dd:2e:
42:a6:38:db:6a:f1:dd:7f:9e:42:6b:e0:ee:08:37:
ee:cd:7b:52:4a:3f:90:48:d5:ec:54:cb:98:15:2a:
4f:e2:4b:65:e1:23:39:d2:56:32:53:4f:1e:9d:a4:
af:d0:27:0b:dd:0d:dd:b0:64:78:53:bd:61:6f:4e:
81:17:74:5a:d2:10:b8:c2:28:bd:33:30:c6:56:df:
0d:3b:da:62:c1:fd:eb:c4:e4:39:df:cd:2e:b0:ec:
df:47:a1:b0:84:e2:be:f2:37:b0:9b:ee:40:9f:d0:
62:99:54:19:4c:d2:9d:d7:0c:dc:2f:30:9e:66:12:
54:c6:40:af:ed:97:ab:4a:c4:4d:10:d3:cc:f9:90:
da:7c:55:77:77:bb:fa:06:0d:7f:28:2f:ed:0b:37:
db:ed:f3:ff:9d:7a:3d:a1:d8:58:58:80:0e:4f:8a:
a0:59:d7:79:75:bc:3a:eb:84:d6:e3:52:9d:9c:65:
44:e4:e7:d7:01:73:5e:76:ed:b8:31:9e:9e:63:4b:
eb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:62:8F:CB:29:0D:65:B8:AC:CF:74:45:93:60:22:85:4A:57:15:D8
X509v3 Authority Key Identifier:
keyid:E4:BD:04:2E:F1:C9:E8:68:AC:90:1A:12:7F:D7:89:EB:51:9E:00:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L0ELvHJ6GiskBoSf9eJ61GeAPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/94ac03-8404-4926-bd48-cf99baa4a09b/1/6WKPyykNZbisz3RFk2AihUpXFdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/94ac03-8404-4926-bd48-cf99baa4a09b/1/5L0ELvHJ6GiskBoSf9eJ61GeAPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.84.0/22
IPv6:
2a0b:6c00::/29
Signature Algorithm: sha256WithRSAEncryption
26:d2:ca:9f:88:11:55:bd:b4:ac:c2:14:4d:7b:9e:9d:a6:1d:
68:11:ee:95:d7:fb:41:9d:26:c2:27:77:a7:1e:0e:d0:16:d4:
a0:43:69:cc:63:45:6c:d8:dd:89:e1:90:3c:3c:07:06:cf:02:
91:df:3c:7c:64:72:e8:bb:18:59:89:0a:d3:56:bd:73:44:d9:
f9:cd:9c:29:2b:a4:5d:36:5b:eb:b6:55:96:e5:d7:23:aa:fd:
c3:6f:4e:4c:ea:34:4f:2f:5a:2a:24:bb:b1:16:01:cd:a1:5e:
2a:ca:c5:f2:2d:e0:f9:32:b1:ce:fc:74:b4:ad:96:1e:28:76:
00:43:f6:ef:f3:fc:d2:3a:c7:35:45:e3:a0:0f:8a:03:c3:eb:
36:5b:bb:31:71:2b:86:db:66:29:dd:c1:5f:db:90:2a:5b:b0:
1b:3c:1d:bb:4b:46:25:39:48:c7:7e:bc:17:d2:ad:3a:3e:24:
5c:e2:1f:00:2e:26:66:56:4d:b4:fb:e6:1e:ec:66:e3:f1:b3:
79:c0:98:29:72:ef:2a:40:36:e3:ce:d1:10:48:17:c6:35:d9:
54:e4:2b:a6:78:18:62:34:4e:18:b6:1f:b5:c4:1e:ae:04:27:
d3:f5:f5:c9:47:3c:c3:b6:f1:63:6e:59:e9:10:0f:6e:05:1c:
91:7f:98:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:51 2024 by rpki-client on console-ams.rpki-client.org