Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2c9183-a763-47fd-b2b1-68ac3a5ece53/1/bnFRRh2r9sAQ43Zr6E8S73N3gKw.roa
File: bnFRRh2r9sAQ43Zr6E8S73N3gKw.roa (raw, json)
Hash identifier: /g9HffGzagdVzdSbwmBg0R4T4E6zckEJfF+V8sp2YcE=
Subject key identifier: 6E:71:51:46:1D:AB:F6:C0:10:E3:76:6B:E8:4F:12:EF:73:77:80:AC
Certificate issuer: /CN=fc3faa582d9f53b9a98682401481b0bf70581690
Certificate serial: 0107538E
Authority key identifier: FC:3F:AA:58:2D:9F:53:B9:A9:86:82:40:14:81:B0:BF:70:58:16:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_D-qWC2fU7mphoJAFIGwv3BYFpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2c9183-a763-47fd-b2b1-68ac3a5ece53/1/bnFRRh2r9sAQ43Zr6E8S73N3gKw.roa
Signing time: Sat 01 Jan 2022 06:58:31 +0000
ROA not before: Sat 01 Jan 2022 06:58:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57030
IP address blocks: 185.177.120.0/22 maxlen: 22
185.177.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17257358 (0x107538e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3faa582d9f53b9a98682401481b0bf70581690
Validity
Not Before: Jan 1 06:58:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e7151461dabf6c010e3766be84f12ef737780ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:9b:94:cf:c0:ac:85:1f:6e:7c:9c:a5:c8:
0f:6a:5b:d5:7c:2e:4f:3d:dd:78:bd:20:17:9a:6d:
57:b2:4a:e4:b5:b7:0c:b6:a0:9b:94:bf:f2:40:1a:
9d:14:72:08:71:ad:50:28:bb:00:35:83:6e:fc:8f:
dc:a6:92:c4:3e:39:50:51:be:d4:24:02:b9:5a:03:
47:07:b3:a2:ba:07:97:dc:9c:73:71:ec:96:63:43:
10:f6:e3:a1:1b:b1:de:94:75:41:3c:03:3a:aa:85:
9f:ab:8a:7d:dd:45:1f:0e:08:ee:a8:1d:9f:f3:e0:
cd:b5:1b:ad:91:ba:cc:c3:26:83:20:d4:95:42:2b:
98:66:2f:df:84:65:6b:e2:de:aa:5b:97:b8:17:13:
01:91:16:e1:72:e6:62:66:3e:aa:16:22:b8:80:af:
20:d9:66:83:c5:21:ef:c0:d0:31:54:37:2e:50:a9:
b2:ed:e6:c5:35:e3:0a:77:0f:a8:34:f3:7c:82:aa:
d0:51:08:18:c6:fc:35:8f:a5:d4:40:f5:70:41:3f:
c6:65:5e:b7:e8:84:d9:72:fd:f6:8f:18:26:a6:df:
ef:67:69:0f:9d:7e:06:9c:3c:05:10:c7:2f:42:87:
4a:23:a5:d3:de:97:17:67:50:71:bc:5e:36:48:55:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:71:51:46:1D:AB:F6:C0:10:E3:76:6B:E8:4F:12:EF:73:77:80:AC
X509v3 Authority Key Identifier:
keyid:FC:3F:AA:58:2D:9F:53:B9:A9:86:82:40:14:81:B0:BF:70:58:16:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_D-qWC2fU7mphoJAFIGwv3BYFpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2c9183-a763-47fd-b2b1-68ac3a5ece53/1/bnFRRh2r9sAQ43Zr6E8S73N3gKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2c9183-a763-47fd-b2b1-68ac3a5ece53/1/_D-qWC2fU7mphoJAFIGwv3BYFpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.120.0/22
Signature Algorithm: sha256WithRSAEncryption
36:dc:0e:d5:95:5b:1f:0e:94:0a:e9:73:f9:26:10:55:21:e5:
79:c9:64:6e:96:f3:5c:84:87:87:25:27:ed:d1:c8:cf:35:87:
9c:32:25:3d:69:3d:b2:55:89:76:0c:36:ab:b9:36:13:27:4f:
10:30:3c:b8:72:df:6d:30:29:a1:c8:0b:dd:b3:2d:4f:3c:4d:
84:07:55:e6:e0:7b:c4:77:36:84:87:3b:e4:73:53:7f:2d:21:
bc:5c:a6:4a:97:87:6c:a1:80:f3:89:22:1d:bd:d8:a7:c0:51:
0f:eb:fd:f8:70:03:8b:4c:03:fa:f0:9d:14:7a:b8:ce:3a:63:
90:cc:9d:bc:e2:dd:87:cc:8f:d3:49:38:01:5d:66:d3:b1:e7:
dd:19:42:95:5b:a9:5b:17:fa:0c:91:3d:46:db:47:68:cb:50:
6c:2f:eb:6a:50:c3:49:0e:06:8b:d9:53:6c:2b:85:60:ff:ae:
a9:34:7d:fd:f1:cc:39:ec:b2:11:52:42:85:8f:53:80:5e:a1:
5b:bc:7d:42:8f:31:ac:71:87:74:4f:c2:59:ee:89:6b:e7:24:
95:4d:6d:60:12:15:77:97:57:4a:9f:b3:50:16:00:33:cb:0c:
20:53:de:c7:63:7c:f6:8e:7e:d1:fb:97:45:9a:b9:e7:87:28:
db:c3:ac:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:10 2024 by rpki-client on console-ams.rpki-client.org