Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/06KQ3IHlIUU5V8XQyvtUaE2xgo0.roa
File: 06KQ3IHlIUU5V8XQyvtUaE2xgo0.roa (raw, json)
Hash identifier: keZDi5jV3yzov20QceqUyCwMslkyW0o5R40Lgavyrdg=
Subject key identifier: D3:A2:90:DC:81:E5:21:45:39:57:C5:D0:CA:FB:54:68:4D:B1:82:8D
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A0F50B3
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/06KQ3IHlIUU5V8XQyvtUaE2xgo0.roa
Signing time: Mon 28 Mar 2022 12:57:03 +0000
ROA not before: Mon 28 Mar 2022 12:57:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 82.140.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168775859 (0xa0f50b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Mar 28 12:57:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3a290dc81e521453957c5d0cafb54684db1828d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:2a:84:ec:5c:c7:95:3a:ec:46:08:aa:95:
07:8a:7c:a1:3d:f3:f4:bc:d7:0c:1c:3c:de:6f:22:
b2:8a:f4:f7:02:1d:3b:f6:15:d7:fe:ec:c0:00:2b:
ef:fc:a7:d8:cf:81:79:2f:4e:15:02:ff:c0:69:c3:
01:5c:85:11:7c:96:ee:77:90:29:c8:31:78:fd:6d:
7d:e2:98:45:6d:f8:0c:9a:1c:e6:30:5d:d1:7d:93:
65:c5:69:06:d2:76:01:36:e3:e6:81:e0:4c:84:d5:
39:0b:f6:a9:a1:b6:03:12:fe:3e:d2:37:86:31:88:
a7:a0:d7:a1:ec:42:44:7b:a2:44:0a:a9:78:3b:c2:
cd:09:ae:0b:85:9a:7e:42:4c:5e:e6:ad:b8:78:55:
14:e8:6b:41:72:d3:f4:71:cd:22:94:1e:28:ec:72:
77:db:c8:e0:b8:ef:09:50:97:8c:df:32:5b:85:bb:
5b:91:ca:6b:29:97:dd:51:6c:e3:47:18:43:fa:35:
c1:06:c8:c2:22:48:a0:da:71:cb:3a:f3:72:c8:94:
4f:26:35:f7:32:0e:25:34:72:62:13:4a:7e:a0:67:
ae:e0:11:64:98:08:6a:8c:e6:be:ce:0f:a6:9d:88:
60:ed:d7:fd:2d:55:f4:49:a0:43:3a:81:89:97:3f:
65:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A2:90:DC:81:E5:21:45:39:57:C5:D0:CA:FB:54:68:4D:B1:82:8D
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/06KQ3IHlIUU5V8XQyvtUaE2xgo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.182.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c3:05:28:76:a6:cd:c3:5b:51:97:7d:9b:8c:27:cc:f3:53:
2f:f5:ff:95:96:69:ea:e7:ae:e3:bf:cc:87:bc:35:bd:68:47:
3c:1e:ef:5f:ad:f2:8c:13:e8:d4:4d:b4:c6:32:f6:ed:2c:38:
fa:fc:00:f8:6d:04:25:be:ac:48:64:0d:3f:bf:4d:96:5d:47:
15:e5:aa:70:b3:bc:19:99:47:03:41:9c:b4:18:7f:1b:70:f2:
be:9d:61:e5:f8:6e:a0:3a:60:0d:5e:5e:75:4a:e6:a2:40:2c:
a6:17:6e:8f:6a:0e:92:bb:59:38:02:38:52:28:a2:23:19:1f:
b8:77:a9:83:c9:4b:c2:c5:74:25:97:fc:d5:6d:b1:31:41:c8:
78:31:ca:47:5c:28:8d:ec:d0:ee:d7:0c:14:3a:ac:69:c9:2c:
94:63:e6:69:11:d6:7d:58:20:4e:7c:8a:02:dc:84:f4:a9:df:
37:f0:a5:9c:d9:68:81:7a:5c:ba:8d:43:01:08:ae:cf:a1:e2:
9e:bf:90:d6:29:d8:f8:29:6c:7f:10:19:16:04:ec:07:e1:4f:
ac:54:8c:e3:90:b4:ec:89:c4:97:64:c7:96:4b:9f:9c:96:4d:
19:ab:f6:9b:d8:a9:5e:8b:2a:40:c3:eb:ff:d4:2a:ba:77:b4:
13:d8:0d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org