Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/842f98-230d-418a-9245-195c57a463eb/1/arZk20gZAG_Bxr145BlH2dhlGfI.roa
File: arZk20gZAG_Bxr145BlH2dhlGfI.roa (raw, json)
Hash identifier: EUHYFWsze7n39gQk6WEIyFzKIMnTXjpJ9y4ZVLPzg7s=
Subject key identifier: 6A:B6:64:DB:48:19:00:6F:C1:C6:BD:78:E4:19:47:D9:D8:65:19:F2
Certificate issuer: /CN=aa65561ac2089af85946c82c27b7e80805663feb
Certificate serial: 018F3651
Authority key identifier: AA:65:56:1A:C2:08:9A:F8:59:46:C8:2C:27:B7:E8:08:05:66:3F:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmVWGsIImvhZRsgsJ7foCAVmP-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/842f98-230d-418a-9245-195c57a463eb/1/arZk20gZAG_Bxr145BlH2dhlGfI.roa
Signing time: Sat 01 Jan 2022 09:59:20 +0000
ROA not before: Sat 01 Jan 2022 09:59:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203061
IP address blocks: 185.222.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26162769 (0x18f3651)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa65561ac2089af85946c82c27b7e80805663feb
Validity
Not Before: Jan 1 09:59:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ab664db4819006fc1c6bd78e41947d9d86519f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7c:29:9d:35:eb:35:5e:e9:20:ee:7d:8c:63:
4c:e9:e9:c1:42:6c:83:8b:e7:7e:6a:eb:38:a1:9d:
5f:3f:e5:0c:a9:f0:95:7c:75:be:aa:68:52:de:ca:
c3:ac:2c:d6:c3:bd:9d:e8:7d:ba:c0:e2:89:ea:2b:
d4:b1:e4:fd:4d:a2:d9:e5:cd:75:6c:2d:66:8b:49:
ad:4f:98:d8:8e:26:65:58:57:bb:33:af:a2:b8:2c:
31:b7:0d:1c:c8:cb:56:03:ef:41:9e:c3:0e:65:9f:
82:b4:fd:95:f1:2c:fa:a0:89:ae:a7:d6:44:10:32:
3c:76:d9:4b:70:c2:4a:5c:eb:5f:5e:59:9c:d0:58:
0f:72:55:7d:7e:97:15:bc:d8:06:29:02:61:92:1e:
80:e0:38:07:bf:79:b9:cb:a4:41:99:ad:b0:a9:8f:
e3:f6:61:6d:98:00:42:a1:fa:4c:93:89:71:1d:89:
7f:71:5a:5d:9b:be:85:58:5d:f6:c3:06:a5:52:3d:
8a:0a:c2:f1:0d:9d:ce:71:c2:36:bf:09:b2:22:5f:
29:7f:d3:f7:8b:1b:40:59:fc:43:d8:b0:09:8b:7c:
3a:44:86:eb:80:b6:44:7a:db:f9:51:81:35:9d:ed:
3a:4e:9d:5a:89:50:e5:12:91:a6:ab:b4:93:1d:12:
df:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B6:64:DB:48:19:00:6F:C1:C6:BD:78:E4:19:47:D9:D8:65:19:F2
X509v3 Authority Key Identifier:
keyid:AA:65:56:1A:C2:08:9A:F8:59:46:C8:2C:27:B7:E8:08:05:66:3F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmVWGsIImvhZRsgsJ7foCAVmP-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/842f98-230d-418a-9245-195c57a463eb/1/arZk20gZAG_Bxr145BlH2dhlGfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/842f98-230d-418a-9245-195c57a463eb/1/qmVWGsIImvhZRsgsJ7foCAVmP-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.213.0/24
Signature Algorithm: sha256WithRSAEncryption
54:1f:e2:ce:12:9e:97:22:f6:e7:6b:0f:49:a9:8d:bf:0b:18:
42:23:b6:2c:33:19:c3:d4:bc:c3:91:c6:56:6e:05:71:bd:bc:
49:98:3e:84:12:66:ff:ee:ff:dd:05:c6:84:ff:39:05:43:c6:
3a:a6:43:93:be:74:ac:5f:80:17:5e:01:9d:f1:04:e1:85:c8:
f5:d4:38:03:17:26:75:4d:17:da:48:81:ab:68:dc:33:2d:61:
3d:13:6c:28:57:b4:13:98:c6:ae:f3:9c:00:6a:27:d4:e3:50:
89:b6:a9:69:98:37:31:a2:7d:a9:86:f3:62:56:a9:cb:41:6d:
28:1a:24:65:0e:6d:89:2c:78:28:68:03:7d:eb:e1:07:d7:f4:
e8:18:f8:57:03:0b:16:34:c0:54:ea:61:59:8c:9e:01:f8:92:
8a:b5:a1:4a:e2:9e:4c:11:55:c4:18:99:bf:b8:ea:80:80:83:
11:7b:cd:00:e1:db:fc:b5:7e:6f:01:91:d8:cc:e3:4d:0d:89:
42:38:a4:94:52:ad:46:0b:10:9b:06:48:1f:b4:19:23:22:23:
dc:85:cf:9f:0e:7a:6c:a0:57:f4:ee:9f:f5:23:58:fe:d9:ac:
41:71:1b:d6:e5:f2:cd:02:90:a8:30:25:06:ca:94:fb:4d:fc:
45:19:b5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:49 2024 by rpki-client on console-fra.rpki-client.org