Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d5b93c-6022-48d3-a72f-461e894872e8/1/P2xmK4XYKEY7sLj1AkTFLr79xUk.roa
File: P2xmK4XYKEY7sLj1AkTFLr79xUk.roa (raw, json)
Hash identifier: RRqzY1mRZFAtKRQMvU/RqP+iVd4g/Pa3ZdLKl1SYeUk=
Subject key identifier: 3F:6C:66:2B:85:D8:28:46:3B:B0:B8:F5:02:44:C5:2E:BE:FD:C5:49
Certificate issuer: /CN=6306cc0161475d84f7a577e2ca23c8c244f00b7c
Certificate serial: 135E81F1
Authority key identifier: 63:06:CC:01:61:47:5D:84:F7:A5:77:E2:CA:23:C8:C2:44:F0:0B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwbMAWFHXYT3pXfiyiPIwkTwC3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d5b93c-6022-48d3-a72f-461e894872e8/1/P2xmK4XYKEY7sLj1AkTFLr79xUk.roa
Signing time: Sat 01 Jan 2022 04:53:21 +0000
ROA not before: Sat 01 Jan 2022 04:53:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199971
IP address blocks: 185.133.185.0/24 maxlen: 24
2a0d:b80::/32 maxlen: 32
2001:67c:18e0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324960753 (0x135e81f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6306cc0161475d84f7a577e2ca23c8c244f00b7c
Validity
Not Before: Jan 1 04:53:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f6c662b85d828463bb0b8f50244c52ebefdc549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5d:08:13:a9:40:f9:ff:35:65:fb:fa:0a:9b:
9b:f1:11:19:48:35:6a:c8:43:0d:28:b3:d3:63:a3:
c7:e1:a5:01:97:10:5e:19:f2:7e:05:47:d6:6f:c5:
08:89:e6:19:40:87:05:af:0a:b9:2a:71:85:d0:da:
27:ba:15:93:fa:86:df:50:79:59:de:97:91:5c:35:
12:d7:86:43:1a:31:e7:23:48:8b:53:d3:c0:6d:71:
10:7f:25:24:8c:e6:dc:82:fa:11:31:c7:39:ed:0b:
00:27:00:a4:04:fb:80:90:16:f7:8f:2c:41:95:e5:
97:5b:38:a0:9d:45:a8:8a:22:d4:d9:2b:94:f3:f0:
f4:0b:1e:6b:00:fe:80:2b:93:cf:47:b7:19:8a:81:
90:64:2e:c5:9b:67:96:3a:33:8e:3d:be:3a:86:dc:
8b:96:a0:97:48:6f:3d:04:5b:05:8f:d9:77:db:c4:
73:08:f3:08:28:4f:b4:9b:69:b4:b6:3f:57:e4:cd:
2d:c3:0e:0c:f0:fc:e6:fd:4e:2c:d9:e0:9e:da:ca:
7c:ed:bd:a4:bb:c8:af:02:29:bf:fa:fe:42:39:a1:
d6:63:55:a6:ec:cd:84:db:77:68:68:55:49:da:6b:
73:a8:3f:49:28:52:69:6c:e0:2e:a2:37:59:93:28:
45:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6C:66:2B:85:D8:28:46:3B:B0:B8:F5:02:44:C5:2E:BE:FD:C5:49
X509v3 Authority Key Identifier:
keyid:63:06:CC:01:61:47:5D:84:F7:A5:77:E2:CA:23:C8:C2:44:F0:0B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwbMAWFHXYT3pXfiyiPIwkTwC3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d5b93c-6022-48d3-a72f-461e894872e8/1/P2xmK4XYKEY7sLj1AkTFLr79xUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d5b93c-6022-48d3-a72f-461e894872e8/1/YwbMAWFHXYT3pXfiyiPIwkTwC3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.185.0/24
IPv6:
2001:67c:18e0::/48
2a0d:b80::/32
Signature Algorithm: sha256WithRSAEncryption
0c:9f:7c:24:50:b0:72:76:32:16:54:38:b3:ec:3e:58:26:47:
91:c4:21:50:6e:41:2e:e6:46:88:15:da:ad:f8:68:01:07:f3:
fc:a7:c2:f7:3e:5b:7d:53:c0:ae:8c:ee:cc:70:f8:37:80:dc:
0f:b1:16:3c:65:9d:a9:09:2e:71:f8:d1:92:43:41:11:a0:e7:
b7:35:fd:68:d2:ce:73:92:6f:a8:a6:2f:f0:0b:c6:0b:17:2a:
10:12:96:94:a7:dd:e0:ca:e3:43:e5:4b:6e:ac:de:5a:1d:01:
28:6a:f7:b7:79:37:cc:1e:88:51:ae:c6:a2:15:96:6f:29:ce:
9d:ec:0b:98:b3:0f:57:a8:5f:64:fe:69:4f:88:68:da:22:fe:
71:8c:29:07:a0:f0:a2:41:6a:94:b1:2d:db:6a:68:1d:cf:5f:
68:67:40:80:2c:35:9e:80:ce:31:67:ef:7c:c8:62:1a:11:1f:
9d:ea:30:6b:d3:e6:ba:42:79:2f:6a:fa:45:63:e2:63:d9:b7:
05:37:30:91:f3:3b:60:53:e5:1c:14:29:21:3b:56:f3:66:c1:
12:67:94:66:c2:04:29:1f:9a:27:5a:cc:fa:f3:3d:f9:e6:d9:
55:ec:a8:5a:34:3f:c7:3b:e0:23:fc:47:3e:66:57:19:86:ae:
2f:6f:a3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:58 2024 by rpki-client on console-fra.rpki-client.org