Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/k6GLtJOmfhU-HXod4a3r6LLZBeA.roa
File: k6GLtJOmfhU-HXod4a3r6LLZBeA.roa (raw, json)
Hash identifier: Ycm3JN/rQ6R8R9q9S+aTAr0dTowZStXv1eTWJ1IBl54=
Subject key identifier: 93:A1:8B:B4:93:A6:7E:15:3E:1D:7A:1D:E1:AD:EB:E8:B2:D9:05:E0
Certificate issuer: /CN=c66048e9d22d671ee72eb373ae356bd5ad7d664f
Certificate serial: 01856D2F546307A4254053F077575CDBC3B7
Authority key identifier: C6:60:48:E9:D2:2D:67:1E:E7:2E:B3:73:AE:35:6B:D5:AD:7D:66:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmBI6dItZx7nLrNzrjVr1a19Zk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/k6GLtJOmfhU-HXod4a3r6LLZBeA.roa
Signing time: Sun 01 Jan 2023 11:54:56 +0000
ROA not before: Sun 01 Jan 2023 11:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57523
IP address blocks: 185.81.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:54:63:07:a4:25:40:53:f0:77:57:5c:db:c3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66048e9d22d671ee72eb373ae356bd5ad7d664f
Validity
Not Before: Jan 1 11:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93a18bb493a67e153e1d7a1de1adebe8b2d905e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:09:4b:dc:b3:be:57:36:21:5a:bf:1e:32:
6a:df:dd:44:54:07:77:bd:cf:0c:29:05:e1:61:88:
69:e2:db:f5:e0:c9:75:85:9c:89:4a:d9:80:17:2a:
09:00:15:b9:c7:7e:9d:51:ca:73:bb:57:95:c3:63:
eb:b5:04:71:af:10:2a:f8:bf:ff:c8:0d:11:e2:61:
55:f2:0d:55:dc:f8:50:a8:0c:40:68:66:62:36:8e:
67:ca:de:4a:64:60:9b:7d:f1:ea:5d:98:31:f1:5f:
e0:a3:ae:6b:2a:bb:b9:a0:bc:45:9b:d9:f2:03:cb:
f2:0b:3d:8c:5a:4f:b9:2f:6d:32:1b:64:ca:d9:03:
c5:ec:a6:a5:e8:ad:eb:97:e0:b9:b1:5a:ae:df:0b:
e1:2b:38:52:ef:3b:94:41:e6:79:70:cf:a4:fc:a5:
04:63:9c:7b:90:44:b4:bf:36:b1:6e:ed:c6:6c:ed:
36:ef:d1:95:fb:37:77:3c:fe:e0:2a:b6:0e:9b:7d:
b4:38:3e:9d:17:87:10:9d:34:4c:f9:61:f2:5f:18:
f0:c8:17:ee:c6:a2:19:25:a6:10:b3:d4:61:de:7c:
1c:b5:64:9a:59:a7:f0:c0:81:5a:5e:5b:ea:3d:19:
69:a1:ba:69:f9:b7:23:7d:d1:0f:cd:8a:69:2a:ea:
44:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A1:8B:B4:93:A6:7E:15:3E:1D:7A:1D:E1:AD:EB:E8:B2:D9:05:E0
X509v3 Authority Key Identifier:
keyid:C6:60:48:E9:D2:2D:67:1E:E7:2E:B3:73:AE:35:6B:D5:AD:7D:66:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmBI6dItZx7nLrNzrjVr1a19Zk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/k6GLtJOmfhU-HXod4a3r6LLZBeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/xmBI6dItZx7nLrNzrjVr1a19Zk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.68.0/24
Signature Algorithm: sha256WithRSAEncryption
34:2a:50:5f:56:91:6e:fa:39:ce:21:69:77:64:54:85:a3:a8:
78:05:1c:06:2f:a0:47:48:b7:2c:3a:0a:57:aa:cb:ae:e3:a3:
80:d3:b1:e0:5f:7b:c8:1e:56:07:98:ea:48:37:ee:77:7c:4a:
f0:22:b6:65:9d:3c:db:13:54:cf:65:0a:21:3b:7e:70:88:9b:
42:59:6c:38:f3:8a:62:4e:ea:66:09:73:16:f5:28:4b:6a:85:
61:db:09:bc:d6:cb:45:71:17:22:5b:ed:56:1f:26:12:d0:97:
fa:b6:54:12:a9:db:7d:37:95:90:09:c1:79:9d:9d:fc:54:8d:
f5:bb:df:9b:c4:96:45:c3:bc:18:e3:ed:31:41:ec:7f:25:57:
86:c3:7c:87:fb:9b:f4:88:f4:5d:1e:59:7a:04:cc:ec:c8:a6:
6c:fa:98:ad:71:95:58:b4:8e:42:11:08:41:5a:28:a3:82:b9:
7b:06:96:8d:e7:c4:8a:d6:2f:80:c6:6e:59:e2:b9:b8:4c:37:
dc:66:ca:cb:5f:b9:4b:10:dc:c7:ac:f1:3d:d1:6b:1c:8c:bf:
88:f6:0f:0e:32:14:a9:12:cb:25:d9:a5:75:4e:58:62:ed:c0:
fa:6e:a2:74:51:b2:b3:a2:a6:43:15:6d:11:31:7f:70:ad:f0:
7b:69:35:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:35 2024 by rpki-client on console-ams.rpki-client.org