Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e19420-faf0-4fc5-a5f9-99c0f071136b/1/Q6yCMpc501WQ3Oq6naMjVylhLqE.roa
File: Q6yCMpc501WQ3Oq6naMjVylhLqE.roa (raw, json)
Hash identifier: RAD/BdRkpquG3tiqkllTnMZFpFLP5Nhpjjux9oVzrkI=
Subject key identifier: 43:AC:82:32:97:39:D3:55:90:DC:EA:BA:9D:A3:23:57:29:61:2E:A1
Certificate issuer: /CN=691fafa6018e7006f490672d9017e1ba758f797a
Certificate serial: 0C4EC9C6
Authority key identifier: 69:1F:AF:A6:01:8E:70:06:F4:90:67:2D:90:17:E1:BA:75:8F:79:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aR-vpgGOcAb0kGctkBfhunWPeXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e19420-faf0-4fc5-a5f9-99c0f071136b/1/Q6yCMpc501WQ3Oq6naMjVylhLqE.roa
Signing time: Sat 01 Jan 2022 09:56:19 +0000
ROA not before: Sat 01 Jan 2022 09:56:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2119
IP address blocks: 185.241.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206490054 (0xc4ec9c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691fafa6018e7006f490672d9017e1ba758f797a
Validity
Not Before: Jan 1 09:56:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43ac82329739d35590dceaba9da3235729612ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:e2:67:e8:e0:14:ad:3b:75:79:ef:df:b9:
03:9a:8f:80:62:f8:40:42:78:9d:83:76:58:05:3f:
f7:9e:23:d3:21:c7:9b:66:e9:ce:ed:76:f1:2d:7b:
71:c5:24:c9:9e:f0:59:c6:19:a8:f5:e1:ee:67:9c:
14:d6:d4:00:5e:7d:93:c2:4a:c2:ba:e2:7c:65:86:
fb:4b:dd:9e:31:07:19:b1:e9:2a:c8:8c:83:86:00:
db:f4:13:1b:0f:08:60:c7:f6:cd:3c:bf:c0:04:87:
03:8e:4f:da:07:3b:b4:9d:6a:ba:94:0a:bc:30:31:
23:f2:31:db:af:de:e8:00:b9:5d:3a:ff:d3:d8:82:
c5:b5:a1:e7:80:b7:fb:0d:e9:6f:c4:f0:9e:44:5f:
1e:2d:89:d0:0d:9b:6f:82:bb:05:08:ce:19:30:e4:
24:6b:3e:56:36:75:fc:a5:5a:ff:46:f9:7f:f6:50:
dc:75:50:78:e3:c9:08:51:8a:78:57:76:70:b1:6c:
4f:77:6a:0c:2b:d8:e3:e6:85:71:bf:b4:39:0c:12:
51:3b:75:74:a6:d9:cf:ef:6d:f4:58:6a:65:30:28:
f4:65:bd:14:66:f4:91:4a:5e:85:34:9d:3d:2d:52:
13:40:5c:ba:03:a2:1c:ba:8c:32:b0:72:81:6e:b3:
0c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AC:82:32:97:39:D3:55:90:DC:EA:BA:9D:A3:23:57:29:61:2E:A1
X509v3 Authority Key Identifier:
keyid:69:1F:AF:A6:01:8E:70:06:F4:90:67:2D:90:17:E1:BA:75:8F:79:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aR-vpgGOcAb0kGctkBfhunWPeXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e19420-faf0-4fc5-a5f9-99c0f071136b/1/Q6yCMpc501WQ3Oq6naMjVylhLqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e19420-faf0-4fc5-a5f9-99c0f071136b/1/aR-vpgGOcAb0kGctkBfhunWPeXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.172.0/22
Signature Algorithm: sha256WithRSAEncryption
60:5c:dd:a4:11:35:46:27:00:4b:f4:74:62:b4:33:ec:25:d2:
22:d1:53:14:c1:d3:23:57:88:1a:e9:f2:b6:de:eb:8f:1a:73:
48:c7:c5:d9:c5:a8:bb:00:cc:da:32:98:7f:55:31:ff:0b:5e:
d4:36:76:b1:6b:3e:4f:cc:86:51:06:94:f9:f2:5b:8d:19:3d:
f3:85:22:6b:68:c1:e8:17:58:03:bf:b5:2b:62:3f:d8:0a:ed:
b2:5f:7e:bd:11:a2:95:5e:27:fe:d6:f1:db:b3:29:d8:54:44:
c5:84:2b:1b:25:26:84:17:0c:df:7c:f2:08:a7:21:a8:64:ef:
6a:04:9f:0a:60:e3:f5:36:86:f2:0d:98:75:0a:af:e0:73:b3:
18:8c:5c:1b:9a:47:34:86:5b:ce:05:3c:ec:43:84:ac:f0:1d:
36:7b:de:3e:f0:f6:06:91:63:8d:70:97:78:18:19:93:06:17:
f9:04:4c:a4:b7:40:1f:cb:45:0b:ef:86:04:4f:09:a7:ad:7c:
60:72:ea:e9:a9:4f:00:35:60:e5:3c:2a:e0:e4:d0:9e:b6:c5:
82:2f:c5:86:48:79:42:a4:2a:e7:3a:e1:5d:b2:9b:7a:c9:97:
eb:4b:9d:0c:d0:ed:bc:7c:88:03:80:16:ce:b4:77:6e:2f:ab:
e0:e9:2f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:04 2024 by rpki-client on console-fra.rpki-client.org