Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6ad54c-7564-489f-8f84-592c8bceb0d5/1/b-edB1r0MoFFpTXf85rLqsaOYrg.roa
File: b-edB1r0MoFFpTXf85rLqsaOYrg.roa (raw, json)
Hash identifier: nCQvxneLjLtyBmnaRTMq2TOI8KJdJUc1f4uNO5R/yMY=
Subject key identifier: 6F:E7:9D:07:5A:F4:32:81:45:A5:35:DF:F3:9A:CB:AA:C6:8E:62:B8
Certificate issuer: /CN=f5b75ad5609cef112579bd01938c6c73267fff07
Certificate serial: 018CC50097B1D97485A2752F589FB679130A
Authority key identifier: F5:B7:5A:D5:60:9C:EF:11:25:79:BD:01:93:8C:6C:73:26:7F:FF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bda1WCc7xEleb0Bk4xscyZ__wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6ad54c-7564-489f-8f84-592c8bceb0d5/1/b-edB1r0MoFFpTXf85rLqsaOYrg.roa
Signing time: Mon 01 Jan 2024 12:29:59 +0000
ROA not before: Mon 01 Jan 2024 12:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 185.201.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:97:b1:d9:74:85:a2:75:2f:58:9f:b6:79:13:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b75ad5609cef112579bd01938c6c73267fff07
Validity
Not Before: Jan 1 12:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fe79d075af4328145a535dff39acbaac68e62b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:f7:c3:1d:7f:c0:df:2b:0b:00:b4:fd:c9:
41:c6:78:0a:24:25:f1:fd:8c:76:96:1a:72:f3:8a:
4b:e1:c0:8c:69:94:e1:86:92:41:2a:94:17:3c:c9:
6b:ce:7e:08:c1:c4:db:88:f2:57:16:8e:cd:a5:33:
98:f5:f2:a3:01:c5:b4:18:97:62:e0:26:d4:9a:b4:
84:bd:e9:93:cd:af:e7:cd:0c:f0:a3:bf:f2:4b:80:
58:6a:72:13:c9:ef:31:3a:1a:0e:8a:bf:9f:ce:c8:
66:dd:98:b9:20:da:26:9a:4b:78:a9:98:83:cf:54:
fb:a4:49:91:a0:2e:ab:c4:a0:11:9b:eb:75:34:92:
e5:6b:5c:70:4a:15:7d:0f:bf:a5:bc:f5:eb:6f:6e:
b1:e7:83:9d:65:d9:df:82:6b:0f:d5:02:c2:44:0f:
96:a6:ef:40:2c:28:37:99:7e:da:76:53:e8:cd:09:
00:42:2a:03:9c:e6:10:86:ce:78:8a:49:34:87:ca:
ae:3c:39:d1:63:35:84:94:8c:19:cb:c2:c7:04:57:
3e:d7:ae:08:ba:84:2f:fb:3b:b1:4c:bd:fa:67:21:
25:91:c5:d7:ba:b6:f1:56:a4:fa:31:43:50:1d:14:
c6:4f:2e:18:0b:47:d4:75:51:88:69:02:80:b1:e7:
f6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E7:9D:07:5A:F4:32:81:45:A5:35:DF:F3:9A:CB:AA:C6:8E:62:B8
X509v3 Authority Key Identifier:
keyid:F5:B7:5A:D5:60:9C:EF:11:25:79:BD:01:93:8C:6C:73:26:7F:FF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bda1WCc7xEleb0Bk4xscyZ__wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6ad54c-7564-489f-8f84-592c8bceb0d5/1/b-edB1r0MoFFpTXf85rLqsaOYrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6ad54c-7564-489f-8f84-592c8bceb0d5/1/9bda1WCc7xEleb0Bk4xscyZ__wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.28.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:50:e0:7d:50:4e:cf:15:d1:68:f5:6b:ca:b0:3e:26:f4:b2:
ca:d4:ef:a8:ae:80:00:fc:01:39:f6:a6:fe:f3:44:a4:2a:e8:
d9:20:a2:2c:76:57:d1:02:6e:ff:0c:63:09:c7:88:b0:9c:00:
eb:1a:49:6c:f5:cb:29:ec:cd:98:df:67:c0:2d:6d:3e:37:8e:
8b:70:1c:b8:2d:6d:f1:be:6e:46:4e:b4:12:d7:94:3e:f3:34:
b8:d2:b8:c8:30:e0:3b:15:18:39:80:c5:e9:db:8d:bc:ae:2e:
5e:67:3a:84:02:14:c8:71:6a:ac:ba:e7:cb:cd:8c:7d:60:36:
ce:3f:83:7c:70:63:d1:f7:bc:38:1e:c1:1d:9b:ac:2f:cc:25:
b4:2a:87:ba:35:05:a0:f9:0b:08:9a:aa:d3:0e:0d:b5:13:c5:
91:f3:54:f6:9d:3a:47:f8:62:33:fd:f3:d6:54:02:de:4f:ee:
2c:8f:d8:93:1f:8f:ce:1b:17:20:13:b9:bf:b9:7b:d3:8f:10:
c1:0c:49:7f:19:75:a2:bf:2d:17:0d:a2:45:07:42:81:42:e6:
b9:73:7a:39:dc:5e:09:84:f9:a6:88:6a:0d:0e:f0:41:cb:69:
26:e0:30:9d:b8:3a:51:a9:ea:f8:f6:12:18:d9:0c:18:10:a1:
d1:db:65:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 16:26:14 2024 by rpki-client on console-ams.rpki-client.org