Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/ffc6be-91f7-4021-b366-905af95df5dc/1/k7_lEEghX6zw_9hF1TO4UCnzBPY.roa
File: k7_lEEghX6zw_9hF1TO4UCnzBPY.roa (raw, json)
Hash identifier: AnQcJqKke7ZkgFoizxIbI7PCa6OArnoj5ZjU8bbM0KY=
Subject key identifier: 93:BF:E5:10:48:21:5F:AC:F0:FF:D8:45:D5:33:B8:50:29:F3:04:F6
Certificate issuer: /CN=6b4fe3b4cbe8374587000732c19147990fe45530
Certificate serial: 014B9A
Authority key identifier: 6B:4F:E3:B4:CB:E8:37:45:87:00:07:32:C1:91:47:99:0F:E4:55:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0_jtMvoN0WHAAcywZFHmQ_kVTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/ffc6be-91f7-4021-b366-905af95df5dc/1/k7_lEEghX6zw_9hF1TO4UCnzBPY.roa
Signing time: Wed 04 May 2022 09:52:09 +0000
ROA not before: Wed 04 May 2022 09:52:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.176.84.0/24 maxlen: 24
185.176.85.0/24 maxlen: 24
185.176.87.0/24 maxlen: 24
185.176.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84890 (0x14b9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4fe3b4cbe8374587000732c19147990fe45530
Validity
Not Before: May 4 09:52:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93bfe51048215facf0ffd845d533b85029f304f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fb:49:68:c2:20:70:c7:cf:72:b3:1c:2d:ed:
2c:d5:e0:e6:44:15:cb:b0:63:e3:ed:a2:b5:83:7d:
f5:b9:49:10:51:3f:87:52:cc:b6:e4:7c:1e:56:f2:
47:6c:f7:eb:01:3f:82:ef:5f:a5:5c:bd:97:21:c4:
e6:24:82:88:2f:03:5c:08:c5:7f:e3:15:e4:23:35:
a0:60:ac:e2:9b:21:75:61:ef:03:5d:71:ca:8f:4e:
5b:06:b3:dc:41:4f:48:63:66:b3:d2:69:6f:f7:bc:
8e:31:f4:f2:0a:c5:f9:9f:43:8c:68:86:a8:ef:6d:
0a:7d:db:74:b7:8d:64:24:c2:99:68:a3:cd:16:6d:
d1:87:47:d3:41:4a:19:31:a2:cb:27:98:c1:0f:f4:
aa:07:e6:42:d8:24:f5:45:42:78:8a:2a:c8:22:61:
b1:71:2d:f5:32:0f:28:87:7d:fe:b0:b8:45:a6:f9:
9a:d1:7a:86:33:61:92:77:7f:b3:79:4e:f3:f7:38:
8f:57:b9:c2:32:de:fc:2c:a5:9c:7e:e2:08:28:df:
b6:8e:db:94:3f:2b:2c:67:d7:be:20:4f:13:79:45:
27:09:39:4c:bb:07:d9:ad:04:64:e1:3f:3c:bc:31:
7d:18:c5:08:83:dd:01:51:b2:b9:6f:48:36:74:8d:
a4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BF:E5:10:48:21:5F:AC:F0:FF:D8:45:D5:33:B8:50:29:F3:04:F6
X509v3 Authority Key Identifier:
keyid:6B:4F:E3:B4:CB:E8:37:45:87:00:07:32:C1:91:47:99:0F:E4:55:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0_jtMvoN0WHAAcywZFHmQ_kVTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ffc6be-91f7-4021-b366-905af95df5dc/1/k7_lEEghX6zw_9hF1TO4UCnzBPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ffc6be-91f7-4021-b366-905af95df5dc/1/a0_jtMvoN0WHAAcywZFHmQ_kVTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.84.0/22
Signature Algorithm: sha256WithRSAEncryption
51:e5:61:99:ff:04:8c:8c:90:c5:72:9b:3b:0c:d7:ca:11:1c:
55:ef:06:b9:ba:28:b5:b1:fc:87:80:cd:17:cc:3f:00:89:7a:
0b:a5:71:0e:12:2f:77:3a:20:42:6e:31:54:92:cc:b1:ac:43:
56:38:9c:de:e6:3c:b8:98:a0:80:33:ce:ed:fe:0e:7b:61:c6:
9d:0c:14:04:a3:b3:f8:60:18:0e:fa:35:2e:72:a9:e2:58:d7:
5a:2f:42:8d:16:67:d4:36:3d:9a:5d:39:eb:15:98:1e:c5:3b:
a5:f7:47:67:57:d3:4f:66:24:37:46:d6:fc:02:86:a5:b4:62:
53:4f:b7:bf:0f:42:78:00:0f:0a:53:37:1e:32:77:c6:89:fe:
31:35:1e:44:19:81:20:8e:2c:64:32:37:02:1b:67:00:2d:98:
7f:54:2a:10:78:52:9e:a1:6f:34:d5:33:bd:d4:68:fa:00:83:
60:5f:c3:50:65:a6:a2:42:88:6b:37:4c:e4:97:79:8c:19:58:
4b:cf:bb:52:2a:65:5f:2d:85:c6:4a:4a:9f:9b:91:9c:ab:9a:
4d:8b:9c:ea:0f:6e:18:a1:52:30:15:5d:77:fe:41:98:1c:6f:
bb:da:b3:14:45:40:52:82:df:5a:99:a1:32:9d:e5:55:e1:26:
55:dc:37:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:36 2024 by rpki-client on console-fra.rpki-client.org