Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5a2f80-cad4-495e-b6b7-dc3c7c3823db/1/4sZxF1LLxEZrgiblHk9Qoh1aoPE.roa
File: 4sZxF1LLxEZrgiblHk9Qoh1aoPE.roa (raw, json)
Hash identifier: 3mw4kK0nHa4j/i8A239xW/v5dzNQtcmpHvMeBlvT4rs=
Subject key identifier: E2:C6:71:17:52:CB:C4:46:6B:82:26:E5:1E:4F:50:A2:1D:5A:A0:F1
Certificate issuer: /CN=a410dfd9476c92a14a377a11c2683b58fcb21dbd
Certificate serial: 03F41408
Authority key identifier: A4:10:DF:D9:47:6C:92:A1:4A:37:7A:11:C2:68:3B:58:FC:B2:1D:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBDf2UdskqFKN3oRwmg7WPyyHb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5a2f80-cad4-495e-b6b7-dc3c7c3823db/1/4sZxF1LLxEZrgiblHk9Qoh1aoPE.roa
Signing time: Sat 01 Jan 2022 13:58:54 +0000
ROA not before: Sat 01 Jan 2022 13:58:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15924
IP address blocks: 185.204.187.0/24 maxlen: 24
2a10:7cc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66327560 (0x3f41408)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a410dfd9476c92a14a377a11c2683b58fcb21dbd
Validity
Not Before: Jan 1 13:58:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2c6711752cbc4466b8226e51e4f50a21d5aa0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b2:ca:57:4b:28:b0:10:3a:97:3c:02:81:c5:
71:23:fa:b9:30:85:a4:05:3a:1e:e1:89:f7:2c:e4:
b4:d4:14:36:f2:79:09:bc:72:8d:7a:95:be:5f:7a:
20:af:8f:fc:b2:27:bd:60:a5:a8:38:d2:57:8a:21:
42:31:c7:0b:52:d3:f9:71:24:63:b2:08:e0:59:d1:
2c:8a:12:30:3a:2b:1a:bf:d1:d4:5f:7d:1a:7f:f1:
47:a2:78:8a:42:9d:63:da:a0:14:30:ab:43:6e:31:
07:bf:31:11:98:3e:1f:7f:56:3c:a9:e1:77:56:bb:
a1:29:a1:4e:68:cb:18:9c:db:42:ec:a4:0c:30:d9:
f9:40:7e:7c:7f:56:a8:f6:5f:c2:c2:65:07:14:ad:
7a:f4:9e:1c:69:40:96:17:fc:26:0c:db:dd:d3:63:
fc:a4:a4:62:10:ea:70:97:60:79:e2:0a:48:df:35:
e5:97:66:5a:58:97:3c:25:83:c8:fb:ad:d5:15:d5:
e5:c2:b8:71:77:e0:6c:f3:45:2b:28:d3:dc:41:e4:
f2:dc:b0:e6:65:dc:69:15:c4:15:c2:a4:8a:ef:e9:
91:bc:67:27:15:94:1a:72:c9:85:0c:22:7b:e9:60:
85:31:8a:0c:e7:a1:dc:58:b1:2d:e5:1e:76:4b:a9:
2d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C6:71:17:52:CB:C4:46:6B:82:26:E5:1E:4F:50:A2:1D:5A:A0:F1
X509v3 Authority Key Identifier:
keyid:A4:10:DF:D9:47:6C:92:A1:4A:37:7A:11:C2:68:3B:58:FC:B2:1D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBDf2UdskqFKN3oRwmg7WPyyHb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5a2f80-cad4-495e-b6b7-dc3c7c3823db/1/4sZxF1LLxEZrgiblHk9Qoh1aoPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5a2f80-cad4-495e-b6b7-dc3c7c3823db/1/pBDf2UdskqFKN3oRwmg7WPyyHb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.187.0/24
IPv6:
2a10:7cc0::/29
Signature Algorithm: sha256WithRSAEncryption
63:57:d6:74:dc:63:f1:a2:9c:94:b8:4a:79:17:54:a3:d3:47:
71:61:66:fe:bd:2d:26:77:94:e1:a0:ac:86:8f:7f:90:17:9e:
38:bc:17:4a:41:09:9a:04:f2:ef:5c:a9:a6:68:06:55:6a:4d:
a0:e0:f9:c7:6d:a3:65:d2:c5:49:81:2f:dd:fc:cd:12:4e:26:
a7:b0:cb:37:09:f4:36:b3:bc:34:87:c2:33:25:9e:17:43:de:
c7:cd:33:71:a7:94:83:bc:39:22:d0:78:db:03:11:c3:a6:8e:
81:92:25:f7:d9:e6:b7:2a:5a:c0:cd:5a:8a:c4:08:18:83:b1:
4a:ae:5a:5f:38:29:ee:5e:a5:12:e6:59:b5:3f:88:93:a9:b4:
0b:7e:14:01:2e:f8:20:41:de:d3:bb:98:d6:9d:99:ec:2c:37:
17:59:63:07:cf:c4:be:f5:b0:56:58:2b:2f:ff:4e:f2:e4:56:
a7:1d:f8:4d:84:d8:a8:90:0d:6e:c0:1c:b7:d5:b3:ae:03:63:
ee:2d:09:a0:1d:c1:46:2a:d8:b9:c0:27:18:a5:d2:2a:fd:5e:
96:a3:3e:6b:28:16:c8:7b:93:95:d0:32:78:0e:f3:85:3d:10:
b1:d4:6d:fb:3a:62:ef:bb:b1:f8:27:1b:90:47:3f:c0:ac:ff:
a8:0d:72:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:04 2024 by rpki-client on console-fra.rpki-client.org