Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c059d9-0d30-40b3-814b-491a0b5d223f/1/xg6VxlJ3Wt4Rg8xfLmhw78VmBSw.roa
File: xg6VxlJ3Wt4Rg8xfLmhw78VmBSw.roa (raw, json)
Hash identifier: UY24C2dpvVI3Wt06ZgiWJeP6j8/8tLxZ+Bid0Mw/4zk=
Subject key identifier: C6:0E:95:C6:52:77:5A:DE:11:83:CC:5F:2E:68:70:EF:C5:66:05:2C
Certificate issuer: /CN=28642ab1790b7f5f359068e9fbb72641c5413079
Certificate serial: 018393D31734A96A6D4CB8815AF26358A7D7
Authority key identifier: 28:64:2A:B1:79:0B:7F:5F:35:90:68:E9:FB:B7:26:41:C5:41:30:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGQqsXkLf181kGjp-7cmQcVBMHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c059d9-0d30-40b3-814b-491a0b5d223f/1/xg6VxlJ3Wt4Rg8xfLmhw78VmBSw.roa
Signing time: Sat 01 Oct 2022 13:53:48 +0000
ROA not before: Sat 01 Oct 2022 13:53:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3561
IP address blocks: 185.218.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:93:d3:17:34:a9:6a:6d:4c:b8:81:5a:f2:63:58:a7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28642ab1790b7f5f359068e9fbb72641c5413079
Validity
Not Before: Oct 1 13:53:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c60e95c652775ade1183cc5f2e6870efc566052c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b7:f1:91:c4:b1:58:43:a6:a2:97:f1:e7:38:
e5:ed:11:d2:ef:bc:59:30:db:8e:e5:60:42:58:f7:
2f:b1:f9:0f:e2:39:bc:7f:86:68:7b:d9:d4:3d:63:
25:f5:38:c3:c0:1e:c4:0c:f9:d4:e8:46:1b:5a:0e:
5f:1b:b7:e2:19:d4:2c:05:f7:03:24:d1:88:3c:51:
57:00:fb:a5:6d:dc:61:fa:46:0b:02:79:2b:ea:cf:
67:74:14:dd:9b:c2:93:db:3d:90:46:0b:51:cf:ce:
97:94:15:e2:5f:97:c7:5d:be:21:18:b1:0c:11:76:
8b:40:9a:9e:ca:e2:e6:df:28:62:dd:7e:ef:89:59:
42:3a:24:74:4f:4d:0f:f4:8f:8d:02:81:8b:66:69:
a7:1a:bb:ec:61:72:24:ff:47:34:c1:d9:32:53:7b:
96:2a:c5:00:df:da:22:fb:78:34:5c:a9:f3:0b:55:
77:90:3b:d7:ef:46:5f:de:0d:7b:1c:38:49:fe:79:
04:59:0d:a8:89:83:e3:1f:7b:7b:f7:e9:f3:62:ba:
f0:e8:fa:77:0d:1e:f8:92:c0:03:f0:13:57:7f:e8:
89:61:c5:38:cc:3a:2d:ff:82:39:7a:a4:62:85:59:
3f:74:e4:89:6d:13:78:1e:b6:bf:8a:31:d2:00:6b:
42:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0E:95:C6:52:77:5A:DE:11:83:CC:5F:2E:68:70:EF:C5:66:05:2C
X509v3 Authority Key Identifier:
keyid:28:64:2A:B1:79:0B:7F:5F:35:90:68:E9:FB:B7:26:41:C5:41:30:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGQqsXkLf181kGjp-7cmQcVBMHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c059d9-0d30-40b3-814b-491a0b5d223f/1/xg6VxlJ3Wt4Rg8xfLmhw78VmBSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c059d9-0d30-40b3-814b-491a0b5d223f/1/KGQqsXkLf181kGjp-7cmQcVBMHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.184.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:0e:f5:b5:04:85:18:84:e9:75:e5:b9:91:10:77:ec:03:46:
8e:5a:a5:58:d3:4e:2a:b0:a7:54:36:2f:d2:a7:1c:82:33:4d:
22:e8:64:e1:d9:0a:be:48:7f:2b:1a:84:67:b9:32:a9:18:2d:
85:aa:4b:d1:be:93:ba:cc:80:2f:c9:85:1b:a4:2c:dd:dd:34:
6e:37:78:97:e2:70:a1:13:47:6f:79:20:3a:cb:58:d1:cf:ee:
e9:1e:fc:ed:ed:9c:02:65:5e:8c:7b:11:62:da:18:eb:c4:4f:
b7:80:bb:c0:a7:df:04:23:9b:45:49:fa:e8:5d:66:4f:b7:ba:
3c:ce:61:f8:80:db:bf:1e:fb:22:ba:3d:59:dc:62:2c:bf:b7:
81:4e:07:0b:a9:4e:58:29:f7:2c:fe:f6:bd:87:6c:9d:5a:f7:
a0:7c:94:9e:ca:a9:d5:35:a8:b3:96:af:2b:1c:6a:ef:ce:15:
d7:00:2b:17:67:87:c5:35:44:10:00:7d:97:a6:62:33:00:12:
81:9e:7d:a9:ee:50:cb:10:fb:f2:2c:bf:32:98:fd:55:63:21:
d5:5f:46:28:83:97:85:31:0f:60:0b:cd:04:66:4e:7b:7f:9d:
48:af:e6:e6:64:d7:89:d6:76:35:64:77:4a:0e:e3:e6:db:7a:
27:fc:62:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:34 2025 by rpki-client