Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c27ab1-18ef-428a-bb21-3a32d7b50728/1/obeLWt6R4yl1EkYxwnkf_wA0c6E.roa
File: obeLWt6R4yl1EkYxwnkf_wA0c6E.roa (raw, json)
Hash identifier: 0GQzhrW5HgWaHd30mUMH3pahJoJRddiExEmhMfcGFTs=
Subject key identifier: A1:B7:8B:5A:DE:91:E3:29:75:12:46:31:C2:79:1F:FF:00:34:73:A1
Certificate issuer: /CN=b6af5c01ecf4cec01a29f29ffce81ca22b6d829f
Certificate serial: 01856FDDD16D1FAC16BC54F5FE916A5A9730
Authority key identifier: B6:AF:5C:01:EC:F4:CE:C0:1A:29:F2:9F:FC:E8:1C:A2:2B:6D:82:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tq9cAez0zsAaKfKf_Ogcoittgp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c27ab1-18ef-428a-bb21-3a32d7b50728/1/obeLWt6R4yl1EkYxwnkf_wA0c6E.roa
Signing time: Mon 02 Jan 2023 00:24:46 +0000
ROA not before: Mon 02 Jan 2023 00:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57103
IP address blocks: 185.119.200.0/22 maxlen: 24
91.229.172.0/24 maxlen: 24
2a06:8bc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:dd:d1:6d:1f:ac:16:bc:54:f5:fe:91:6a:5a:97:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6af5c01ecf4cec01a29f29ffce81ca22b6d829f
Validity
Not Before: Jan 2 00:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1b78b5ade91e32975124631c2791fff003473a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:01:3c:25:a1:46:bb:b7:da:9d:ee:f2:b2:97:
9a:2b:ee:a5:a5:ea:5e:cb:18:1f:b5:e7:e2:97:83:
16:bc:4a:52:14:08:fd:af:af:2a:c6:70:7b:63:f3:
d5:eb:3b:62:5a:52:68:17:ed:22:d5:8f:7f:78:34:
e4:bd:c1:9c:51:8f:be:ec:58:9c:c5:a2:65:70:9c:
28:31:95:79:56:ab:74:df:65:39:0b:58:98:d1:e6:
f0:7e:71:51:0f:26:be:2e:96:f3:c4:24:34:b7:70:
a9:3b:5a:07:08:10:25:3c:b9:48:2b:af:97:d9:82:
13:31:36:d5:ac:ec:8e:78:4e:98:b5:d0:d9:db:b2:
f0:90:e0:e9:81:dd:87:95:78:ca:f8:6a:c4:8f:67:
59:26:f2:d2:58:18:f3:be:ca:0d:6e:e0:44:22:41:
76:f3:a2:e6:c9:c3:44:d2:a0:de:11:39:7f:d4:7b:
e0:49:68:85:f8:dd:c9:6d:bb:64:8f:96:b6:78:94:
f5:94:ce:5a:6a:8d:d1:5b:4e:90:33:ef:cd:29:2e:
f6:3c:cb:eb:7a:a2:6a:6c:82:58:cf:6d:42:95:07:
c7:d0:84:62:a6:0a:d6:11:29:d6:70:3f:aa:46:6d:
e2:36:a4:fb:1b:66:cd:6c:91:f3:bf:2c:d1:f4:7c:
02:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B7:8B:5A:DE:91:E3:29:75:12:46:31:C2:79:1F:FF:00:34:73:A1
X509v3 Authority Key Identifier:
keyid:B6:AF:5C:01:EC:F4:CE:C0:1A:29:F2:9F:FC:E8:1C:A2:2B:6D:82:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tq9cAez0zsAaKfKf_Ogcoittgp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c27ab1-18ef-428a-bb21-3a32d7b50728/1/obeLWt6R4yl1EkYxwnkf_wA0c6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c27ab1-18ef-428a-bb21-3a32d7b50728/1/tq9cAez0zsAaKfKf_Ogcoittgp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.172.0/24
185.119.200.0/22
IPv6:
2a06:8bc0::/29
Signature Algorithm: sha256WithRSAEncryption
a6:0b:b6:ff:1e:59:df:31:1e:83:6a:d4:46:8a:43:91:72:10:
18:dc:46:5b:0c:27:7c:22:22:91:47:ac:f9:7f:1d:6b:e8:f1:
81:62:e5:ae:80:6e:af:da:39:92:e2:fa:fa:d7:20:86:61:82:
41:35:9a:0a:13:eb:e0:bf:4a:2d:dd:69:e1:82:1e:92:1b:20:
3c:db:63:e5:6c:4a:16:69:2d:e8:4c:cf:dd:08:0b:48:7c:6d:
7b:34:b0:da:8d:c0:c2:6b:3d:66:b9:2f:49:24:7a:c1:be:58:
c2:4c:cc:6c:2e:c6:31:1e:7e:59:82:62:7b:7b:43:52:7f:c7:
c7:c7:07:16:9f:c5:10:9f:51:02:1a:e6:07:d6:da:10:17:eb:
a9:99:ac:34:bc:7f:3d:19:2c:4d:c0:7d:79:26:cd:b6:aa:3c:
5e:2f:30:86:69:de:95:3a:d5:21:ad:ac:70:ac:54:36:0e:31:
03:cf:b6:e5:dd:7a:af:d2:7f:78:fa:15:db:df:94:37:d3:39:
01:51:8c:1b:02:96:fe:a2:78:e6:d9:34:7b:00:cb:e8:93:24:
6b:66:97:92:b6:80:55:6f:1f:f5:0d:a6:90:8a:c7:fb:27:7b:
23:17:09:c0:78:5f:6d:62:99:f3:bc:49:a7:2f:2b:0f:f4:e8:
6f:37:ec:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:36 2024 by rpki-client on console-fra.rpki-client.org