Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c27ab1-18ef-428a-bb21-3a32d7b50728/1/raG2TCcCk5ty8iBzWSvQ6IAhZbY.roa
File: raG2TCcCk5ty8iBzWSvQ6IAhZbY.roa (raw, json)
Hash identifier: lGeTPyVNZRIyuabCSMVNl8Emd++yI7NYB5C5shtNX3s=
Subject key identifier: AD:A1:B6:4C:27:02:93:9B:72:F2:20:73:59:2B:D0:E8:80:21:65:B6
Certificate issuer: /CN=b6af5c01ecf4cec01a29f29ffce81ca22b6d829f
Certificate serial: 125E3739
Authority key identifier: B6:AF:5C:01:EC:F4:CE:C0:1A:29:F2:9F:FC:E8:1C:A2:2B:6D:82:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tq9cAez0zsAaKfKf_Ogcoittgp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c27ab1-18ef-428a-bb21-3a32d7b50728/1/raG2TCcCk5ty8iBzWSvQ6IAhZbY.roa
Signing time: Sat 01 Jan 2022 14:05:38 +0000
ROA not before: Sat 01 Jan 2022 14:05:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57103
IP address blocks: 185.119.200.0/22 maxlen: 24
91.229.172.0/24 maxlen: 24
2a06:8bc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308164409 (0x125e3739)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6af5c01ecf4cec01a29f29ffce81ca22b6d829f
Validity
Not Before: Jan 1 14:05:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ada1b64c2702939b72f22073592bd0e8802165b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a9:2b:21:44:1f:03:8a:b7:fa:97:fd:4b:2b:
ed:ef:12:ad:8b:80:ac:ca:ea:d9:84:80:61:af:95:
69:82:34:18:e5:ca:cf:f2:02:1f:0a:b5:f6:35:42:
30:75:2b:78:0c:b6:53:2b:ac:2b:dc:b9:f7:a7:66:
cd:7c:03:d9:b6:22:3b:ec:43:f7:d0:6d:15:52:53:
f5:a0:8c:0b:a2:a2:bf:f4:84:67:9d:60:64:c9:ea:
d4:5f:8a:cf:7d:1b:ea:18:e9:30:04:d8:aa:a9:d9:
84:b0:54:44:67:1b:76:53:74:12:3d:a8:64:f3:d6:
a8:0c:55:9a:3c:7f:cd:24:17:13:74:68:9d:82:cd:
be:34:1f:c7:fc:d2:25:cb:fd:b4:04:c1:7c:87:14:
a9:02:22:e4:46:6a:1b:e6:0e:24:5e:7e:4a:d4:ed:
ae:cf:17:33:dc:b1:73:be:1d:63:dc:05:1f:41:ad:
b6:e6:18:f7:b6:f0:1a:4a:d6:69:12:6b:70:d8:ed:
26:1b:43:ad:e2:3c:85:72:1e:d2:27:c6:9c:81:3b:
80:58:8b:46:26:65:ad:a0:e5:a2:ae:fb:00:0d:a6:
d5:93:30:26:f8:13:04:6e:ae:e4:ea:6d:b8:1d:b4:
9f:37:12:9a:a9:49:d8:25:3a:31:c4:11:b5:8d:91:
96:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A1:B6:4C:27:02:93:9B:72:F2:20:73:59:2B:D0:E8:80:21:65:B6
X509v3 Authority Key Identifier:
keyid:B6:AF:5C:01:EC:F4:CE:C0:1A:29:F2:9F:FC:E8:1C:A2:2B:6D:82:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tq9cAez0zsAaKfKf_Ogcoittgp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c27ab1-18ef-428a-bb21-3a32d7b50728/1/raG2TCcCk5ty8iBzWSvQ6IAhZbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c27ab1-18ef-428a-bb21-3a32d7b50728/1/tq9cAez0zsAaKfKf_Ogcoittgp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.172.0/24
185.119.200.0/22
IPv6:
2a06:8bc0::/29
Signature Algorithm: sha256WithRSAEncryption
11:9e:79:80:a4:2f:36:e0:c9:53:fd:b8:46:9f:fc:a0:b3:ed:
5a:7a:2c:1c:4b:c9:9b:03:ef:aa:d5:7f:a5:db:a2:6b:ce:54:
5e:30:eb:65:cc:4e:5a:1e:85:24:5a:5b:a0:a5:57:ac:e3:ac:
c8:24:f7:66:39:28:2b:06:e5:ef:21:78:e2:a2:72:f9:de:ed:
7d:d3:a4:05:d6:c9:b8:15:6b:23:0a:ba:1a:83:0b:38:1b:87:
4c:61:35:15:b8:aa:b2:b1:51:d9:6f:0f:ae:87:44:70:b4:d9:
f5:db:92:c0:55:ab:49:92:30:46:ee:fd:bb:a1:bb:0e:13:a6:
b2:40:60:cf:b2:d0:79:78:b6:76:de:b3:d6:7f:a4:7c:a5:8a:
a5:82:0f:ba:ff:48:a5:30:17:88:37:05:4f:c4:f7:f1:2c:cc:
57:94:d1:ed:bd:47:d5:59:5c:ff:95:76:cd:6e:35:5b:75:80:
e8:c0:71:57:e9:12:2a:ac:78:90:08:09:81:76:68:15:39:c7:
b1:b1:80:a5:9a:91:b3:2c:b4:89:3e:b6:03:ed:af:b4:e3:b5:
ad:0e:52:44:1f:ad:9b:44:52:73:55:45:f2:be:67:da:93:ff:
33:b7:4f:eb:be:f0:0f:eb:32:51:10:1a:ab:c6:98:1c:98:8c:
69:04:72:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:36 2024 by rpki-client on console-fra.rpki-client.org