Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/9aa25b-5d1f-43b8-9f89-ccb5e39b208b/1/G-OKdU-sgqaX8VPHJBVE2HRim-Y.roa
File: G-OKdU-sgqaX8VPHJBVE2HRim-Y.roa (raw, json)
Hash identifier: 6M0tgcl5+7IePioTXv1LiefO/0I0mmYOFtQGfe5thKQ=
Subject key identifier: 1B:E3:8A:75:4F:AC:82:A6:97:F1:53:C7:24:15:44:D8:74:62:9B:E6
Certificate issuer: /CN=fb05135f037d25d716d3b721c1ab721366faf905
Certificate serial: 0682AC9D
Authority key identifier: FB:05:13:5F:03:7D:25:D7:16:D3:B7:21:C1:AB:72:13:66:FA:F9:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wUTXwN9JdcW07chwatyE2b6-QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/9aa25b-5d1f-43b8-9f89-ccb5e39b208b/1/G-OKdU-sgqaX8VPHJBVE2HRim-Y.roa
Signing time: Sat 01 Jan 2022 02:54:25 +0000
ROA not before: Sat 01 Jan 2022 02:54:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207540
IP address blocks: 185.216.138.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109227165 (0x682ac9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb05135f037d25d716d3b721c1ab721366faf905
Validity
Not Before: Jan 1 02:54:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1be38a754fac82a697f153c7241544d874629be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e6:3d:7f:e8:f2:d4:48:4a:cd:0c:2e:a6:67:
0a:20:99:cf:de:f4:23:b4:01:75:0a:56:ae:a1:d6:
bb:9b:12:db:ae:a8:d7:2d:4e:b6:c9:7f:78:36:45:
2a:98:ce:51:e7:20:37:e5:98:11:d8:ea:ab:87:20:
7a:b5:78:aa:6b:ac:a3:05:ee:3f:5f:80:b8:e8:9c:
dd:b5:67:7c:8b:82:89:28:4f:54:73:45:15:d6:b5:
0a:27:12:3c:7b:3a:88:6a:56:f4:e9:4a:8c:db:28:
3e:87:09:d3:1f:03:40:10:16:20:70:7a:70:96:6d:
78:27:dc:29:3f:96:6a:08:cd:d6:c2:11:15:d7:43:
12:e6:ef:a4:d1:b4:10:88:4e:db:41:f7:90:65:ca:
ce:f0:21:cb:fd:61:36:22:88:30:f1:b0:2a:89:0d:
d3:fb:d2:54:8a:8e:8e:53:eb:56:ad:b2:5f:04:83:
c2:84:ac:74:04:00:35:78:91:4a:bf:33:aa:49:cf:
33:da:19:96:68:83:a3:45:81:84:f3:15:6a:58:8a:
b1:0a:af:1c:1d:49:c2:8a:93:d1:a1:4c:ef:2c:c2:
88:2d:11:e1:fa:e6:20:b1:c7:98:2f:f6:17:88:2f:
e4:16:83:9c:f5:a0:36:19:44:13:bd:ac:36:03:49:
a7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E3:8A:75:4F:AC:82:A6:97:F1:53:C7:24:15:44:D8:74:62:9B:E6
X509v3 Authority Key Identifier:
keyid:FB:05:13:5F:03:7D:25:D7:16:D3:B7:21:C1:AB:72:13:66:FA:F9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wUTXwN9JdcW07chwatyE2b6-QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9aa25b-5d1f-43b8-9f89-ccb5e39b208b/1/G-OKdU-sgqaX8VPHJBVE2HRim-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9aa25b-5d1f-43b8-9f89-ccb5e39b208b/1/1-wUTXwN9JdcW07chwatyE2b6-QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.138.0/23
Signature Algorithm: sha256WithRSAEncryption
66:70:f2:fc:d8:e6:98:ce:cb:33:53:3b:2f:d7:6b:48:cb:50:
82:08:7b:fa:3e:96:68:66:20:53:b3:5f:22:78:fd:1f:77:ad:
e3:1a:10:ed:75:e1:a4:9c:c8:cd:da:d1:e2:6b:dc:87:b3:4f:
a0:67:dd:95:5b:7f:32:bb:0c:78:b9:2c:16:b1:17:96:2f:66:
5b:dc:c1:42:77:09:f4:81:e0:92:22:a1:f8:0e:aa:3b:cc:ff:
5b:86:1c:5e:ca:01:09:81:15:4d:04:f4:84:d5:b3:58:5b:24:
f0:23:3f:89:9f:59:fa:d2:9d:e9:2b:09:c1:4f:bd:c0:0a:ee:
03:19:7b:a1:0e:0c:1f:35:f2:3a:42:2e:09:9b:ba:c6:34:3f:
99:1d:fa:89:a1:79:ef:b7:7e:3f:2b:81:98:26:5a:4a:39:81:
57:7b:2d:3e:83:90:eb:83:6f:23:d1:c5:08:07:96:35:4d:5b:
8f:48:de:a3:29:1b:fb:9d:f0:0c:2b:77:15:96:6c:a7:6d:43:
02:54:9d:81:5e:af:69:61:b8:fd:79:ad:23:c4:cd:e6:e5:f0:
90:53:9b:7b:84:83:55:45:8c:4d:bc:4f:48:b5:35:a9:44:71:
9a:35:ae:d4:6c:f0:2a:c6:26:01:b0:80:6f:5a:0e:4e:db:69:
23:9b:41:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:52 2024 by rpki-client on console-fra.rpki-client.org