Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/ETaPcXlJT1sSMY5QHtc6sMJd8zg.roa
File: ETaPcXlJT1sSMY5QHtc6sMJd8zg.roa (raw, json)
Hash identifier: mBExkm9PeUzg6qVRadngN5I+D/ZgdXrlUlUA0CqtFGs=
Subject key identifier: 11:36:8F:71:79:49:4F:5B:12:31:8E:50:1E:D7:3A:B0:C2:5D:F3:38
Certificate issuer: /CN=6ebeb83de2a594515eebd77fe58801e6a89fce64
Certificate serial: 01846047B76136F37B2EC1966657F7414BE3
Authority key identifier: 6E:BE:B8:3D:E2:A5:94:51:5E:EB:D7:7F:E5:88:01:E6:A8:9F:CE:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/br64PeKllFFe69d_5YgB5qifzmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/ETaPcXlJT1sSMY5QHtc6sMJd8zg.roa
Signing time: Thu 10 Nov 2022 06:43:43 +0000
ROA not before: Thu 10 Nov 2022 06:43:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207967
IP address blocks: 185.234.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:60:47:b7:61:36:f3:7b:2e:c1:96:66:57:f7:41:4b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ebeb83de2a594515eebd77fe58801e6a89fce64
Validity
Not Before: Nov 10 06:43:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11368f7179494f5b12318e501ed73ab0c25df338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d2:4a:b1:c3:0b:d7:ff:f4:75:e3:ae:a1:67:
c4:fa:29:44:0d:53:78:14:e7:ae:31:7e:19:3a:7d:
3f:14:17:be:45:ef:94:c7:ac:2e:9b:5e:36:65:55:
ea:86:f3:9f:14:0d:32:1b:78:e9:44:bf:1c:9e:7b:
1b:48:ed:48:7d:2d:45:10:1e:bb:84:a5:2a:f8:17:
49:d5:07:85:b7:df:90:11:e5:21:c9:f8:e4:bd:52:
bb:df:4e:1c:41:ed:14:a3:e7:62:e9:a2:9e:f8:2d:
b7:39:70:c5:d2:85:98:62:f2:a0:aa:76:ae:0f:43:
d3:e8:3b:3c:c8:82:71:3d:4c:cc:44:24:2b:ec:3c:
21:1c:76:bf:97:1e:32:ce:32:b1:27:12:4b:ef:e4:
62:da:d5:eb:b4:ad:aa:a6:be:8d:60:a8:3e:a8:f9:
ae:5a:af:f0:be:df:3f:5e:27:8d:ee:18:b1:da:10:
12:a8:ff:16:c9:92:80:44:b9:2d:22:ba:61:35:e8:
81:da:67:12:b0:10:1a:c6:ad:58:66:69:10:29:da:
53:fe:b8:4a:f9:9c:ab:7e:84:df:a4:50:22:cb:83:
9c:ec:d3:b9:02:ee:9f:d4:b7:84:16:72:64:78:62:
5b:c0:8e:34:f9:4f:bb:56:c7:0e:0c:e2:3e:40:0c:
91:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:36:8F:71:79:49:4F:5B:12:31:8E:50:1E:D7:3A:B0:C2:5D:F3:38
X509v3 Authority Key Identifier:
keyid:6E:BE:B8:3D:E2:A5:94:51:5E:EB:D7:7F:E5:88:01:E6:A8:9F:CE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/br64PeKllFFe69d_5YgB5qifzmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/ETaPcXlJT1sSMY5QHtc6sMJd8zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/br64PeKllFFe69d_5YgB5qifzmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.10.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:83:c6:04:8d:35:84:b0:c5:92:da:5d:88:5d:28:30:8d:c9:
b6:d9:f7:cd:ff:ed:c5:ad:c4:c2:4a:59:97:08:89:35:18:27:
d3:ae:12:90:3c:00:ef:fc:0e:ca:15:cb:94:fa:6c:05:2b:93:
d3:a5:12:3f:00:46:e7:ab:f8:20:9c:b1:65:69:7b:c0:07:60:
16:ff:4c:19:d5:7f:2a:47:bf:51:7a:3f:ec:09:fb:f6:a4:44:
0d:8e:dc:ec:8f:7e:4c:47:a2:b7:ed:31:5a:88:ad:0e:82:65:
44:51:de:4a:3b:41:b8:b1:30:11:ca:45:9e:c9:12:51:e2:9e:
39:9f:1a:04:c3:b4:2b:87:ed:ad:2d:f3:16:be:01:0c:b8:ef:
bc:db:94:f7:b5:f8:ed:9b:63:da:5c:16:27:5c:48:cd:b0:39:
4b:84:20:20:ff:7d:0b:10:52:df:c3:85:2d:87:03:88:7e:44:
72:ad:9d:67:ed:d8:c8:83:a0:cb:58:4c:cb:a9:86:c5:8c:c6:
92:be:2c:e6:72:bd:bd:6c:45:6a:25:91:ff:26:a5:f4:47:b1:
26:71:29:40:b5:48:b7:cf:4d:0d:fc:d0:ca:5d:f9:01:24:b7:
37:9d:94:78:e5:b5:21:89:58:bb:c6:54:08:1f:cc:b5:ee:b0:
10:1f:09:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:09 2024 by rpki-client on console-ams.rpki-client.org