Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/NdRb6FevI1wKxBawwSVmJ7hulks.roa
File: NdRb6FevI1wKxBawwSVmJ7hulks.roa (raw, json)
Hash identifier: cC6rO0T4n4ATNflRC7CeCFZdvf6hgT7W0tbaGGFQhrQ=
Subject key identifier: 35:D4:5B:E8:57:AF:23:5C:0A:C4:16:B0:C1:25:66:27:B8:6E:96:4B
Certificate issuer: /CN=6ebeb83de2a594515eebd77fe58801e6a89fce64
Certificate serial: 01860C30384E0700AEFFFE5171D823A445C3
Authority key identifier: 6E:BE:B8:3D:E2:A5:94:51:5E:EB:D7:7F:E5:88:01:E6:A8:9F:CE:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/br64PeKllFFe69d_5YgB5qifzmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/NdRb6FevI1wKxBawwSVmJ7hulks.roa
Signing time: Wed 01 Feb 2023 08:55:32 +0000
ROA not before: Wed 01 Feb 2023 08:55:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 185.234.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0c:30:38:4e:07:00:ae:ff:fe:51:71:d8:23:a4:45:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ebeb83de2a594515eebd77fe58801e6a89fce64
Validity
Not Before: Feb 1 08:55:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35d45be857af235c0ac416b0c1256627b86e964b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6f:69:56:10:7f:7b:f6:31:e2:09:2b:aa:d7:
70:88:6f:c7:61:10:44:56:b3:57:bc:97:41:b7:e9:
d3:84:45:a9:9b:97:5d:57:48:4e:a5:b5:a5:4c:0f:
ec:5e:b9:d2:bf:0f:d4:47:be:02:36:cf:1c:e9:8c:
0c:01:0a:32:c8:9e:b6:0b:74:0d:27:fb:1e:7e:54:
04:e6:24:c2:0e:ff:d6:a8:97:14:10:ad:24:43:02:
16:e2:71:07:a4:93:ac:26:bb:1a:1d:7f:e5:f0:69:
68:0c:64:ce:c5:ea:6b:79:24:32:ba:2a:18:45:53:
ad:31:63:41:74:c2:08:30:a1:f8:58:cd:24:18:59:
be:c7:0b:2b:d6:90:cc:53:40:c8:a1:7d:63:1b:26:
93:7e:ed:64:9f:49:ce:ac:fb:6e:52:5f:9a:15:35:
88:79:63:f2:d9:dd:d1:97:2e:68:a5:bb:4a:3d:85:
92:b3:72:a9:ce:ff:ab:f8:e9:63:1f:6e:21:66:2a:
3b:11:cf:3d:b1:bd:6e:eb:34:83:86:ab:2a:53:5a:
50:c2:2c:bc:91:86:de:47:96:ea:e8:3b:f9:70:8b:
00:3b:e6:ba:4d:44:3a:e3:b1:0d:53:d5:81:74:e8:
f9:60:2f:e6:ec:dc:9f:e9:7a:3f:31:76:69:67:cc:
eb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D4:5B:E8:57:AF:23:5C:0A:C4:16:B0:C1:25:66:27:B8:6E:96:4B
X509v3 Authority Key Identifier:
keyid:6E:BE:B8:3D:E2:A5:94:51:5E:EB:D7:7F:E5:88:01:E6:A8:9F:CE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/br64PeKllFFe69d_5YgB5qifzmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/NdRb6FevI1wKxBawwSVmJ7hulks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/br64PeKllFFe69d_5YgB5qifzmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.10.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:be:4e:9d:27:96:4b:76:f5:97:ed:b5:50:cd:c3:68:66:08:
47:06:68:65:b2:4f:3c:f5:9e:1e:9a:4f:17:8b:4b:8a:df:f2:
b9:44:9a:42:e1:81:57:86:f2:85:cc:ee:fb:36:49:46:be:b3:
fd:0e:0c:94:23:3d:64:e4:26:21:92:88:5c:9b:a6:9b:22:9b:
ff:d3:64:82:a2:2f:63:fd:e8:67:c2:eb:03:6a:a5:b8:df:c0:
9f:a0:90:bd:ca:86:cf:e7:44:ba:1e:f8:45:06:ae:81:b5:8b:
4a:a3:52:25:5b:7d:bc:e8:75:1e:00:6a:e0:c1:ef:09:44:2f:
66:69:fb:f3:9f:dd:a8:1e:90:e2:29:d5:9c:d9:06:73:43:a8:
ca:a6:f6:40:42:7c:4f:46:72:3c:22:11:99:64:0e:80:83:99:
0a:cc:a9:be:a2:6e:eb:74:bb:25:8d:e1:a2:35:02:82:d8:d5:
b9:10:ee:85:bc:bd:c8:3f:c5:c9:b3:e5:5e:34:f7:95:c0:9e:
4e:23:8b:1c:8f:e9:3b:c4:55:68:80:ef:ce:f4:b0:c5:77:04:
7e:3a:84:ef:bc:55:d0:81:81:19:1a:9c:d2:18:f7:15:94:fe:
94:30:85:18:18:2f:47:d8:c8:29:ff:e9:52:ca:01:1a:85:41:
5f:50:10:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:09 2024 by rpki-client on console-ams.rpki-client.org