Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/l3t8tVX1YXm96dHmxye3_wZE1FM.roa
File: l3t8tVX1YXm96dHmxye3_wZE1FM.roa (raw, json)
Hash identifier: AustzPqGJTGxYm4OwTL3FftewimfXF5cK68cYKEE1Cg=
Subject key identifier: 97:7B:7C:B5:55:F5:61:79:BD:E9:D1:E6:C7:27:B7:FF:06:44:D4:53
Certificate issuer: /CN=6ebeb83de2a594515eebd77fe58801e6a89fce64
Certificate serial: 010D582C
Authority key identifier: 6E:BE:B8:3D:E2:A5:94:51:5E:EB:D7:7F:E5:88:01:E6:A8:9F:CE:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/br64PeKllFFe69d_5YgB5qifzmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/l3t8tVX1YXm96dHmxye3_wZE1FM.roa
Signing time: Sat 04 Jun 2022 20:34:20 +0000
ROA not before: Sat 04 Jun 2022 20:34:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207967
IP address blocks: 185.234.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17651756 (0x10d582c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ebeb83de2a594515eebd77fe58801e6a89fce64
Validity
Not Before: Jun 4 20:34:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=977b7cb555f56179bde9d1e6c727b7ff0644d453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:58:b7:72:53:e4:33:70:fc:ee:66:3c:d2:22:
ce:65:f8:51:98:cb:15:7f:c1:a9:06:39:88:d4:bb:
d9:b7:0b:a7:e6:3d:83:0e:05:81:68:81:00:bf:9d:
87:86:21:bc:e1:d8:e0:f2:7f:f5:e9:84:b4:4c:d5:
f2:5c:78:df:ac:41:76:c1:65:77:05:f8:6c:31:0d:
14:b9:3a:93:d4:11:11:c8:93:56:ea:46:0b:b6:28:
9b:8a:44:81:76:4d:27:b0:9e:be:68:96:cf:ce:1b:
a3:d8:6d:9f:c5:dc:3d:61:cf:f9:f9:1e:a3:08:94:
f5:d9:6c:d4:95:81:10:ef:21:f0:de:eb:54:a0:a3:
ea:be:41:47:1a:c9:77:55:86:f1:64:9f:51:61:94:
ef:4c:f7:a3:b7:b8:1b:71:26:cc:31:34:25:11:a1:
ea:d2:7e:d4:8e:20:a4:a3:a6:a2:f8:36:b6:45:94:
33:14:b6:59:c9:49:43:38:2b:b6:10:37:8e:93:72:
79:65:4f:d9:ed:be:1a:27:33:b6:55:4f:31:ff:d0:
f7:20:4e:7c:d4:b4:8c:1e:6d:f3:88:02:2f:44:5b:
88:f3:b7:2c:56:bf:56:0c:46:cd:65:aa:47:e9:68:
b2:e7:d0:f8:59:3c:32:48:af:0a:62:f7:ca:3f:2b:
0d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7B:7C:B5:55:F5:61:79:BD:E9:D1:E6:C7:27:B7:FF:06:44:D4:53
X509v3 Authority Key Identifier:
keyid:6E:BE:B8:3D:E2:A5:94:51:5E:EB:D7:7F:E5:88:01:E6:A8:9F:CE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/br64PeKllFFe69d_5YgB5qifzmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/l3t8tVX1YXm96dHmxye3_wZE1FM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/br64PeKllFFe69d_5YgB5qifzmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.10.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:d9:51:41:2d:83:c5:3b:0d:9e:6b:8c:7d:db:44:42:48:5c:
53:26:20:de:ec:3c:57:ce:08:cb:50:45:ca:1e:7a:39:97:23:
4c:ec:19:cf:8b:3b:07:be:80:7a:37:f0:ba:f0:00:ac:a6:f8:
8b:ab:6b:9e:22:e0:3d:3b:d9:3c:91:4b:31:32:86:c7:a1:45:
1c:47:15:6c:d1:60:45:2d:e8:8d:3c:1b:58:56:84:78:94:b3:
fa:d4:37:4e:e0:dd:50:41:0c:86:f7:43:79:dc:f2:ea:1f:ce:
e2:41:4e:98:0a:33:51:49:43:80:8f:d6:c7:90:73:81:a8:0a:
a3:9a:57:44:4f:01:34:d2:e0:c5:2d:f1:20:c6:e4:8c:f8:8c:
95:19:c4:c1:58:00:9a:0e:48:b3:c8:ee:84:fe:b6:8f:6a:9a:
73:9e:79:e0:ca:7e:a7:fe:e5:67:2b:12:0f:c4:1d:5a:50:5e:
7d:73:65:bf:8b:d9:49:56:37:4a:5f:fa:44:44:c0:8c:fc:95:
d7:ca:8e:e6:fc:58:2b:7c:b8:8f:4f:7c:1a:d8:2d:60:d0:41:
8b:6d:f3:bc:b7:8a:4c:1a:b6:15:d6:7e:8b:23:97:08:27:ea:
9d:cb:27:00:4d:bf:62:b2:25:4d:7b:88:5b:9d:5e:22:0d:af:
7c:79:22:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:09 2024 by rpki-client on console-ams.rpki-client.org