Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/r-20_vKeMcB0hyc-DF2aYZM5fhA.roa
File: r-20_vKeMcB0hyc-DF2aYZM5fhA.roa (raw, json)
Hash identifier: YJsPQbDFQPjA8Jsxco8DTqHbce97fjzpC720f4fHVLI=
Subject key identifier: AF:ED:B4:FE:F2:9E:31:C0:74:87:27:3E:0C:5D:9A:61:93:39:7E:10
Certificate issuer: /CN=6ebeb83de2a594515eebd77fe58801e6a89fce64
Certificate serial: 169C
Authority key identifier: 6E:BE:B8:3D:E2:A5:94:51:5E:EB:D7:7F:E5:88:01:E6:A8:9F:CE:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/br64PeKllFFe69d_5YgB5qifzmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/r-20_vKeMcB0hyc-DF2aYZM5fhA.roa
Signing time: Thu 03 Feb 2022 16:52:39 +0000
ROA not before: Thu 03 Feb 2022 16:52:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34665
IP address blocks: 185.234.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5788 (0x169c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ebeb83de2a594515eebd77fe58801e6a89fce64
Validity
Not Before: Feb 3 16:52:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=afedb4fef29e31c07487273e0c5d9a6193397e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:47:bf:29:e5:fc:ed:04:ff:33:84:5c:15:76:
c8:fc:ca:8a:9c:94:83:ec:d4:89:e8:a0:a0:c7:38:
2e:6a:03:4b:ce:e1:ce:32:37:8a:da:30:de:8a:ed:
2b:57:4b:51:7a:3b:49:5e:22:4f:8a:66:a0:b2:a0:
7d:d2:be:f7:f9:8f:23:ce:6a:38:c4:29:34:aa:73:
17:fa:a6:d4:69:83:f6:1f:4e:e5:62:87:90:5c:c5:
10:68:6b:b0:72:ce:d6:ec:69:aa:d7:ac:88:dd:52:
fa:86:09:bd:5a:b6:03:67:b9:0c:59:af:0d:d3:fc:
64:71:8f:22:5e:52:59:b5:9c:ca:a0:f2:ca:7b:41:
da:f8:0a:14:8c:fe:44:07:92:9e:cd:34:bd:1e:c9:
80:95:12:3c:93:c9:b4:9c:df:db:25:34:0a:a8:24:
34:73:c2:af:23:56:71:24:63:11:be:c9:cd:8b:14:
a0:30:85:13:81:bc:13:69:84:f5:70:29:1c:e1:65:
82:a6:c9:87:4e:25:52:75:80:48:a5:a4:9a:db:c3:
82:c9:7c:57:a4:d2:2a:75:ab:01:96:d6:8f:2e:74:
b8:ee:ec:33:13:88:87:a8:8c:2b:94:82:7d:ee:67:
06:45:3d:b9:4c:a6:2c:91:ce:cb:8d:a1:07:ef:38:
52:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:ED:B4:FE:F2:9E:31:C0:74:87:27:3E:0C:5D:9A:61:93:39:7E:10
X509v3 Authority Key Identifier:
keyid:6E:BE:B8:3D:E2:A5:94:51:5E:EB:D7:7F:E5:88:01:E6:A8:9F:CE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/br64PeKllFFe69d_5YgB5qifzmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/r-20_vKeMcB0hyc-DF2aYZM5fhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/br64PeKllFFe69d_5YgB5qifzmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.10.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:e1:ff:82:8d:fa:80:3b:c3:33:bb:a1:34:aa:d2:78:4f:3a:
a0:f3:58:e0:0e:1e:6d:b7:0f:da:2b:7d:fc:d8:ec:78:90:98:
c2:3f:07:05:80:30:63:6b:26:43:a7:45:e5:68:cb:98:fd:bb:
fc:4b:d4:3f:fa:c0:6d:2a:c7:40:0f:f7:ca:b6:16:d4:08:08:
63:57:f7:08:09:ba:cf:7a:0b:ce:25:e3:f4:67:ed:ec:eb:e5:
55:a2:13:ec:5b:86:77:14:12:72:4a:39:8e:08:01:cc:bb:60:
a8:b6:d7:b2:bf:6e:2e:b8:36:84:cd:75:4f:68:35:e2:a0:7c:
0c:b3:33:a9:76:d5:1a:11:62:e2:29:c7:9b:ec:f7:f8:fd:78:
ef:50:8e:16:78:1e:60:5e:63:9f:9c:ec:05:e0:44:9d:0e:5f:
b5:09:7f:a8:c5:7c:d5:03:f6:e5:90:ad:ee:b6:4e:49:c3:61:
df:4c:cb:a8:8f:4f:94:9e:b9:bb:be:ea:38:92:20:03:f6:d1:
f5:1e:70:5d:11:e6:2c:1a:94:27:40:12:41:77:ba:8e:c0:48:
44:bd:c6:47:34:fe:ef:9a:76:7b:25:35:9c:43:ef:cc:15:0d:
92:70:11:d3:b3:48:b0:3b:bc:17:9d:34:17:1a:ff:d5:af:a6:
9b:4d:ff:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:09 2024 by rpki-client on console-ams.rpki-client.org