Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/zhZgfIs0CK8q7X-csIYAqGUi1us.roa
File: zhZgfIs0CK8q7X-csIYAqGUi1us.roa (raw, json)
Hash identifier: KhqJ7VCOOjUj0bEdl3TTJGkCIG8I4785dQ03FQcExtw=
Subject key identifier: CE:16:60:7C:8B:34:08:AF:2A:ED:7F:9C:B0:86:00:A8:65:22:D6:EB
Certificate issuer: /CN=6ebeb83de2a594515eebd77fe58801e6a89fce64
Certificate serial: 0182C1EF36965D2DDEC388B54382DC73FC4D
Authority key identifier: 6E:BE:B8:3D:E2:A5:94:51:5E:EB:D7:7F:E5:88:01:E6:A8:9F:CE:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/br64PeKllFFe69d_5YgB5qifzmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/zhZgfIs0CK8q7X-csIYAqGUi1us.roa
Signing time: Sun 21 Aug 2022 19:44:15 +0000
ROA not before: Sun 21 Aug 2022 19:44:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 185.234.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c1:ef:36:96:5d:2d:de:c3:88:b5:43:82:dc:73:fc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ebeb83de2a594515eebd77fe58801e6a89fce64
Validity
Not Before: Aug 21 19:44:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce16607c8b3408af2aed7f9cb08600a86522d6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5a:54:6d:74:80:5c:fc:02:68:0b:11:be:e9:
2d:1f:22:fa:ff:af:b3:08:41:08:5c:a0:97:c6:07:
f7:a2:1f:8f:d4:d2:08:44:29:02:1c:0d:b2:77:53:
90:1a:81:86:bf:6f:33:93:ff:52:2c:42:45:bc:e0:
e5:35:ec:fe:e7:ca:80:31:76:ec:fa:3a:03:00:c8:
02:20:a3:03:94:6a:c9:96:cb:97:e1:61:39:7e:4f:
94:10:d5:d9:77:10:ea:b2:ce:94:ff:f4:ca:2b:f0:
f5:dd:3c:92:f1:72:38:b4:cb:ba:49:12:d9:52:e6:
cc:b2:63:f9:45:fa:8d:8b:e2:00:00:ec:58:3d:db:
0d:0c:ce:1e:c7:52:75:6a:c6:b2:ee:65:99:de:de:
12:79:7f:e4:d9:6d:77:c2:e2:6a:b3:d8:49:4e:43:
36:17:e6:6b:c4:97:6e:4e:90:63:0c:26:09:c8:d7:
c5:bc:90:19:c9:5c:4d:d2:a3:d9:a9:82:6f:8d:ab:
b7:59:38:ac:4e:c1:64:1a:dc:cc:d3:b7:f2:ba:1d:
da:a3:9a:91:2d:4c:d4:3a:d4:ee:e2:78:bc:85:a0:
7e:7b:23:68:f3:7f:a1:2c:87:be:fa:ef:31:86:1a:
96:bb:1c:06:5a:3c:a5:49:45:f7:84:eb:27:01:ec:
9f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:16:60:7C:8B:34:08:AF:2A:ED:7F:9C:B0:86:00:A8:65:22:D6:EB
X509v3 Authority Key Identifier:
keyid:6E:BE:B8:3D:E2:A5:94:51:5E:EB:D7:7F:E5:88:01:E6:A8:9F:CE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/br64PeKllFFe69d_5YgB5qifzmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/zhZgfIs0CK8q7X-csIYAqGUi1us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/br64PeKllFFe69d_5YgB5qifzmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.10.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:c0:18:b6:02:8c:27:97:a7:04:ad:b3:93:24:aa:68:40:20:
78:76:3d:51:aa:53:a4:6e:60:5f:2b:74:bb:5b:6b:03:48:b8:
a0:ff:3e:0f:8f:7e:af:d4:b3:01:23:ec:05:7b:a1:d6:ca:f0:
f8:a2:a8:3c:a4:09:25:4d:14:31:8c:92:1a:57:03:bf:46:2e:
e6:c9:55:dd:20:94:88:66:98:05:2f:c0:cc:60:fa:ca:6b:59:
a1:6d:38:16:40:58:f5:ff:cb:85:44:d0:fc:b7:e2:13:42:c0:
0d:9e:16:db:50:a2:c1:df:bd:32:2a:02:89:ac:00:24:89:83:
46:15:60:c9:6f:e6:e8:36:56:8d:40:7a:83:09:15:1d:c4:14:
05:f4:19:aa:c1:92:0e:1a:9c:b6:54:70:87:de:1c:30:c0:52:
39:24:a9:27:82:9b:94:93:44:86:a7:71:a9:64:59:52:b2:21:
74:a3:21:57:d8:14:42:84:78:da:bf:e2:96:25:18:34:30:dd:
47:f0:fe:b6:d5:37:29:c8:fd:31:25:e1:88:f7:43:52:c1:2f:
d9:df:02:9d:92:f2:c1:05:d9:12:25:c4:48:29:29:35:0c:88:
a9:8f:e2:b2:67:b4:6e:72:00:85:09:8f:a1:1e:05:f0:34:64:
6f:ec:de:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:18 2024 by rpki-client on console-fra.rpki-client.org