Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/5gs6J0UYsAsm5OUmFkvjv1Q8JOI.roa
File: 5gs6J0UYsAsm5OUmFkvjv1Q8JOI.roa (raw, json)
Hash identifier: IufybYSDPmhMFF96JY+7vHA8xaV/GMk31JQ/Bdah1UY=
Subject key identifier: E6:0B:3A:27:45:18:B0:0B:26:E4:E5:26:16:4B:E3:BF:54:3C:24:E2
Certificate issuer: /CN=73588934a0b0d648daf94dd9e629d3dd22ed5abf
Certificate serial: 018CB5929B26C129853BBB90F91061F67B1A
Authority key identifier: 73:58:89:34:A0:B0:D6:48:DA:F9:4D:D9:E6:29:D3:DD:22:ED:5A:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1iJNKCw1kja-U3Z5inT3SLtWr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/5gs6J0UYsAsm5OUmFkvjv1Q8JOI.roa
Signing time: Fri 29 Dec 2023 12:35:33 +0000
ROA not before: Fri 29 Dec 2023 12:35:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47516
IP address blocks: 185.136.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b5:92:9b:26:c1:29:85:3b:bb:90:f9:10:61:f6:7b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73588934a0b0d648daf94dd9e629d3dd22ed5abf
Validity
Not Before: Dec 29 12:35:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e60b3a274518b00b26e4e526164be3bf543c24e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fb:49:8a:df:15:89:63:0a:6d:db:07:cf:4b:
3f:89:36:22:fa:87:56:02:e5:cb:88:ad:14:7c:a1:
e0:c5:c5:df:b4:86:5e:ea:ac:6b:05:72:b7:8d:79:
55:e1:1e:65:3c:17:ad:2a:b0:3d:ef:9e:6f:03:b3:
2f:e1:36:df:e4:2a:82:2d:a2:9e:5d:c4:52:27:ee:
67:b8:40:dc:22:13:22:94:2f:29:16:71:a1:62:ac:
1b:6b:3f:26:de:61:8a:5d:1e:64:8b:c5:09:43:20:
9b:e5:d0:f7:14:fe:2f:d9:3b:29:ed:fd:44:a3:ca:
f4:06:61:91:75:fa:cf:88:c9:fd:b1:b1:23:14:0b:
d1:80:cc:9b:fc:22:aa:02:f3:6c:7b:85:be:67:08:
35:0b:13:cc:cd:c3:55:bf:20:5b:91:47:fc:a3:90:
54:a9:b3:7e:e4:44:e3:f9:85:1b:b3:93:43:9d:42:
8b:a6:bf:4d:38:6d:da:df:7f:33:42:2b:37:67:c5:
76:58:5d:07:a0:b0:68:1c:36:ae:4d:31:fe:a4:4d:
9f:48:21:34:bc:94:f5:c4:bd:09:df:69:54:82:a6:
d9:2c:e0:5c:5d:99:ce:e9:7e:75:21:a4:e3:69:86:
c4:08:5a:89:09:6e:98:65:b9:07:cc:c5:5c:d0:da:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0B:3A:27:45:18:B0:0B:26:E4:E5:26:16:4B:E3:BF:54:3C:24:E2
X509v3 Authority Key Identifier:
keyid:73:58:89:34:A0:B0:D6:48:DA:F9:4D:D9:E6:29:D3:DD:22:ED:5A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1iJNKCw1kja-U3Z5inT3SLtWr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/5gs6J0UYsAsm5OUmFkvjv1Q8JOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/c1iJNKCw1kja-U3Z5inT3SLtWr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.206.0/24
Signature Algorithm: sha256WithRSAEncryption
68:93:b6:4d:c8:b3:ad:64:4e:1e:e6:55:98:cd:65:84:16:5f:
53:54:b8:6a:aa:be:ff:b1:79:1c:7a:9b:ba:95:2e:13:e1:50:
f6:72:ba:47:93:d2:82:80:d1:8d:6a:20:64:77:64:6d:65:a7:
04:e6:a3:85:e4:17:2f:7e:c1:a8:00:95:a0:0e:46:54:da:58:
bc:63:86:cd:a7:86:ca:b1:9f:0c:e7:aa:98:05:8d:b3:16:ce:
94:d9:1e:a0:d5:44:26:a5:2f:49:79:6d:49:c7:21:5a:4a:ef:
02:2e:f6:6f:48:e7:75:e7:82:3c:78:2a:92:55:70:22:6d:67:
e5:d6:5d:01:79:91:4d:da:eb:93:18:74:77:c6:de:81:4c:3e:
02:22:3f:e2:6a:08:8d:c4:2f:e7:95:83:9e:54:ff:c6:ea:38:
3b:50:bc:c1:53:c5:d4:3e:cf:1c:84:d6:ae:91:49:45:98:cc:
93:fb:8a:08:eb:f0:47:f9:c0:73:e6:7e:55:ed:c0:52:27:ac:
da:c2:ae:f5:a4:6f:ea:13:0d:66:4b:cc:ad:a7:65:66:02:f4:
cf:37:a4:38:7f:cc:37:0f:bb:03:db:e1:ee:ab:0b:c0:9b:29:
70:07:30:06:a1:64:7d:db:eb:f9:1e:fa:e2:09:25:c8:2d:8a:
78:b9:c0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:19 2024 by rpki-client on console-fra.rpki-client.org