Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/aGuYQK_YMd0wKS2bbDH4B91kosU.roa
File: aGuYQK_YMd0wKS2bbDH4B91kosU.roa (raw, json)
Hash identifier: 31SdnJQjaVWNCkinBVqwAGkJnH8NAlWHwW6AmUOUPig=
Subject key identifier: 68:6B:98:40:AF:D8:31:DD:30:29:2D:9B:6C:31:F8:07:DD:64:A2:C5
Certificate issuer: /CN=4aab65873cb2782f13c378f5543c691443d16f79
Certificate serial: 01856FF9560CADC9AF20AEE1151716AB4744
Authority key identifier: 4A:AB:65:87:3C:B2:78:2F:13:C3:78:F5:54:3C:69:14:43:D1:6F:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/aGuYQK_YMd0wKS2bbDH4B91kosU.roa
Signing time: Mon 02 Jan 2023 00:54:49 +0000
ROA not before: Mon 02 Jan 2023 00:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211261
IP address blocks: 185.201.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:56:0c:ad:c9:af:20:ae:e1:15:17:16:ab:47:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aab65873cb2782f13c378f5543c691443d16f79
Validity
Not Before: Jan 2 00:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=686b9840afd831dd30292d9b6c31f807dd64a2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:24:d6:4c:86:fd:91:a8:ce:26:b0:6b:b0:
b4:77:5b:21:d9:2d:84:88:1b:45:61:24:af:be:ec:
52:fa:44:1d:32:8b:c6:28:71:74:54:32:85:f7:f2:
1a:91:9c:74:d6:a4:17:65:85:0c:d5:d7:27:14:4f:
da:f0:48:01:ad:49:d5:54:3e:26:4e:95:fd:7e:fe:
b3:de:bf:15:e1:3d:d1:79:64:af:7d:a8:0a:8b:fc:
06:ab:35:94:43:0c:65:91:a8:10:72:d5:8b:de:7c:
58:36:db:1e:4b:6f:98:de:e5:09:dc:f9:92:de:1e:
0f:3b:2a:b0:f8:41:de:d4:bc:4d:5f:83:47:4a:88:
c6:e4:8b:3a:6d:38:64:7a:1d:70:a4:7c:cd:26:cf:
4d:49:3c:25:59:be:6c:b5:25:76:07:54:d6:d7:40:
b5:46:ca:21:cd:e8:c7:8c:a1:54:c8:ac:ea:d3:a2:
80:80:47:26:70:ed:03:db:9a:97:e3:c1:cf:7b:48:
99:41:15:3f:b0:a7:8d:c8:da:9d:ac:7c:43:cf:0b:
fa:01:61:2d:13:7f:b7:cb:c0:00:59:4b:ab:5e:8c:
0c:fb:25:f5:d1:ab:f0:78:da:6b:83:15:de:44:cf:
46:c0:f7:2c:88:d2:4f:75:8f:00:7f:d5:4e:a4:51:
ac:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6B:98:40:AF:D8:31:DD:30:29:2D:9B:6C:31:F8:07:DD:64:A2:C5
X509v3 Authority Key Identifier:
keyid:4A:AB:65:87:3C:B2:78:2F:13:C3:78:F5:54:3C:69:14:43:D1:6F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/aGuYQK_YMd0wKS2bbDH4B91kosU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.6.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:17:50:51:9f:48:3d:21:5c:b7:37:25:e4:9a:ee:48:1b:de:
3d:36:8d:59:f3:d6:f6:1e:67:90:6f:4c:45:c3:4b:2c:38:f4:
31:d3:35:9e:8f:86:71:40:a2:70:ff:51:b4:2c:2f:89:6b:5f:
86:67:16:63:31:95:77:fc:af:d6:88:d7:71:80:56:13:e0:22:
6f:55:fa:4e:68:5c:d2:f5:ca:b6:60:a3:88:8f:86:64:d7:f5:
c8:44:b4:c5:eb:6d:48:9d:6f:6a:96:f7:cb:b5:cc:4f:d7:1a:
29:46:64:77:06:3b:26:a3:d9:3f:64:09:c1:0e:41:c1:bd:5b:
b2:82:bb:ba:63:c8:64:39:b4:17:36:40:60:0c:9a:0b:5c:be:
61:a1:34:ef:e7:ae:83:7d:da:6d:46:d8:9d:cd:85:75:d0:0a:
f8:0b:e2:a3:4b:ed:c9:27:fd:c3:e9:36:76:92:f0:82:04:8c:
e8:06:03:a4:6b:3f:8c:98:6f:58:aa:8a:b5:62:63:7a:e7:78:
a1:53:57:b9:f8:a0:e2:31:8f:ea:f4:ab:ab:80:7e:72:af:c1:
04:8d:0a:47:52:79:ee:12:ed:22:d8:96:22:e9:3a:42:6a:36:
81:3e:4f:bc:39:ae:2a:27:db:9a:45:f2:b1:41:71:47:8c:ff:
4b:c2:47:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:31 2025 by rpki-client