Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/047325-a98c-43cf-a8ef-d2a85766790d/1/_Te9RtngsB_4_kx6zm7deeBmhtE.roa
File: _Te9RtngsB_4_kx6zm7deeBmhtE.roa (raw, json)
Hash identifier: GHcQ7zSM4OX6Mr+IzDfJ6RW6IpghlbDEbcx+dEMqmh4=
Subject key identifier: FD:37:BD:46:D9:E0:B0:1F:F8:FE:4C:7A:CE:6E:DD:79:E0:66:86:D1
Certificate issuer: /CN=b06564e065aa0fecbb76ee8df2906c04b8244135
Certificate serial: 01856C010C245F5B789D3ED92DD710F99DC2
Authority key identifier: B0:65:64:E0:65:AA:0F:EC:BB:76:EE:8D:F2:90:6C:04:B8:24:41:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGVk4GWqD-y7du6N8pBsBLgkQTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/047325-a98c-43cf-a8ef-d2a85766790d/1/_Te9RtngsB_4_kx6zm7deeBmhtE.roa
Signing time: Sun 01 Jan 2023 06:24:46 +0000
ROA not before: Sun 01 Jan 2023 06:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6876
IP address blocks: 185.21.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:0c:24:5f:5b:78:9d:3e:d9:2d:d7:10:f9:9d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06564e065aa0fecbb76ee8df2906c04b8244135
Validity
Not Before: Jan 1 06:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd37bd46d9e0b01ff8fe4c7ace6edd79e06686d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2b:c9:bd:46:03:e8:71:38:34:5c:39:38:74:
d4:45:70:2d:9f:d9:bb:10:01:25:a8:fe:af:9d:ef:
6e:60:f3:93:42:6d:92:78:f8:7f:d1:19:bd:d1:6c:
cb:1d:94:b8:13:c4:f2:99:a5:65:46:49:f6:c0:82:
8b:ed:49:4e:3d:2d:24:d2:cf:f8:31:3a:fc:56:41:
fb:b2:2c:5a:6a:f6:70:58:ea:4f:26:9c:da:73:ae:
88:53:48:27:5a:ea:d7:be:09:79:48:49:89:4b:86:
a4:a9:10:b6:d0:d1:04:49:14:86:e0:d7:19:9d:b1:
49:73:a9:e0:93:52:b7:95:3c:e4:57:32:89:ad:51:
78:46:2c:a7:92:fc:00:41:c2:d4:d2:1e:2f:20:05:
2f:de:a2:c0:b0:9a:84:19:60:fe:fe:0c:8f:1c:75:
03:e9:94:b4:cb:e9:a1:64:1b:09:d1:f7:92:4a:70:
a6:e9:5b:88:6f:c7:38:07:4c:0d:7f:de:cc:22:32:
b5:86:a6:c3:8f:33:21:3f:c7:26:6b:78:a5:71:27:
6b:b4:0c:74:26:5a:26:fb:63:a3:80:99:14:08:c2:
87:a7:30:08:27:ea:2a:21:52:07:a6:b5:4d:33:ce:
0c:4d:ec:4c:fc:ba:41:0d:35:8f:de:8f:45:4a:ef:
44:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:37:BD:46:D9:E0:B0:1F:F8:FE:4C:7A:CE:6E:DD:79:E0:66:86:D1
X509v3 Authority Key Identifier:
keyid:B0:65:64:E0:65:AA:0F:EC:BB:76:EE:8D:F2:90:6C:04:B8:24:41:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVk4GWqD-y7du6N8pBsBLgkQTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/047325-a98c-43cf-a8ef-d2a85766790d/1/_Te9RtngsB_4_kx6zm7deeBmhtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/047325-a98c-43cf-a8ef-d2a85766790d/1/sGVk4GWqD-y7du6N8pBsBLgkQTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.51.0/24
Signature Algorithm: sha256WithRSAEncryption
53:09:e6:74:a6:67:a0:3b:5e:84:b6:73:dc:43:f6:c4:c2:48:
be:f6:14:ca:4b:5e:2e:98:cb:a2:b4:fe:f9:35:46:ff:63:e5:
c9:62:e2:01:ff:28:95:04:06:0d:49:26:e7:0f:19:a0:00:4e:
5b:b0:0f:63:26:4d:69:14:83:fc:31:ea:47:03:1b:bd:e0:a4:
89:f2:62:17:cf:fc:c5:7a:f8:49:b9:81:64:55:99:1f:ca:3e:
cf:7f:95:c7:c6:2c:e1:d1:69:bf:82:27:96:f3:3d:72:26:23:
19:4f:dd:bb:4c:fd:e8:bb:3e:76:31:8f:32:5a:ca:eb:05:dc:
db:5d:32:e2:dc:20:3f:66:54:50:14:0f:61:33:3e:20:58:02:
c9:6d:38:19:61:e8:2b:b6:5d:fd:e8:58:d0:23:7f:55:e8:83:
24:8e:b1:b0:1f:4f:a8:81:46:1d:43:70:5b:07:1b:61:2e:29:
1d:b0:e8:59:fa:78:17:4b:4d:cd:35:87:07:94:5c:ac:2b:02:
27:1e:73:06:ab:21:fb:8f:f0:99:93:eb:dc:60:f8:04:81:4e:
47:a8:48:19:a7:3e:d5:63:a3:4b:9a:c4:00:3b:10:c9:e5:05:
cb:ac:35:3c:bd:13:f2:9a:0b:ce:02:75:3d:4d:fd:00:3b:1a:
e0:76:38:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:17 2024 by rpki-client on console-fra.rpki-client.org