Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3c240b-4c9a-452a-9136-e3a42ad1455d/1/gXprlpehjwusieK8yunjd7e9wb4.roa
File: gXprlpehjwusieK8yunjd7e9wb4.roa (raw, json)
Hash identifier: ZEpuzm4orYhsL7VYC6tLXXiXjpQQn1sP012nXnnTOf4=
Subject key identifier: 81:7A:6B:96:97:A1:8F:0B:AC:89:E2:BC:CA:E9:E3:77:B7:BD:C1:BE
Certificate issuer: /CN=9a6c0367f6bd34afd0b7543cea0e332661d61c03
Certificate serial: 0126D0
Authority key identifier: 9A:6C:03:67:F6:BD:34:AF:D0:B7:54:3C:EA:0E:33:26:61:D6:1C:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmwDZ_a9NK_Qt1Q86g4zJmHWHAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3c240b-4c9a-452a-9136-e3a42ad1455d/1/gXprlpehjwusieK8yunjd7e9wb4.roa
Signing time: Wed 26 Jan 2022 18:27:32 +0000
ROA not before: Wed 26 Jan 2022 18:27:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 185.201.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75472 (0x126d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6c0367f6bd34afd0b7543cea0e332661d61c03
Validity
Not Before: Jan 26 18:27:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=817a6b9697a18f0bac89e2bccae9e377b7bdc1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e8:31:5f:8d:34:b6:2f:21:32:95:6b:42:1d:
04:25:22:fe:99:3a:23:06:47:0c:7d:6d:57:bd:af:
9f:fa:4c:74:e3:79:60:c1:e2:6d:4b:bb:45:dd:81:
ef:3a:46:06:d1:0b:bd:52:e1:ad:df:d1:f9:e6:3f:
35:49:13:8f:95:84:54:bd:06:6e:a4:33:c4:c5:4b:
56:2a:8c:56:a3:79:b7:da:7f:25:86:ee:fd:00:07:
62:35:9f:ae:ee:ca:58:9d:02:d4:82:a9:03:20:72:
11:af:6a:9a:1c:e7:f7:e0:8d:0d:22:11:70:fd:02:
92:39:e9:a8:43:c1:e8:c7:6b:4b:7a:45:0a:82:aa:
ef:67:23:54:1c:81:48:66:ca:d3:33:52:e4:6e:47:
f4:fa:2e:6a:d1:fe:68:0f:6a:37:91:3d:99:08:16:
04:92:79:02:38:7e:36:8b:b3:96:8f:41:3a:8f:d8:
db:0c:d3:1c:dc:5b:37:78:c0:51:4b:f1:b3:b8:5c:
79:4a:50:8e:58:7a:19:65:0f:46:9a:41:76:a1:d6:
d8:a0:30:bb:f6:0d:59:0a:ec:9f:27:73:d0:7a:19:
89:ea:51:0b:55:f5:64:6f:b4:30:42:9e:27:fc:ec:
a6:0c:77:78:d9:de:73:13:68:10:5b:1e:87:79:40:
01:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7A:6B:96:97:A1:8F:0B:AC:89:E2:BC:CA:E9:E3:77:B7:BD:C1:BE
X509v3 Authority Key Identifier:
keyid:9A:6C:03:67:F6:BD:34:AF:D0:B7:54:3C:EA:0E:33:26:61:D6:1C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmwDZ_a9NK_Qt1Q86g4zJmHWHAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3c240b-4c9a-452a-9136-e3a42ad1455d/1/gXprlpehjwusieK8yunjd7e9wb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3c240b-4c9a-452a-9136-e3a42ad1455d/1/mmwDZ_a9NK_Qt1Q86g4zJmHWHAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.29.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:c8:94:15:69:c0:1f:f7:ea:45:d2:ef:c3:6f:06:c7:8b:c5:
93:55:57:92:8b:89:7b:61:a3:4a:3e:72:af:5b:c0:7b:a5:19:
ab:af:87:8f:6c:e4:a6:41:9a:0f:74:ca:7f:09:a6:c9:d0:49:
bc:98:e7:20:65:c1:de:cb:a5:22:0b:61:d6:84:4e:7d:fc:51:
bc:3f:1a:35:3f:67:7d:b5:1e:56:43:0c:4f:58:66:e5:82:27:
31:6c:db:b9:c4:d9:f5:48:f1:4b:1a:90:16:5b:8a:5e:8f:cc:
57:dc:cf:96:96:28:e7:9e:81:2c:f4:db:33:a7:2b:11:e1:01:
d0:7f:d8:f8:51:89:cb:4f:3e:69:50:b9:85:9a:82:94:fa:90:
56:7d:ce:c7:f3:4a:97:3f:32:92:d3:a0:9f:34:42:1e:b6:09:
0a:ce:c8:31:ed:e7:4d:a0:d7:30:21:94:00:f6:fe:bb:a8:d8:
1f:be:b1:9b:0d:f5:27:85:86:e1:86:3a:7f:0d:33:a4:6f:78:
e8:13:56:35:ca:79:1c:bd:0c:02:45:08:1f:f2:92:49:44:46:
aa:52:94:b1:a4:f8:24:5c:f0:c3:ce:92:8d:77:f1:65:a5:9a:
6d:ac:0e:8c:07:bd:51:b7:59:ad:87:67:2e:f0:d1:18:78:0b:
57:41:d3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:09 2024 by rpki-client on console-ams.rpki-client.org