Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3c240b-4c9a-452a-9136-e3a42ad1455d/1/thkkBQLXyvoN0lvabEoTQJGI-Pw.roa
File: thkkBQLXyvoN0lvabEoTQJGI-Pw.roa (raw, json)
Hash identifier: jsG+TNwPSJWluQ+BeHttIhSb2yV5C/+d8GnJ4Ai/Yjs=
Subject key identifier: B6:19:24:05:02:D7:CA:FA:0D:D2:5B:DA:6C:4A:13:40:91:88:F8:FC
Certificate issuer: /CN=9a6c0367f6bd34afd0b7543cea0e332661d61c03
Certificate serial: 0188BFE397FD90CDE1B07E3EC81F793C92D8
Authority key identifier: 9A:6C:03:67:F6:BD:34:AF:D0:B7:54:3C:EA:0E:33:26:61:D6:1C:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmwDZ_a9NK_Qt1Q86g4zJmHWHAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3c240b-4c9a-452a-9136-e3a42ad1455d/1/thkkBQLXyvoN0lvabEoTQJGI-Pw.roa
Signing time: Thu 15 Jun 2023 16:29:03 +0000
ROA not before: Thu 15 Jun 2023 16:29:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210135
IP address blocks: 185.201.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:e3:97:fd:90:cd:e1:b0:7e:3e:c8:1f:79:3c:92:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6c0367f6bd34afd0b7543cea0e332661d61c03
Validity
Not Before: Jun 15 16:29:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b619240502d7cafa0dd25bda6c4a13409188f8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:90:8e:e8:68:b4:14:ca:55:64:51:3a:41:e2:
3b:07:22:9d:fd:c4:5f:50:9c:d3:54:c4:b6:80:8d:
45:86:a6:e1:34:18:ec:fd:00:3f:2e:d9:fd:b0:0a:
f1:05:2a:c8:83:3a:c1:55:22:03:82:ba:d4:e0:51:
73:13:53:87:9d:89:19:02:60:eb:37:a7:8f:ed:63:
e9:90:63:9c:98:00:de:0a:6c:a4:61:65:8d:9e:f3:
46:36:ac:48:43:0d:59:d8:5c:90:cf:d5:2e:a8:3b:
f1:58:fd:e3:d7:44:84:81:9f:ce:67:72:6b:db:bc:
13:6b:97:50:94:3b:04:bc:47:47:f6:98:08:9b:0d:
75:45:28:c0:d2:9d:61:48:e0:a8:5f:05:0d:5b:a2:
ac:54:dd:75:a3:2f:13:0a:95:07:3d:12:72:d0:5c:
2c:be:7f:2c:2e:42:55:b4:79:e0:7d:a1:ec:b4:c4:
3a:65:f8:1f:fd:35:89:38:61:73:17:3e:23:a9:5b:
07:52:3b:de:89:5b:38:00:86:17:22:09:1b:49:31:
fa:db:4e:f2:e7:b2:63:64:ec:ea:80:9d:9c:f6:e3:
25:0f:d9:6d:76:a0:ea:ad:8b:e2:23:d7:6f:50:f3:
48:9b:25:c3:f3:0f:9b:e1:93:2f:57:0a:9b:24:3c:
71:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:19:24:05:02:D7:CA:FA:0D:D2:5B:DA:6C:4A:13:40:91:88:F8:FC
X509v3 Authority Key Identifier:
keyid:9A:6C:03:67:F6:BD:34:AF:D0:B7:54:3C:EA:0E:33:26:61:D6:1C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmwDZ_a9NK_Qt1Q86g4zJmHWHAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3c240b-4c9a-452a-9136-e3a42ad1455d/1/thkkBQLXyvoN0lvabEoTQJGI-Pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3c240b-4c9a-452a-9136-e3a42ad1455d/1/mmwDZ_a9NK_Qt1Q86g4zJmHWHAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.29.0/24
Signature Algorithm: sha256WithRSAEncryption
16:84:58:02:7a:21:88:53:fd:cb:44:43:16:1f:29:e9:2f:14:
0f:17:da:27:53:3b:6b:cf:db:34:34:25:5a:b9:55:d9:14:19:
4d:f2:6e:1a:6e:2b:8a:93:d4:dd:37:f2:e4:9a:ad:a1:aa:cb:
a4:c4:e8:fb:dc:76:7f:e5:4a:8b:e0:57:b8:cb:30:03:80:a6:
93:9e:aa:9e:dc:04:2e:5c:a2:64:03:e1:f3:92:a9:39:e0:ac:
53:91:28:00:2c:de:a7:35:4a:78:14:c4:70:c1:2f:3a:d8:93:
8c:e8:44:fa:ae:bd:f2:53:b9:81:3b:58:6e:45:23:48:28:84:
fb:3f:ba:ac:b2:4c:84:6c:1a:07:8f:1c:e0:ae:d8:59:14:e1:
34:93:3f:6f:2a:52:64:66:42:69:6e:cf:e0:4f:c7:7b:f0:d2:
b3:6c:92:0e:99:c4:e5:06:6e:04:ec:d0:64:0a:4d:93:f0:b9:
f4:b6:f4:57:8e:e9:84:42:c9:4a:93:d1:4e:42:3a:07:5c:44:
6b:8e:b3:18:a4:a9:54:bf:18:26:4e:17:ef:68:c0:ba:4c:67:
78:d0:44:13:7d:5d:bc:51:f2:e5:dc:ab:e0:c3:d6:11:f0:3b:
83:a0:4c:be:c6:fd:fc:7d:ba:5f:a7:ce:a3:13:dc:77:58:10:
03:de:58:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:09 2024 by rpki-client on console-ams.rpki-client.org