Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1da29f-f040-4ea5-ba5c-db6432797c20/1/0iQfqM9KTlzE7kJFHq-_KXeEFrg.roa
File: 0iQfqM9KTlzE7kJFHq-_KXeEFrg.roa (raw, json)
Hash identifier: n7EdNM4B3UdtImr1ds3OU4gUA00C57rVRKaDAgIvDME=
Subject key identifier: D2:24:1F:A8:CF:4A:4E:5C:C4:EE:42:45:1E:AF:BF:29:77:84:16:B8
Certificate issuer: /CN=6ff210248a878fdc54f9385c0ac544d7feca6343
Certificate serial: 0183885DD95D7BF378BB74985749FC126911
Authority key identifier: 6F:F2:10:24:8A:87:8F:DC:54:F9:38:5C:0A:C5:44:D7:FE:CA:63:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_IQJIqHj9xU-ThcCsVE1_7KY0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1da29f-f040-4ea5-ba5c-db6432797c20/1/0iQfqM9KTlzE7kJFHq-_KXeEFrg.roa
Signing time: Thu 29 Sep 2022 08:29:55 +0000
ROA not before: Thu 29 Sep 2022 08:29:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.131.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:88:5d:d9:5d:7b:f3:78:bb:74:98:57:49:fc:12:69:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff210248a878fdc54f9385c0ac544d7feca6343
Validity
Not Before: Sep 29 08:29:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2241fa8cf4a4e5cc4ee42451eafbf29778416b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8a:60:3b:95:e1:2c:6a:00:90:b6:d7:2d:bb:
48:87:70:e7:b1:72:f8:ac:f2:21:d6:81:2a:6e:c7:
00:82:c1:ca:db:7f:32:6b:d0:8d:49:66:d5:a0:e0:
68:d9:79:04:02:a0:0a:20:c9:cc:9c:f0:16:e2:47:
be:9d:4b:9b:cb:d7:73:21:5d:8a:a2:37:80:04:87:
50:55:4b:14:d1:60:8b:f3:72:da:8f:75:36:ee:ba:
0e:70:12:73:07:f4:4f:63:12:71:7d:4d:af:b5:ac:
88:72:f3:42:70:36:36:1a:e9:43:ba:e5:2a:c5:72:
e0:a1:a2:dc:d1:9e:ad:4b:13:26:a6:6e:7f:8f:0d:
fa:db:78:0c:fc:20:21:20:3e:a1:cb:24:67:d8:98:
f9:c5:78:f9:2e:ff:72:7f:4b:b3:c5:31:e7:bb:db:
32:49:01:e9:fb:c9:4a:80:12:24:54:00:a6:27:70:
ae:f4:48:d5:47:bd:f9:02:35:99:db:e7:80:9a:31:
83:e1:2d:9c:bc:fc:3e:8c:c0:97:61:00:68:bb:cc:
80:b6:3f:0c:e2:5c:be:c0:dc:d7:9f:e1:97:eb:90:
36:54:a6:45:40:50:80:69:54:8c:e3:91:ae:2f:e9:
a5:23:5e:a1:8c:17:f6:53:16:80:ae:a2:bf:ff:42:
77:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:24:1F:A8:CF:4A:4E:5C:C4:EE:42:45:1E:AF:BF:29:77:84:16:B8
X509v3 Authority Key Identifier:
keyid:6F:F2:10:24:8A:87:8F:DC:54:F9:38:5C:0A:C5:44:D7:FE:CA:63:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_IQJIqHj9xU-ThcCsVE1_7KY0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1da29f-f040-4ea5-ba5c-db6432797c20/1/0iQfqM9KTlzE7kJFHq-_KXeEFrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1da29f-f040-4ea5-ba5c-db6432797c20/1/b_IQJIqHj9xU-ThcCsVE1_7KY0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.184.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:c0:b9:26:ca:b9:38:a3:ac:c2:18:74:52:96:74:11:d3:5d:
0e:dc:8d:5f:61:ca:48:2f:67:e6:4d:18:6e:21:13:6a:9e:32:
3b:1f:41:c2:26:71:97:16:eb:08:7b:0f:f2:27:c0:85:e2:d1:
43:23:31:76:27:79:21:19:45:bf:fe:01:54:eb:0f:7e:8a:ce:
a9:83:88:0c:83:04:34:b7:9a:cc:a0:d1:c0:59:4a:85:68:5e:
18:00:26:6f:90:3e:ae:0d:4e:e2:29:cf:54:48:af:3f:dc:9d:
47:98:db:1e:df:26:d8:4a:ec:5a:eb:44:27:37:3a:28:22:d6:
9b:7e:e7:ee:f4:c9:59:30:be:b7:90:2a:c7:42:14:8b:06:f3:
d2:6b:7e:98:9a:87:38:19:cf:89:1b:04:c1:8b:85:33:0f:68:
82:7f:a4:3b:cc:05:79:02:ff:f6:50:ae:7e:59:c8:69:29:05:
0b:66:1b:10:14:b8:c1:fa:58:2f:ef:bc:63:c6:ff:c3:25:ac:
d5:83:e3:12:d7:fe:01:48:6a:f2:b5:6a:93:50:53:42:d5:50:
41:e4:12:68:d3:52:d8:05:28:f4:3b:de:f2:ad:1d:6b:89:8d:
59:b4:8c:1e:1e:77:38:f6:bd:73:8f:86:a8:47:84:e3:d2:f8:
8d:c2:c0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:51 2023 by rpki-client on console.sobornost.net