Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/_D8_HT9XrK5fKPr2-1NJCoFBbNA.roa
File: _D8_HT9XrK5fKPr2-1NJCoFBbNA.roa (raw, json)
Hash identifier: Vy9G3MsLNL2cvqV3oYd/Mf6xyCUG1PbV6lUKpKntiw0=
Subject key identifier: FC:3F:3F:1D:3F:57:AC:AE:5F:28:FA:F6:FB:53:49:0A:81:41:6C:D0
Certificate issuer: /CN=31e0f99bcdccd7ffe72bd35c344bcd032ff74f73
Certificate serial: 0193DDE8D5285D47AD965430AA4AC9347C9B
Authority key identifier: 31:E0:F9:9B:CD:CC:D7:FF:E7:2B:D3:5C:34:4B:CD:03:2F:F7:4F:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/_D8_HT9XrK5fKPr2-1NJCoFBbNA.roa
Signing time: Thu 19 Dec 2024 07:54:03 +0000
ROA not before: Thu 19 Dec 2024 07:54:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211466
IP address blocks: 185.153.160.0/24 maxlen: 24
185.153.161.0/24 maxlen: 24
185.153.163.0/24 maxlen: 24
2a07:8780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:dd:e8:d5:28:5d:47:ad:96:54:30:aa:4a:c9:34:7c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31e0f99bcdccd7ffe72bd35c344bcd032ff74f73
Validity
Not Before: Dec 19 07:54:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc3f3f1d3f57acae5f28faf6fb53490a81416cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:0b:86:56:20:60:f0:ac:bf:82:f0:7f:b9:
86:86:fb:7a:87:f5:cd:90:d6:50:d0:cb:23:05:a4:
8a:9b:ec:fc:57:b5:85:c0:34:48:8a:02:53:47:bc:
af:b1:fb:d2:fa:e5:5a:db:37:f4:7e:42:6e:d3:91:
01:68:64:55:4c:75:61:ca:47:79:3f:96:81:3c:26:
06:36:c0:98:a3:bc:c1:5a:bb:2f:13:6e:ab:a6:9c:
95:f4:d1:ad:4d:c5:85:ed:53:a1:b9:01:75:06:15:
c8:18:47:1b:21:4f:33:56:3c:e2:54:fc:13:4c:6e:
2d:9b:d0:2c:bf:bb:e5:cf:a7:bb:09:f8:83:85:2d:
66:2c:e1:34:c6:84:c0:e1:13:21:20:5f:35:9e:bf:
3f:2c:53:7a:0e:20:bd:23:a7:f7:52:8c:7b:48:86:
6e:25:25:6f:16:73:5f:3a:e4:40:59:f7:c2:c9:81:
a3:38:78:0c:c1:fd:75:fb:49:ce:ea:e9:8d:66:70:
e2:86:66:3e:f4:62:ff:6c:8b:5c:ea:5e:5d:4c:88:
ab:87:93:72:b4:2d:19:5d:fc:a6:f5:57:1d:9d:ea:
35:cb:ae:74:a7:f5:14:f0:57:3a:e1:fd:8e:d1:08:
49:0d:10:d3:2e:8d:c2:32:3a:90:70:9e:14:9b:28:
ac:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3F:3F:1D:3F:57:AC:AE:5F:28:FA:F6:FB:53:49:0A:81:41:6C:D0
X509v3 Authority Key Identifier:
keyid:31:E0:F9:9B:CD:CC:D7:FF:E7:2B:D3:5C:34:4B:CD:03:2F:F7:4F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/_D8_HT9XrK5fKPr2-1NJCoFBbNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.160.0/23
185.153.163.0/24
IPv6:
2a07:8780::/29
Signature Algorithm: sha256WithRSAEncryption
71:b8:71:8a:90:44:27:8e:5b:a4:44:d7:d5:24:c1:d9:32:c6:
38:93:ad:68:8b:18:36:c6:99:13:1c:46:98:6b:14:7a:0f:22:
9f:05:08:09:47:da:06:7f:e1:43:db:17:83:29:37:00:09:fb:
a5:bb:4d:49:3b:92:aa:65:f9:1e:eb:bc:8c:36:bd:c7:ff:7d:
a8:e4:09:1f:21:bb:fc:3e:38:6a:75:c9:c6:70:9e:f6:bc:5f:
c6:17:80:6f:e0:7f:15:b9:e8:76:51:f6:0c:9d:44:e0:a9:13:
da:40:0c:8f:a5:5f:d2:78:6e:37:61:55:3c:d9:a8:30:da:44:
45:6c:cc:e1:18:45:5d:00:6e:ca:7a:f3:b9:c3:ee:f4:b8:64:
a5:58:59:68:6a:47:c3:93:42:b8:8c:5f:9e:99:7a:6b:d6:84:
65:d0:d1:3d:c6:f6:05:92:08:6a:f3:9b:6a:61:78:fa:df:2a:
99:28:20:35:ea:cd:07:ee:53:40:e4:aa:b5:a8:f5:6f:68:00:
ea:25:d0:77:69:2c:b3:ed:fb:55:b8:fe:2d:27:3a:e3:18:a2:
69:ca:14:cc:3e:96:1e:9d:5d:50:f9:ab:f8:4d:31:81:c2:76:
ee:dc:73:d3:0b:c9:f9:84:fd:ee:bb:dc:f9:02:fb:c2:cc:90:
ce:04:ba:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:27 2024 by rpki-client on console.sobornost.net