Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/1AW_H_8pK5hxvhwG5HmgwhIWVeM.roa
File: 1AW_H_8pK5hxvhwG5HmgwhIWVeM.roa (raw, json)
Hash identifier: /Eht2qpDrMRoG/XUd7hFcr+X8EPCMzcqth8WnKFoXho=
Subject key identifier: D4:05:BF:1F:FF:29:2B:98:71:BE:1C:06:E4:79:A0:C2:12:16:55:E3
Certificate issuer: /CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
Certificate serial: 0193E360ED4C30EFE83EE64789AFB0C599DC
Authority key identifier: 6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/1AW_H_8pK5hxvhwG5HmgwhIWVeM.roa
Signing time: Fri 20 Dec 2024 09:23:20 +0000
ROA not before: Fri 20 Dec 2024 09:23:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205042
IP address blocks: 185.78.184.0/22 maxlen: 22
188.74.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:60:ed:4c:30:ef:e8:3e:e6:47:89:af:b0:c5:99:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
Validity
Not Before: Dec 20 09:23:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d405bf1fff292b9871be1c06e479a0c2121655e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:71:6c:4c:ad:6e:88:13:9d:05:d3:b0:a1:f5:
cb:93:cf:62:52:48:e9:41:2c:31:8d:4c:aa:e9:03:
16:48:73:8f:b3:94:52:f4:80:67:3d:74:07:6f:8c:
4c:09:23:54:94:9c:e0:18:36:1f:da:eb:2b:2f:e8:
e8:43:1b:83:af:b8:fb:76:a6:81:5e:cd:27:0d:f8:
f9:10:29:c3:9c:b3:13:f8:a9:8e:f2:40:92:a0:f2:
9f:f7:3e:99:c8:46:b9:7e:e8:46:69:83:69:b5:e1:
8b:b9:79:4c:6a:a2:ae:d7:85:20:a9:d8:36:7e:b4:
92:0f:c9:2e:b6:a6:ef:9c:32:b4:f7:c7:90:fb:af:
87:e8:f3:af:81:ad:3e:ed:16:6a:4e:0b:c6:87:8b:
25:b6:4b:a2:19:0d:7f:73:97:ab:97:86:a7:68:4e:
81:1b:c4:ac:81:d1:92:ec:ad:ff:ef:12:dc:9b:7b:
e6:98:6f:7c:9e:67:22:f5:b9:5d:e5:c5:df:04:04:
e6:b7:b7:a1:a9:97:46:89:7f:2c:cd:ab:56:ff:99:
f5:ed:3d:57:64:06:5a:b5:22:8c:b5:20:a7:cc:9b:
1e:06:99:0a:67:c8:01:c0:7a:f5:88:b9:6c:b4:0e:
1d:2c:9f:51:93:6a:56:ce:fb:37:81:b6:af:79:f7:
a1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:05:BF:1F:FF:29:2B:98:71:BE:1C:06:E4:79:A0:C2:12:16:55:E3
X509v3 Authority Key Identifier:
keyid:6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/1AW_H_8pK5hxvhwG5HmgwhIWVeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.184.0/22
188.74.48.0/20
Signature Algorithm: sha256WithRSAEncryption
7b:1f:11:ec:e7:c2:73:44:f2:26:54:8e:d4:b5:61:cc:07:ad:
8f:d9:91:51:fd:09:0c:f1:ae:c6:9f:2c:91:0f:e1:35:c1:55:
90:25:74:83:29:01:ae:42:8f:32:fa:61:00:72:17:2f:5d:fc:
0f:b3:6a:3d:00:fd:e4:3c:eb:c9:99:14:86:a1:36:de:b1:79:
bd:26:3b:4a:e5:d9:5b:d4:c3:a8:2d:b5:22:84:15:81:f9:cc:
e8:0a:b2:f0:c8:7d:b9:d7:ec:11:d7:f4:9b:91:b5:87:47:9b:
73:1f:c5:d7:8c:b0:f7:31:6b:2f:39:ac:e6:78:44:2b:37:40:
33:e0:a5:ac:54:86:48:e6:a0:8f:3d:a6:48:62:55:19:a6:60:
79:03:ab:3f:04:19:47:7c:6f:4f:7a:41:6a:f2:63:90:04:6d:
72:aa:d6:e1:5b:37:a1:c0:f7:1a:e7:77:ba:98:da:61:ff:c2:
aa:7f:2b:5b:ce:8a:f6:4b:b5:29:a1:62:ff:c0:2a:81:4b:a1:
c0:5e:b1:0a:e8:98:9d:34:85:1b:54:c8:39:6b:4b:03:02:f4:
4c:d3:7e:b9:72:c1:0f:53:2d:a0:25:84:55:4d:c9:b9:33:0e:
cc:d9:36:da:ea:f6:48:fa:eb:ea:24:51:6c:35:64:d7:b3:0c:
6d:86:05:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:54 2024 by rpki-client on console.sobornost.net