Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/oEaWTFx8z5LmjgyvRw1pkTfpFNU.roa
File: oEaWTFx8z5LmjgyvRw1pkTfpFNU.roa (raw, json)
Hash identifier: g1TwMo9Kab376BcB+SqIPl/ughvO7X+EOlafqYmW3/U=
Subject key identifier: A0:46:96:4C:5C:7C:CF:92:E6:8E:0C:AF:47:0D:69:91:37:E9:14:D5
Certificate issuer: /CN=94d161593da815cac58d3479652d048480d26713
Certificate serial: 018CC9BC2026E8E64F33989AB43835C9809A
Authority key identifier: 94:D1:61:59:3D:A8:15:CA:C5:8D:34:79:65:2D:04:84:80:D2:67:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/oEaWTFx8z5LmjgyvRw1pkTfpFNU.roa
Signing time: Tue 02 Jan 2024 10:33:18 +0000
ROA not before: Tue 02 Jan 2024 10:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59984
IP address blocks: 185.63.104.0/22 maxlen: 22
2a03:ca0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:20:26:e8:e6:4f:33:98:9a:b4:38:35:c9:80:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d161593da815cac58d3479652d048480d26713
Validity
Not Before: Jan 2 10:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a046964c5c7ccf92e68e0caf470d699137e914d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3f:e2:f0:d8:de:72:88:3e:c6:21:6f:8d:48:
a5:c6:e4:91:d9:59:c9:13:4a:3f:12:35:83:e9:92:
5e:33:bb:a5:7b:ba:d5:b0:63:2a:1b:ce:19:36:84:
a1:74:0c:68:55:d7:8b:43:03:29:27:8f:d4:24:32:
98:e0:8a:af:af:6d:d0:23:f8:6e:80:35:da:fe:42:
e6:85:7e:7b:36:59:21:1a:93:c7:30:be:62:73:65:
ad:24:fd:ef:8f:6a:6e:9a:b0:eb:dd:5b:8a:54:6e:
e2:3c:8d:7a:dd:df:6f:69:97:00:d1:bc:28:6c:59:
2b:5f:c8:6f:fa:70:e5:5a:eb:5f:83:56:68:73:bb:
46:11:a3:f2:2f:05:7e:75:cf:7f:0b:02:10:8a:eb:
f7:2a:40:38:bd:2d:ad:6b:10:26:50:2b:1d:02:9b:
9e:bf:2f:44:7d:74:9a:55:bd:f6:d6:89:f1:91:65:
4e:d2:59:eb:76:cf:14:15:83:9b:0c:99:59:6d:a6:
ec:6e:a5:d2:ee:93:8e:7f:a1:2e:8b:c2:16:1a:0b:
ac:aa:c2:f6:4b:d7:36:1c:28:ff:e0:55:16:92:e8:
65:66:36:97:e6:55:e0:ea:3f:91:c2:5f:82:cd:17:
09:69:45:3a:12:8d:68:da:80:97:bd:5b:ed:41:3d:
b1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:46:96:4C:5C:7C:CF:92:E6:8E:0C:AF:47:0D:69:91:37:E9:14:D5
X509v3 Authority Key Identifier:
keyid:94:D1:61:59:3D:A8:15:CA:C5:8D:34:79:65:2D:04:84:80:D2:67:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/oEaWTFx8z5LmjgyvRw1pkTfpFNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.104.0/22
IPv6:
2a03:ca0::/32
Signature Algorithm: sha256WithRSAEncryption
6a:b1:22:dc:ac:bd:cc:a6:bd:a5:98:16:bd:af:4e:19:ed:50:
9d:f4:8b:36:74:4b:49:53:53:2f:b7:23:cd:42:58:47:3a:85:
0c:c6:cf:0b:c8:45:35:16:ec:3c:cf:44:f9:30:d3:7c:a4:06:
4c:15:e8:10:59:b7:a8:a1:12:6c:82:ab:26:4a:67:74:8e:4b:
c6:17:2a:d9:28:33:2c:fb:de:76:78:74:f3:0e:fe:b2:d7:cf:
b6:b8:0d:76:ca:9e:29:19:57:e1:d4:4d:68:64:f1:ed:07:66:
c4:40:b7:6a:c0:82:d9:95:ba:c0:cc:8d:57:0e:ba:5e:84:80:
48:e5:24:e0:0e:2d:01:11:35:d7:e5:30:cc:15:9b:7e:47:0e:
92:17:80:88:2b:a7:33:46:b1:9f:01:d4:0f:c7:25:db:f5:31:
43:2e:cd:d2:bd:fc:be:79:41:76:aa:ae:43:a1:28:20:b7:72:
a6:22:b9:9b:e3:4f:ba:98:c6:a0:79:d0:7c:35:95:a6:68:f1:
7f:e9:61:9b:de:2b:c5:e9:aa:2e:9d:6b:9f:a3:f4:17:6b:27:
cd:47:45:86:c0:62:66:df:67:71:82:5c:6b:86:2b:da:14:8c:
8a:25:d2:0d:6e:f7:f1:22:1e:a2:55:0d:6e:b7:5a:92:11:20:
21:32:02:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:00 2024 by rpki-client on console.sobornost.net