Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/69Y9RDgqypY0vCKGrRgQjuIJlRM.roa
File: 69Y9RDgqypY0vCKGrRgQjuIJlRM.roa (raw, json)
Hash identifier: Aukvwfb/cAA6XnjsRQhlMZgJQqWmFrUhtYxpc6ov76c=
Subject key identifier: EB:D6:3D:44:38:2A:CA:96:34:BC:22:86:AD:18:10:8E:E2:09:95:13
Certificate issuer: /CN=c70dbf555870b556acfab428c74eacee56f7b222
Certificate serial: 018CC493904DDE9BB1021366F8F9D1BC52E5
Authority key identifier: C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/69Y9RDgqypY0vCKGrRgQjuIJlRM.roa
Signing time: Mon 01 Jan 2024 10:30:54 +0000
ROA not before: Mon 01 Jan 2024 10:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202096
IP address blocks: 185.53.138.0/23 maxlen: 23
185.53.136.0/23 maxlen: 23
185.53.136.0/22 maxlen: 22
2a02:2d20::/32 maxlen: 32
2a02:2d20::/48 maxlen: 48
2a02:2d20:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:90:4d:de:9b:b1:02:13:66:f8:f9:d1:bc:52:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c70dbf555870b556acfab428c74eacee56f7b222
Validity
Not Before: Jan 1 10:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebd63d44382aca9634bc2286ad18108ee2099513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a9:de:22:20:bd:70:d4:cd:b5:e9:a9:e6:24:
90:24:f0:0a:97:c7:91:01:54:d4:72:5e:5d:24:96:
4e:51:6c:86:07:e1:ae:01:14:58:6e:4f:52:05:5f:
f9:96:f4:8f:da:f6:62:73:69:a4:72:4b:bc:0d:e1:
ba:32:b2:09:bc:13:29:2e:9a:32:53:5d:d9:55:75:
d5:63:5e:d5:b3:97:c2:ea:a3:5c:03:e8:de:f7:95:
7b:ae:fe:12:7a:9f:85:47:d7:df:a8:f2:28:e7:53:
e0:73:35:67:b0:e9:6f:ff:91:d2:9f:40:5e:9e:dd:
1e:59:3f:56:75:94:fc:0d:d1:b3:4d:e3:8e:29:ed:
34:fd:d1:9d:b4:94:ca:c1:93:8f:97:12:6e:3c:38:
a4:3c:0e:2c:d0:72:68:e1:e7:07:a5:84:fd:87:0d:
5e:55:d6:1f:78:63:63:fe:c8:0e:fe:ec:89:76:b6:
69:11:1d:4e:2d:f2:c1:1a:17:41:c7:4d:84:71:82:
4a:82:5d:34:54:c2:25:6e:50:b5:9b:71:7e:2a:e1:
df:b7:94:17:cc:06:98:db:6a:5b:64:0b:cf:3a:d1:
a5:ec:53:59:14:9f:78:d9:27:83:79:33:99:36:87:
05:99:02:4b:01:7e:f1:eb:78:e1:25:2a:57:e8:89:
23:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D6:3D:44:38:2A:CA:96:34:BC:22:86:AD:18:10:8E:E2:09:95:13
X509v3 Authority Key Identifier:
keyid:C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/69Y9RDgqypY0vCKGrRgQjuIJlRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.136.0/22
IPv6:
2a02:2d20::/32
Signature Algorithm: sha256WithRSAEncryption
ac:06:e5:bb:7f:e9:c2:75:09:02:99:cd:89:7d:f1:f2:2b:c5:
c3:82:3b:29:25:25:e0:3c:27:d4:24:1c:89:5f:3d:7b:9a:11:
12:3a:d2:1c:d0:4f:4f:71:29:6c:75:db:3c:d5:e0:80:78:6a:
70:08:e5:47:20:27:1f:96:a6:03:1e:cf:79:d2:ea:d6:26:6f:
fe:b5:c0:59:59:de:43:23:ad:ec:b4:ea:19:38:e6:1b:2b:a3:
4d:57:44:48:13:dd:80:3e:97:11:e9:03:04:01:f5:04:65:24:
64:42:ec:6a:88:4a:53:2d:17:9b:62:85:81:ce:fd:3e:85:f4:
af:b1:ba:d8:85:d8:44:d9:b8:1d:c8:a0:57:40:c9:3b:79:28:
31:25:24:5a:30:13:80:de:b0:96:6b:24:19:4c:60:cc:0a:4f:
cb:ce:67:c0:17:06:f1:27:72:c0:66:54:78:4f:18:89:51:1c:
6c:a0:50:1d:68:24:ac:8a:75:d0:f7:4e:a1:3f:5e:13:fe:ad:
1d:1c:d4:a2:5c:70:9b:85:0b:9f:25:63:6b:c2:6f:a8:61:83:
49:93:ac:d2:cf:2d:93:db:e8:08:88:7b:d9:08:b4:64:c1:00:
8d:11:78:ca:6c:ee:f8:c8:09:3c:48:7f:b4:f3:84:fa:8c:43:
99:56:8b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:10 2024 by rpki-client on console.sobornost.net