Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/DQ7HG0zYOKMxMiCiAIk-9FcSWpo.roa
File: DQ7HG0zYOKMxMiCiAIk-9FcSWpo.roa (raw, json)
Hash identifier: T10qW2IBUdhhcgngAmRxOo3FJLiu28eBHsw+Yl3Hz+w=
Subject key identifier: 0D:0E:C7:1B:4C:D8:38:A3:31:32:20:A2:00:89:3E:F4:57:12:5A:9A
Certificate issuer: /CN=6f80964407c5daa44088acfe95e6488b800fade5
Certificate serial: 01901BD79FFC29FCEFA6766CFD8B9347AB10
Authority key identifier: 6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/DQ7HG0zYOKMxMiCiAIk-9FcSWpo.roa
Signing time: Sat 15 Jun 2024 12:20:34 +0000
ROA not before: Sat 15 Jun 2024 12:20:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8245
IP address blocks: 185.202.192.0/22 maxlen: 22
185.202.192.0/24 maxlen: 24
185.202.193.0/24 maxlen: 24
185.202.194.0/24 maxlen: 24
185.202.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:d7:9f:fc:29:fc:ef:a6:76:6c:fd:8b:93:47:ab:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f80964407c5daa44088acfe95e6488b800fade5
Validity
Not Before: Jun 15 12:20:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d0ec71b4cd838a3313220a200893ef457125a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:bc:d0:07:d8:dc:fe:b9:2d:31:f3:d5:29:
20:08:f2:26:a1:a2:44:96:db:67:15:ca:84:a0:ed:
40:6b:11:10:56:e6:17:3d:88:61:76:a5:4a:da:ba:
0b:86:8b:70:42:f6:ec:f0:a2:ab:aa:2a:de:43:a0:
1e:d6:27:5e:00:17:8a:f0:c8:9c:dc:60:bc:16:df:
90:ac:62:29:6b:50:b6:d3:af:cc:96:2e:76:48:8e:
80:2a:1c:4f:d7:32:20:30:5d:4a:f9:f9:c9:0f:36:
df:03:b9:50:9d:aa:0f:f2:0d:eb:f7:b2:d7:fd:51:
4c:72:a3:cf:55:55:5f:63:cd:f5:90:38:ce:c2:99:
f4:51:17:7e:2f:82:27:ed:9a:60:f5:15:41:3b:b8:
9f:97:ed:2a:51:12:2e:7e:f3:64:f9:e9:95:c3:dc:
5b:66:53:66:f9:c3:3f:e5:bb:b7:38:28:d8:dd:f6:
18:cd:af:85:a4:8e:12:d0:b6:34:f5:52:a1:0f:0f:
b4:d2:81:e8:a7:04:d7:4f:56:51:86:0d:ad:b7:99:
57:58:f9:03:62:51:b9:88:a9:76:18:7c:0f:30:7d:
bb:b1:50:67:72:cc:a4:99:8e:c3:4f:b1:72:dd:95:
b4:47:a2:af:34:01:6e:95:e9:e6:f4:f9:e1:f1:48:
05:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0E:C7:1B:4C:D8:38:A3:31:32:20:A2:00:89:3E:F4:57:12:5A:9A
X509v3 Authority Key Identifier:
keyid:6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/DQ7HG0zYOKMxMiCiAIk-9FcSWpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.192.0/22
Signature Algorithm: sha256WithRSAEncryption
88:27:f5:7f:ac:ef:bb:9d:29:47:61:03:56:ab:e9:d4:4b:86:
96:cc:f7:87:19:7b:84:c4:6b:25:b4:41:1c:e3:3e:1d:4b:68:
96:c4:66:ff:0f:04:0d:a9:b7:44:29:20:8f:3a:72:26:57:bc:
24:44:72:af:0b:98:db:c7:37:79:9a:07:0c:2f:58:70:55:b8:
b1:ba:62:bb:58:a1:5f:88:f6:3c:ca:74:b4:93:f6:71:cf:f7:
e4:cc:39:fc:38:66:4f:3e:49:81:c5:b2:c9:ab:9d:65:bf:5b:
27:b4:d6:a9:00:22:f9:76:66:c5:5f:74:ba:2f:80:97:b4:63:
5e:80:c9:75:cc:4a:3f:b4:42:55:1f:37:5e:b4:27:ea:9c:be:
62:da:3c:8a:f7:75:18:f8:57:fe:2a:8d:f8:f0:c7:a3:f2:ea:
97:5e:a7:c8:a7:0d:55:8f:cd:78:e0:4a:82:74:7e:79:56:d6:
cc:91:a7:42:d3:02:7b:7e:f8:d2:62:19:8d:07:79:d9:d2:26:
4b:01:8f:78:69:76:75:47:11:d6:0b:2c:08:12:fe:0d:01:74:
b6:c9:60:1b:61:d3:f0:31:11:26:b1:75:c1:24:51:18:b9:d2:
24:2c:15:bb:af:79:f9:43:9b:0d:65:e0:3d:96:90:81:19:38:
2b:75:0c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:16 2024 by rpki-client on console.sobornost.net