Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/2G5ntGBcG_ZM8HPAUQtkRp6QzGs.roa
File: 2G5ntGBcG_ZM8HPAUQtkRp6QzGs.roa (raw, json)
Hash identifier: 4g/tiPeqN+EQ82QqJ6s1Go672vx7lJDp8DC52LBjMGI=
Subject key identifier: D8:6E:67:B4:60:5C:1B:F6:4C:F0:73:C0:51:0B:64:46:9E:90:CC:6B
Certificate issuer: /CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447
Certificate serial: 0191B6E1942E838F006B42E19AEA82275432
Authority key identifier: AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/2G5ntGBcG_ZM8HPAUQtkRp6QzGs.roa
Signing time: Tue 03 Sep 2024 07:55:22 +0000
ROA not before: Tue 03 Sep 2024 07:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202022
IP address blocks: 185.56.32.0/22 maxlen: 22
185.160.56.0/23 maxlen: 23
185.160.58.0/24 maxlen: 24
2a04:d7c0::/29 maxlen: 29
2a07:ba40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b6:e1:94:2e:83:8f:00:6b:42:e1:9a:ea:82:27:54:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447
Validity
Not Before: Sep 3 07:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d86e67b4605c1bf64cf073c0510b64469e90cc6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:35:c7:57:00:7e:e2:cb:75:6e:85:9c:f3:d6:
13:aa:f4:aa:14:f6:40:3e:85:03:17:67:a5:58:c9:
c6:90:b4:34:8f:57:de:3e:6e:4c:d3:31:c0:ad:e5:
67:6d:40:6a:01:21:68:b6:a1:28:53:f4:bb:07:cc:
8b:60:f1:ca:46:0b:25:38:a8:16:05:b6:00:6f:34:
c5:79:89:09:4c:32:56:31:2c:07:91:68:37:6e:b4:
1b:9f:ea:30:4a:cb:7d:68:e6:93:e0:a7:f1:02:ee:
81:03:ba:08:ea:f0:ee:38:83:a5:27:f1:23:f9:f3:
6d:87:a3:75:91:af:c1:ae:92:84:34:33:67:23:bb:
6a:07:f9:a5:5a:f5:01:f0:d0:c9:90:4d:43:c9:12:
df:b0:f7:5a:42:52:aa:8a:0e:1e:f6:5e:c5:88:86:
35:ea:66:9c:e6:fe:fd:f1:33:d7:65:4a:8d:6a:65:
7c:bb:ec:70:11:14:fa:58:4e:d0:4a:30:04:db:20:
59:12:79:65:b0:31:9e:af:77:74:90:52:b4:b6:28:
56:e2:20:81:46:04:0b:98:7b:52:13:27:b5:a5:3b:
44:b5:e6:19:a7:a4:da:94:83:1f:a6:14:b6:46:73:
92:cb:2a:71:7d:26:60:b0:09:d9:de:63:c2:80:71:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6E:67:B4:60:5C:1B:F6:4C:F0:73:C0:51:0B:64:46:9E:90:CC:6B
X509v3 Authority Key Identifier:
keyid:AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/2G5ntGBcG_ZM8HPAUQtkRp6QzGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.32.0/22
185.160.56.0-185.160.58.255
IPv6:
2a04:d7c0::/29
2a07:ba40::/29
Signature Algorithm: sha256WithRSAEncryption
4e:84:a1:8f:92:c8:08:86:f9:1d:a4:10:6e:81:95:64:a3:2a:
ed:96:9d:8b:f8:99:0a:9a:98:57:97:9b:7d:4d:cd:4e:7f:19:
43:28:f5:97:04:a7:91:5b:cf:6c:de:09:b9:94:3b:d7:b9:1a:
c8:e6:d1:eb:b5:16:8c:c0:13:4d:41:8a:95:fa:f6:3b:4c:25:
e6:b9:2c:c7:c9:7c:1f:93:91:d7:74:32:9e:4a:d5:f0:cd:60:
a3:44:0b:3b:fa:8b:b5:73:23:6a:31:fe:b7:a9:1a:5a:a5:5f:
2f:f4:f0:69:90:f4:cc:13:f9:be:c5:e0:71:de:e2:a9:74:9d:
2a:13:48:00:8e:d4:e3:e7:54:c9:a1:8f:92:71:06:c0:a9:f0:
19:b5:60:91:51:ef:44:ac:00:3a:26:f1:72:35:fa:03:2e:08:
5c:ef:02:98:1a:03:07:f2:b8:4f:12:da:38:af:36:6e:c3:cc:
d3:b1:f9:84:bc:6e:86:dc:9c:e2:67:38:42:14:2c:fb:ad:fd:
bd:3c:f7:e2:72:60:d6:41:0a:6a:dc:c9:e0:59:2f:26:f1:89:
22:59:d5:9a:cd:51:9c:73:22:4a:c5:4b:dd:28:9f:04:1e:5f:
70:3a:0b:19:d6:e8:55:ac:3e:32:ff:af:e7:90:f3:f6:49:a0:
85:e8:69:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:27 2024 by rpki-client on console.sobornost.net