Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/dAoRtHGz8v9gn3dwiSUNcECxQcI.roa
File: dAoRtHGz8v9gn3dwiSUNcECxQcI.roa (raw, json)
Hash identifier: 2o1oue6v4hMyYlvF8EBu60qcxe+e8uGlUvg97L35NvU=
Subject key identifier: 74:0A:11:B4:71:B3:F2:FF:60:9F:77:70:89:25:0D:70:40:B1:41:C2
Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial: 0193D40783D5B213A202FFE447939A068F99
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/dAoRtHGz8v9gn3dwiSUNcECxQcI.roa
Signing time: Tue 17 Dec 2024 09:51:22 +0000
ROA not before: Tue 17 Dec 2024 09:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31727
IP address blocks: 185.170.152.0/22 maxlen: 22
185.207.132.0/22 maxlen: 22
185.207.132.0/23 maxlen: 23
185.207.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d4:07:83:d5:b2:13:a2:02:ff:e4:47:93:9a:06:8f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Validity
Not Before: Dec 17 09:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=740a11b471b3f2ff609f777089250d7040b141c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:58:99:8f:e8:2b:68:25:45:ec:b2:83:f5:cf:
9d:3a:1e:51:5c:ac:54:d0:c6:51:be:52:0a:43:f0:
39:7d:0e:c8:cb:10:d7:d0:dc:5d:de:8d:03:1c:ac:
1f:9c:1b:8e:6f:b9:d8:ce:ab:7c:92:1a:06:2e:b8:
bc:2c:e9:3b:85:da:9a:2c:c1:9e:4d:e4:71:dc:ed:
e5:9e:ef:f2:59:2c:3f:68:86:60:da:66:82:a5:99:
09:79:ad:e2:b3:e6:97:3f:06:df:f5:e4:77:bb:41:
ac:55:fb:44:b8:10:8f:40:c5:23:7a:15:ca:ed:d5:
43:34:ff:6e:a8:3f:22:c9:1a:f8:a0:35:e1:89:66:
7e:05:51:7f:a4:87:53:52:2c:ab:10:48:9e:24:55:
2d:f7:cf:76:35:26:f4:59:aa:ed:fd:48:ee:22:cb:
31:5f:72:7d:88:b8:17:3a:ed:8e:66:f1:81:02:e1:
f4:9a:65:5b:5f:f3:d2:d4:d1:59:ec:49:b0:ef:0f:
10:ad:f4:2f:33:04:3e:d8:f8:28:95:62:b9:ff:52:
c1:6c:ae:57:54:b4:c6:69:31:a1:09:bb:a5:f1:9a:
ff:db:cc:f2:f2:eb:f2:98:b3:63:0b:b7:3a:02:f8:
83:17:95:36:2e:12:e5:b6:7f:25:c9:90:22:db:bb:
d9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0A:11:B4:71:B3:F2:FF:60:9F:77:70:89:25:0D:70:40:B1:41:C2
X509v3 Authority Key Identifier:
keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/dAoRtHGz8v9gn3dwiSUNcECxQcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.152.0/22
185.207.132.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:99:c9:53:90:4e:0c:b7:f4:5e:23:eb:e8:24:3a:1d:fe:5f:
25:3c:24:8a:cb:f0:54:2e:dc:ed:b3:20:e6:7b:fd:c1:d7:67:
9d:04:83:77:b5:de:df:80:ca:db:38:c4:c4:bb:bd:8c:e3:d0:
6f:1e:f1:04:6a:89:61:c7:23:fa:01:15:ab:61:a9:04:6b:0d:
76:ba:26:50:cd:96:fe:2c:48:a3:17:c5:6e:dc:b9:34:12:1b:
ba:03:f9:10:44:6e:4a:d1:08:5f:d2:91:af:d8:1f:a1:fa:6d:
14:78:56:f6:5a:6c:9a:a4:18:74:17:d9:1d:bf:5a:f6:c3:4f:
e3:b7:9d:7c:8d:53:1b:71:45:52:02:f1:6a:49:ba:04:b2:b0:
3f:9a:23:cd:6c:26:fc:fa:24:f9:c3:33:c5:9f:4b:e3:03:fb:
e6:43:05:dd:97:0b:40:ab:be:8d:8e:18:86:31:ef:71:a7:1e:
45:15:8e:0e:02:fc:3c:d6:d6:5b:c0:61:67:7b:fd:6a:18:a6:
f8:9e:f2:45:18:3a:10:57:bf:43:7b:88:b2:cd:5f:a7:aa:15:
97:c7:d4:d5:14:4d:b1:f9:89:67:8c:70:5e:18:d0:32:7f:65:
93:03:41:17:f0:c7:71:1c:64:3a:47:97:d7:e2:ef:ef:91:34:
0a:2d:a2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:52 2024 by rpki-client on console.sobornost.net