Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/f81l534op575IqhcgSW63muOefA.roa
File: f81l534op575IqhcgSW63muOefA.roa (raw, json)
Hash identifier: apN8nqDqS3zRIxbkLE/nuAGQWa8JX3rr748nJl22UOA=
Subject key identifier: 7F:CD:65:E7:7E:28:A7:9E:F9:22:A8:5C:81:25:BA:DE:6B:8E:79:F0
Certificate issuer: /CN=a663abd479cbff76082304bf60d03adc3187d936
Certificate serial: 018CC26D1648240FEDD6DFD1167F872EE091
Authority key identifier: A6:63:AB:D4:79:CB:FF:76:08:23:04:BF:60:D0:3A:DC:31:87:D9:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmOr1HnL_3YIIwS_YNA63DGH2TY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/f81l534op575IqhcgSW63muOefA.roa
Signing time: Mon 01 Jan 2024 00:29:38 +0000
ROA not before: Mon 01 Jan 2024 00:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53889
IP address blocks: 185.198.89.0/24 maxlen: 24
185.198.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:16:48:24:0f:ed:d6:df:d1:16:7f:87:2e:e0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a663abd479cbff76082304bf60d03adc3187d936
Validity
Not Before: Jan 1 00:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fcd65e77e28a79ef922a85c8125bade6b8e79f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0e:3c:9a:d4:af:8c:a0:c4:20:f2:f3:f9:69:
57:70:34:ae:0d:92:7b:ab:c5:fb:3c:e7:a2:30:50:
92:8d:4b:2d:00:ff:6e:a5:ff:8e:0d:04:6d:1e:50:
a7:16:ac:97:ba:d2:52:8d:5b:6e:6b:e5:60:6b:cb:
86:79:2b:86:74:b3:a4:13:d6:98:43:cf:00:00:36:
24:1e:87:d3:c7:a2:28:b8:83:5e:c6:45:c9:80:a8:
92:ca:57:3d:55:d8:9a:8d:aa:b7:2c:8a:4a:13:68:
6c:27:e6:5d:18:c9:c5:4b:82:37:27:ae:25:0a:51:
61:5f:e8:fe:e7:5b:8c:fa:d9:0f:52:44:cc:b6:91:
bf:fe:81:de:56:e2:1e:72:91:4f:24:cd:2d:c3:50:
55:c9:72:8c:fa:bd:4b:50:6d:bb:6e:11:f2:be:a6:
52:f3:f2:ee:dc:ea:6c:2e:5f:7e:52:1d:25:83:c7:
e9:1b:c1:b6:0d:52:fa:a6:30:1f:c0:42:6f:e9:52:
03:9c:52:a9:d8:26:06:63:2d:8d:bf:92:a3:40:b0:
ef:30:38:87:b7:5e:e5:eb:32:b0:84:2c:01:80:18:
c7:9a:cf:79:b3:b2:33:15:88:9e:85:5e:5e:8b:a3:
63:23:41:f3:1b:5d:2d:47:ff:11:02:3f:df:e6:10:
67:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CD:65:E7:7E:28:A7:9E:F9:22:A8:5C:81:25:BA:DE:6B:8E:79:F0
X509v3 Authority Key Identifier:
keyid:A6:63:AB:D4:79:CB:FF:76:08:23:04:BF:60:D0:3A:DC:31:87:D9:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmOr1HnL_3YIIwS_YNA63DGH2TY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/f81l534op575IqhcgSW63muOefA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/pmOr1HnL_3YIIwS_YNA63DGH2TY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.89.0/24
185.198.91.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:57:9f:7c:2d:62:f6:6d:1f:90:28:de:3b:03:46:82:45:d6:
52:4b:0c:fc:5b:ef:d9:a6:60:a1:80:06:44:23:a5:2d:66:c4:
3c:4d:d5:02:a2:72:d1:44:71:78:0d:41:cb:b7:7a:24:d9:a9:
42:86:54:f0:55:71:dd:ea:69:36:7a:dc:96:57:d5:62:e3:f9:
39:98:32:c9:41:12:b3:dd:4d:3a:46:62:66:f2:48:c4:95:78:
ce:b2:04:fb:aa:52:51:b7:6b:21:71:39:20:e4:f2:10:af:7f:
85:7f:3a:2f:9a:8a:0f:1a:92:44:6b:8e:16:64:53:1b:cf:1c:
0d:01:25:cd:5b:00:8c:35:88:a4:69:e2:34:22:66:f1:3e:81:
57:23:fa:7f:e6:15:70:28:25:27:35:2b:f3:41:32:30:d6:9e:
fb:ca:ef:40:e6:85:39:a0:f6:b6:34:7b:db:6c:fb:19:86:7d:
5e:8f:a9:51:36:bd:11:0a:af:19:b5:e8:43:8b:9d:6d:35:6b:
4e:d6:a7:84:32:56:c0:db:93:11:e7:3e:66:62:d5:f6:ad:79:
ce:0d:d5:d3:ac:ae:6a:a9:1b:11:48:f5:2c:22:cb:d1:1a:c1:
5a:62:9b:49:22:76:da:76:c9:8c:75:b0:70:00:b5:94:e3:eb:
60:80:38:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:38 2024 by rpki-client on console.sobornost.net