Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/IyCbbsnbl5UZQlFYtM_Lx7ATDWc.roa
File: IyCbbsnbl5UZQlFYtM_Lx7ATDWc.roa (raw, json)
Hash identifier: 82VlywASCKHu5OazvbjSvHKLf4CO/3CNZmZQBhT7CkQ=
Subject key identifier: 23:20:9B:6E:C9:DB:97:95:19:42:51:58:B4:CF:CB:C7:B0:13:0D:67
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 03C4E1CD
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/IyCbbsnbl5UZQlFYtM_Lx7ATDWc.roa
Signing time: Fri 04 Mar 2022 06:47:25 +0000
ROA not before: Fri 04 Mar 2022 06:47:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.229.200.0/22 maxlen: 24
185.213.240.0/22 maxlen: 24
185.130.60.0/22 maxlen: 24
185.244.94.0/24 maxlen: 24
185.111.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63234509 (0x3c4e1cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Mar 4 06:47:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23209b6ec9db979519425158b4cfcbc7b0130d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dc:01:f8:28:cb:02:d7:fb:d3:3c:8d:58:a8:
a3:59:e0:c6:10:49:2a:30:a3:36:27:e5:86:25:5f:
16:4c:03:ce:73:cd:98:a3:0d:9a:63:aa:2a:d9:bf:
8d:f7:76:a7:9f:29:f2:97:55:06:fb:6d:af:89:02:
86:98:1f:f5:66:d5:f9:95:60:c5:c4:6c:d7:2a:a7:
64:3f:d5:ec:ae:e0:d5:48:37:f9:06:e7:fc:18:dd:
d3:8e:7c:f6:d6:6b:6d:10:d9:93:dd:f1:7c:d6:33:
e5:5d:71:ed:44:cb:3a:2a:db:44:d7:49:62:8b:1c:
c8:07:aa:53:58:01:3e:8a:0a:ad:aa:2c:51:67:96:
67:1d:0c:4f:49:46:c0:13:19:0c:1e:b0:e4:83:bc:
48:fd:7a:62:f4:d8:dc:fa:72:0e:96:b5:25:b7:d0:
ce:c8:ea:fc:43:72:b4:88:70:99:0a:0e:b8:5a:1f:
19:30:6e:22:da:3d:cc:e9:e5:a8:11:d1:20:39:6a:
7a:9c:6a:76:17:e2:c1:6e:f0:17:82:93:27:9d:16:
07:b7:0a:29:f3:ed:3a:50:15:78:8f:08:f0:ac:c8:
70:bf:35:a7:40:44:e5:bb:70:23:18:33:ba:9b:ab:
cf:46:4d:6a:80:a9:d2:eb:3f:5f:a8:04:20:84:b3:
32:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:20:9B:6E:C9:DB:97:95:19:42:51:58:B4:CF:CB:C7:B0:13:0D:67
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/IyCbbsnbl5UZQlFYtM_Lx7ATDWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.188.0/24
185.130.60.0/22
185.213.240.0/22
185.229.200.0/22
185.244.94.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:18:cd:be:1d:d5:07:e4:57:4f:5b:f3:75:6c:9a:c4:8d:76:
c9:83:81:d8:c9:6f:6b:2f:22:a5:4f:b6:b3:47:58:a2:13:23:
cd:be:59:40:86:10:19:4d:fe:73:6c:92:f4:ee:06:c9:3f:97:
93:25:91:81:cf:df:d8:b2:9a:74:33:cf:d0:5b:02:29:d2:ca:
86:b6:8a:e0:e8:48:9c:1f:f3:b6:67:af:cb:3e:91:fb:d9:74:
fc:3f:67:0d:0a:96:20:7e:35:dc:b8:0b:b2:ee:e3:9f:c1:3d:
e1:6f:ca:55:ab:8c:2e:68:7f:7d:a4:3c:45:3a:bb:e1:3d:ac:
0c:bf:ff:d9:ea:11:33:1a:6b:a7:0a:94:3c:7a:7b:e9:00:7a:
c4:10:e2:01:2d:a5:53:7e:9a:2c:61:7a:e3:cd:1d:75:4e:a5:
c8:a4:cf:b4:5f:e2:b0:92:18:9d:36:cc:cc:0b:33:ca:92:98:
f3:3b:e8:4c:67:31:d3:71:8e:2e:86:46:e3:cd:7c:47:41:79:
87:f5:67:84:c9:3c:a4:c6:63:c9:c9:f4:42:2e:d0:84:b1:88:
37:a5:e7:6e:f5:31:a0:b4:b7:1a:71:29:eb:72:9e:4b:97:60:
8d:36:35:46:87:eb:4a:80:81:dc:9a:1f:f6:b9:4c:81:4f:83:
a5:e5:7f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:28 2023 by rpki-client on console.sobornost.net