Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/dmSs0FFsoIOD62vJ0ok7N7YzVDk.roa
File: dmSs0FFsoIOD62vJ0ok7N7YzVDk.roa (raw, json)
Hash identifier: MJ1ftmDQLvwXnkMSd8lMtqHhawuCmf+tcdlm0TaGQqM=
Subject key identifier: 76:64:AC:D0:51:6C:A0:83:83:EB:6B:C9:D2:89:3B:37:B6:33:54:39
Certificate issuer: /CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
Certificate serial: 018EC75CD0AB3880BCD60A18BDFE40A8FC61
Authority key identifier: AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/dmSs0FFsoIOD62vJ0ok7N7YzVDk.roa
Signing time: Wed 10 Apr 2024 09:35:32 +0000
ROA not before: Wed 10 Apr 2024 09:35:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58075
IP address blocks: 185.114.236.0/22 maxlen: 24
194.29.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c7:5c:d0:ab:38:80:bc:d6:0a:18:bd:fe:40:a8:fc:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
Validity
Not Before: Apr 10 09:35:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7664acd0516ca08383eb6bc9d2893b37b6335439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:32:56:b5:d1:c0:b0:5a:4a:dc:b8:dd:ee:6f:
6e:80:15:a9:ca:87:34:ac:eb:e1:34:15:db:f4:ff:
6c:23:4d:5f:60:60:4c:a3:5f:e3:6a:b0:a4:84:25:
ae:67:83:e0:39:db:2b:1c:49:55:a4:5f:04:f4:98:
78:58:88:b3:f8:b6:a2:67:58:b0:95:69:33:56:81:
3e:b7:a1:d6:72:6d:12:bf:23:e3:b4:0e:26:2e:02:
b5:c2:20:3c:23:13:9a:39:3e:88:8a:06:d7:6a:6e:
b0:d2:35:1e:aa:3d:a4:67:9b:bf:13:c8:ed:96:02:
d0:75:4d:67:dd:09:1c:2e:85:5c:59:b3:0c:14:8e:
30:af:b5:d8:d5:7b:d4:da:9c:33:34:3a:81:22:b8:
b8:dc:0a:57:84:69:eb:15:de:2e:2d:05:b5:c3:a1:
e1:51:c8:58:fe:a5:06:68:1f:40:78:9c:e5:27:3f:
39:bd:ab:39:3e:87:17:1b:93:f1:e3:ac:97:d0:7a:
dc:32:f3:e9:69:55:86:94:28:b1:b1:14:63:2c:c3:
ef:ed:cf:14:22:a6:49:46:88:f7:dc:a7:86:94:84:
fb:87:b5:a2:dd:4c:60:7c:5b:90:2c:cb:4f:35:40:
82:95:2f:12:a3:f4:bc:10:87:1a:55:6c:27:b5:81:
e5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:64:AC:D0:51:6C:A0:83:83:EB:6B:C9:D2:89:3B:37:B6:33:54:39
X509v3 Authority Key Identifier:
keyid:AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/dmSs0FFsoIOD62vJ0ok7N7YzVDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.236.0/22
194.29.52.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:ae:50:c1:f0:cb:39:90:2f:ca:65:d2:9e:f4:b4:5a:58:af:
db:ff:91:a8:d0:6e:90:78:99:ce:95:67:4a:37:be:84:c8:30:
67:c8:0b:15:eb:1f:a8:3a:e4:9a:5e:58:f4:f6:07:bd:9c:cc:
7c:c7:b4:1b:05:e8:25:07:a9:3d:b6:03:69:89:9d:b2:fe:c8:
87:40:6b:ce:f2:b8:b9:93:14:3f:6d:a8:e8:2b:26:cb:87:f1:
a9:d4:ba:a4:97:f3:e8:dc:e8:ad:a4:29:ea:e9:01:b6:f8:33:
41:3a:ba:4c:86:6d:31:ea:a5:6c:af:ef:ab:58:fb:9b:6d:09:
6a:ad:99:71:0d:1b:96:fc:fb:0d:a7:5e:da:a0:30:fb:95:3e:
c4:49:98:96:cc:57:96:6f:ac:c6:54:53:78:bc:bc:82:45:15:
ec:66:b2:1f:51:6a:a9:90:76:41:47:e7:0b:e2:58:72:ed:3c:
e5:5e:d7:4f:81:eb:e3:3f:99:8c:11:81:d6:ce:f9:33:3f:a9:
93:4f:6d:a2:99:73:84:7a:69:59:42:5b:b0:ec:44:9e:87:bf:
6f:5e:d8:ab:29:e2:34:16:fb:f6:4b:ec:ba:a7:aa:99:91:e3:
17:5c:22:57:b8:d7:b3:35:33:4b:95:eb:a8:63:8d:cf:80:c8:
5b:df:8e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:56:31 2024 by rpki-client on console.sobornost.net