Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/86f350-94df-4830-8e9b-fb0443b8d9be/1/QKsiq8ZNySBN5ZphIC-SA_YBbpc.roa
File: QKsiq8ZNySBN5ZphIC-SA_YBbpc.roa (raw, json)
Hash identifier: ZH0prVfAr9Y+qTMaGI+5QiwUeqC9ryMkLoAhYe5hlQs=
Subject key identifier: 40:AB:22:AB:C6:4D:C9:20:4D:E5:9A:61:20:2F:92:03:F6:01:6E:97
Certificate issuer: /CN=ba7966ecfd8bc2d31833f70afba4f7f8a15b24a3
Certificate serial: 018F75565F32717BA94E58D4290EE19FBA89
Authority key identifier: BA:79:66:EC:FD:8B:C2:D3:18:33:F7:0A:FB:A4:F7:F8:A1:5B:24:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unlm7P2LwtMYM_cK-6T3-KFbJKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/86f350-94df-4830-8e9b-fb0443b8d9be/1/QKsiq8ZNySBN5ZphIC-SA_YBbpc.roa
Signing time: Tue 14 May 2024 04:22:25 +0000
ROA not before: Tue 14 May 2024 04:22:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23422
IP address blocks: 185.215.225.0/24 maxlen: 24
185.215.226.0/24 maxlen: 24
2a0b:ae40:5::/48 maxlen: 48
2a0b:ae40:6::/48 maxlen: 48
2a0b:ae40:7::/48 maxlen: 48
2a0b:ae40:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:75:56:5f:32:71:7b:a9:4e:58:d4:29:0e:e1:9f:ba:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7966ecfd8bc2d31833f70afba4f7f8a15b24a3
Validity
Not Before: May 14 04:22:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40ab22abc64dc9204de59a61202f9203f6016e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:c1:3f:c9:52:a7:7c:4c:55:cf:98:0a:b5:
2d:b6:6e:a4:d6:8c:23:cf:dc:e6:a8:16:1b:07:1a:
26:c2:69:d4:6f:88:4a:68:ae:42:b0:f9:99:69:24:
d8:eb:c2:86:9e:f2:ef:37:4d:52:68:db:38:a0:03:
9d:ca:cf:40:57:97:88:9c:5a:3a:51:26:46:68:09:
ac:77:66:9c:b6:ed:6a:ab:ad:69:6a:82:15:00:b1:
42:d3:e1:09:ac:48:72:f8:2a:71:e7:cd:88:07:e4:
d3:47:04:ee:10:4f:a4:fb:44:43:49:4f:81:cc:f9:
e3:76:3c:8d:0d:fa:d2:90:42:f0:e1:08:c1:90:54:
98:c7:27:af:4d:4e:16:71:81:5d:d7:28:ac:54:7d:
17:7a:ac:5c:02:97:69:0b:17:cb:a3:e0:e1:62:92:
44:38:0d:63:91:c5:d6:68:3b:5e:86:fe:75:ed:0b:
bc:d8:0b:84:44:07:de:23:fd:2d:b3:01:cd:58:ed:
4a:ab:75:ce:07:68:5f:d4:e6:5e:65:d2:42:4f:27:
dc:eb:c0:0d:4c:ae:75:cb:75:0d:19:11:5a:f9:01:
c8:ce:01:90:00:05:1b:ab:9b:58:e3:8f:e0:cc:ab:
99:8f:49:3f:98:4e:8f:19:bd:9c:eb:6d:16:9a:09:
86:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AB:22:AB:C6:4D:C9:20:4D:E5:9A:61:20:2F:92:03:F6:01:6E:97
X509v3 Authority Key Identifier:
keyid:BA:79:66:EC:FD:8B:C2:D3:18:33:F7:0A:FB:A4:F7:F8:A1:5B:24:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unlm7P2LwtMYM_cK-6T3-KFbJKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/86f350-94df-4830-8e9b-fb0443b8d9be/1/QKsiq8ZNySBN5ZphIC-SA_YBbpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/86f350-94df-4830-8e9b-fb0443b8d9be/1/unlm7P2LwtMYM_cK-6T3-KFbJKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.225.0-185.215.226.255
IPv6:
2a0b:ae40:5::-2a0b:ae40:8:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8e:f2:2d:2e:ba:d0:17:78:a7:f2:22:8a:22:e9:96:77:2a:0f:
77:ff:36:8f:74:71:77:1d:aa:31:5c:92:66:cb:e3:ed:fd:57:
56:29:ca:b1:0a:e3:ac:60:56:1a:d4:37:f0:4d:b1:4d:0c:07:
1f:77:b3:4d:a8:b7:ec:24:2a:4d:5e:94:f2:a0:43:e9:d7:53:
e8:f5:c1:6b:6f:24:1a:ab:28:6d:b0:30:b9:93:3b:e1:ef:93:
03:11:21:5c:d9:b2:8f:a4:c0:b0:85:17:c3:58:c9:1b:49:3f:
44:e4:1e:b8:98:1e:a5:00:33:14:82:7a:56:c7:20:d7:9f:e1:
49:34:1b:af:12:2f:a6:5a:2a:2e:f8:35:81:83:22:03:2c:92:
cd:96:14:1b:1d:6a:7d:ad:eb:c6:73:5f:b9:54:38:a0:39:40:
34:ed:a7:dc:93:a0:0e:fa:89:9e:71:aa:71:b5:9b:ee:be:1a:
24:51:8b:aa:b9:97:23:3e:8b:06:53:9c:e1:e7:d8:0e:fa:62:
dc:79:b1:de:8d:99:a8:8c:24:23:eb:0b:0c:15:3c:82:d7:28:
ea:29:58:ff:49:d3:16:82:12:eb:ea:a1:c0:5a:ca:61:f8:8a:
72:3d:fd:6f:86:a9:b0:00:95:11:ac:58:07:b8:6f:d2:e4:de:
b2:03:98:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 20:10:37 2024 by rpki-client on console.sobornost.net