Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/eu8VwaKVq4lVsR7IkPrzlZl_4dg.roa
File: eu8VwaKVq4lVsR7IkPrzlZl_4dg.roa (raw, json)
Hash identifier: Wv0DE4KJQoe1eZhByySsO3YDICNPoVXr9CBO31/TDQs=
Subject key identifier: 7A:EF:15:C1:A2:95:AB:89:55:B1:1E:C8:90:FA:F3:95:99:7F:E1:D8
Certificate issuer: /CN=8b054485ee62c6f1939613cba20669eef4504f79
Certificate serial: 0190A584AE4D8A0AE2AFED1F415CBE748E42
Authority key identifier: 8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/eu8VwaKVq4lVsR7IkPrzlZl_4dg.roa
Signing time: Fri 12 Jul 2024 05:57:34 +0000
ROA not before: Fri 12 Jul 2024 05:57:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59908
IP address blocks: 141.170.208.0/21 maxlen: 24
141.170.214.0/24 maxlen: 24
185.67.112.0/24 maxlen: 24
185.67.114.0/24 maxlen: 24
185.67.115.0/24 maxlen: 24
2a00:a3a0::/32 maxlen: 96
2a03:2460::/32 maxlen: 96
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a5:84:ae:4d:8a:0a:e2:af:ed:1f:41:5c:be:74:8e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b054485ee62c6f1939613cba20669eef4504f79
Validity
Not Before: Jul 12 05:57:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7aef15c1a295ab8955b11ec890faf395997fe1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:24:e7:20:43:08:a2:cb:a5:a2:29:87:10:
e7:b5:c6:cf:b5:5a:a7:99:e0:70:6c:59:4b:68:70:
cb:8b:d3:3c:0c:84:01:e2:64:85:2e:5b:5c:1d:e2:
d4:7b:c4:81:43:90:a4:f9:7f:63:24:6d:b2:1b:0d:
57:f8:b0:6e:da:41:a0:46:0f:aa:f0:e9:ff:73:42:
50:42:22:ec:99:63:13:b8:28:c7:0c:60:5e:fd:2e:
c0:87:6d:50:5a:66:7c:77:c7:a5:3c:34:ea:40:9f:
14:07:ad:0f:af:79:02:47:b7:ea:96:76:54:da:a9:
5b:5c:b0:0e:76:9b:11:dd:26:da:06:e0:d2:ad:76:
b0:47:e8:75:07:7c:c7:e0:ef:8e:04:40:2b:e1:b1:
61:bc:b5:b3:d7:ae:09:50:e3:75:0a:2a:89:de:d1:
c9:46:91:fc:5c:ee:7e:18:48:4e:f8:fd:94:07:1d:
4d:95:1d:5a:cb:ea:cd:a7:f8:74:57:66:76:aa:41:
25:b3:b2:16:9c:b0:f9:85:18:ba:7d:41:e2:22:b0:
48:c3:20:4d:50:f6:91:49:d0:b1:93:71:20:88:4e:
3f:85:24:bc:12:af:4b:e2:b1:56:57:dc:2c:f2:b2:
5e:dc:d1:0e:68:f8:4a:25:bd:f4:9e:97:df:8f:83:
02:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EF:15:C1:A2:95:AB:89:55:B1:1E:C8:90:FA:F3:95:99:7F:E1:D8
X509v3 Authority Key Identifier:
keyid:8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/eu8VwaKVq4lVsR7IkPrzlZl_4dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.170.208.0/21
185.67.112.0/24
185.67.114.0/23
IPv6:
2a00:a3a0::/32
2a03:2460::/32
Signature Algorithm: sha256WithRSAEncryption
1a:7f:4d:b9:29:da:c1:a3:56:f8:dc:85:50:47:a6:3e:21:7e:
87:a8:9d:f5:29:9c:6e:a3:f5:62:2a:8d:15:30:d6:c4:b2:2a:
f7:a9:30:42:6e:69:fc:cd:7f:61:13:8b:37:cd:93:f8:f5:9a:
0d:36:cc:3d:42:ae:fa:3a:d3:6f:c1:01:23:0a:c0:b3:81:88:
e1:f2:9f:95:fb:89:8d:9e:4c:7f:81:07:ea:1c:21:a9:81:40:
13:27:ba:19:97:f8:36:59:72:1c:2f:4d:7f:f0:31:23:dd:38:
11:0a:2e:ac:76:bb:6a:04:d0:16:5b:4c:78:41:2e:e9:1d:8c:
74:25:21:70:0d:7b:92:b5:ef:49:54:0b:1f:4f:c0:d7:0d:9d:
b8:85:7f:dd:df:3c:2e:49:9a:85:86:4d:1b:70:55:5c:c3:05:
7d:08:15:ca:10:2e:15:6d:2f:83:f0:67:3c:e3:8f:da:d9:a2:
dd:b8:c4:5a:2f:76:ab:ff:4a:6b:b3:1a:fa:92:54:3b:3a:ad:
aa:e5:40:ba:9d:bd:b2:27:55:6d:cf:99:1b:b2:df:46:ee:0d:
bf:ac:16:dc:43:5d:48:72:4b:8f:41:d8:06:07:ea:7f:ec:b6:
e9:6e:60:05:49:c3:2c:b8:ff:1f:fd:f8:5a:45:ec:2d:6a:b0:
12:fb:0a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:57 2024 by rpki-client on console.sobornost.net