Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/2Up4TbbgBYuMFKlFp49XFayZNBo.roa
File: 2Up4TbbgBYuMFKlFp49XFayZNBo.roa (raw, json)
Hash identifier: DA4Q1etC+Ciq1GgfQo3OFM0u0nVzCfcYZO28fHWM+24=
Subject key identifier: D9:4A:78:4D:B6:E0:05:8B:8C:14:A9:45:A7:8F:57:15:AC:99:34:1A
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 019248667EEB3AA76503C208625378277F6E
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/2Up4TbbgBYuMFKlFp49XFayZNBo.roa
Signing time: Tue 01 Oct 2024 14:05:29 +0000
ROA not before: Tue 01 Oct 2024 14:05:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32787
IP address blocks: 185.174.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:48:66:7e:eb:3a:a7:65:03:c2:08:62:53:78:27:7f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Oct 1 14:05:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d94a784db6e0058b8c14a945a78f5715ac99341a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:11:0c:51:81:6a:21:5a:6a:74:e6:fe:e9:07:
b0:cd:a0:6c:d6:39:4b:48:6b:18:77:7c:12:3c:16:
7d:78:ba:c7:02:a7:58:7c:3e:eb:d9:86:43:a0:f5:
26:95:62:34:57:1a:f5:1c:43:fc:81:f5:c6:20:02:
49:ad:eb:b0:a7:21:85:f9:66:68:9e:4f:44:e5:3f:
15:e2:61:65:a2:6d:5f:1b:af:a4:61:e7:ec:92:c0:
9f:02:16:5a:0b:31:0b:fb:03:d2:ea:a5:12:79:6f:
54:85:6d:42:77:f2:2c:48:62:f1:b3:d8:3e:f4:4d:
4b:be:8b:42:fd:a5:51:92:7f:32:84:98:22:51:28:
2f:36:75:cf:23:2d:9d:d3:9b:9b:d5:2b:68:93:83:
88:e6:0e:3e:50:58:ad:67:d0:ff:12:38:f2:9a:ca:
43:a3:9d:84:9d:c1:9b:f8:ad:0b:2c:24:5c:a0:c9:
3f:75:4e:4b:b3:ee:92:81:a2:03:a1:58:cf:aa:de:
7b:b3:de:d5:7a:a1:58:aa:9a:fa:69:25:90:44:47:
9f:be:c7:3d:ac:63:ad:4b:2c:72:4a:41:ae:e5:b0:
80:3f:5c:66:66:09:36:b0:4f:7a:55:29:3a:67:1b:
30:bb:72:5b:4a:47:2c:9f:a0:73:7b:bb:86:95:ab:
a6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4A:78:4D:B6:E0:05:8B:8C:14:A9:45:A7:8F:57:15:AC:99:34:1A
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/2Up4TbbgBYuMFKlFp49XFayZNBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.149.0/24
Signature Algorithm: sha256WithRSAEncryption
98:87:dc:00:5f:93:16:08:d2:01:89:b3:15:e8:da:20:75:48:
44:df:df:2b:7d:9f:a8:0c:d6:6c:75:b9:c0:77:29:3f:3b:90:
65:b5:d1:c4:65:98:92:37:e8:b5:e9:48:4a:ae:6b:db:82:3e:
9f:c8:e2:b0:d8:a7:a5:0e:ee:25:ec:86:f4:ea:3b:ab:2a:c6:
56:68:50:9a:dd:87:f6:09:fb:82:1d:1d:d2:4e:d4:c2:ff:f0:
b8:49:c1:93:75:28:d0:63:5b:37:98:d4:6b:90:e2:9f:24:58:
ed:30:67:83:eb:6d:7f:48:3d:15:fc:48:f2:57:b8:3f:1c:ff:
8d:37:e5:bf:47:25:c2:9c:81:df:d7:f0:5b:dd:07:7c:e2:a5:
ed:43:eb:74:d0:55:b2:c6:09:1a:d9:d7:6b:74:2a:7b:88:2e:
e2:6c:f8:9e:38:b4:80:29:76:75:9b:b0:bf:86:f5:6f:b5:9a:
7e:b2:77:2c:ea:97:36:62:8f:0d:ed:33:73:a0:e4:1d:c8:c2:
22:ad:cf:34:d8:d3:4f:d4:38:59:ff:ad:84:b8:26:7f:a2:2c:
84:5e:52:7f:e1:90:b6:39:45:72:5f:b3:4f:d9:49:51:f8:23:
b4:0a:2d:14:65:87:de:f1:81:78:1e:a7:50:f0:ef:41:58:3c:
57:5e:30:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:22:40 2024 by rpki-client on console.sobornost.net