Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/ScKEJVld_QuXmHqZOIsDJGPITzI.roa
File: ScKEJVld_QuXmHqZOIsDJGPITzI.roa (raw, json)
Hash identifier: ZFNs4VDegsxqS0mYIFVq3dYxCyypuw/8A9YGx+rnFp4=
Subject key identifier: 49:C2:84:25:59:5D:FD:0B:97:98:7A:99:38:8B:03:24:63:C8:4F:32
Certificate issuer: /CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Certificate serial: 0191C6A9CDBFC6119A5C3FCC6DC059D79F81
Authority key identifier: FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/ScKEJVld_QuXmHqZOIsDJGPITzI.roa
Signing time: Fri 06 Sep 2024 09:28:22 +0000
ROA not before: Fri 06 Sep 2024 09:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7488
IP address blocks: 185.34.144.0/22 maxlen: 22
185.170.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c6:a9:cd:bf:c6:11:9a:5c:3f:cc:6d:c0:59:d7:9f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Validity
Not Before: Sep 6 09:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49c28425595dfd0b97987a99388b032463c84f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ac:cb:ae:46:d3:91:c4:cb:56:ea:65:ae:19:
ca:65:89:49:3d:3c:75:7c:14:4a:22:4b:f5:51:6d:
dd:b4:b5:39:93:6f:3f:c4:a4:c3:39:68:07:c5:d2:
f4:60:99:09:51:c9:74:45:7f:28:ea:c2:7f:b1:27:
9c:2f:c6:64:55:cf:a6:24:67:12:87:9f:21:47:92:
85:24:be:b4:75:42:94:3c:81:21:ac:16:23:38:c4:
48:0b:f5:35:2d:ae:fd:14:37:c6:7f:4d:29:57:2f:
f7:b6:c5:2d:e4:a5:63:10:4d:5a:80:32:01:16:dd:
e2:de:58:be:89:aa:94:ee:45:86:ea:87:24:9b:e7:
a3:c1:12:a5:f1:34:d4:a2:ac:1f:97:57:4c:ac:df:
e5:68:09:d5:e4:ed:2e:93:9e:d3:b8:71:76:db:f4:
ff:69:2e:99:60:4e:4d:e5:4f:c7:a0:4a:da:67:66:
6e:e2:34:4b:93:fb:02:69:16:11:94:c5:27:03:53:
34:9c:65:c4:08:6a:53:0e:12:18:79:57:8c:fc:57:
d3:16:5b:b0:63:5b:53:12:2c:b8:ce:81:e6:95:db:
0e:f6:1f:41:a7:14:44:32:15:6a:69:87:d6:3e:77:
6b:89:7c:a8:2a:fb:89:5a:4b:1b:27:e1:b0:d4:9d:
88:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C2:84:25:59:5D:FD:0B:97:98:7A:99:38:8B:03:24:63:C8:4F:32
X509v3 Authority Key Identifier:
keyid:FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/ScKEJVld_QuXmHqZOIsDJGPITzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.144.0/22
185.170.76.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:37:be:2f:1f:1d:4b:40:38:be:1c:d9:3d:55:bc:45:4d:51:
90:ed:00:c7:67:81:e9:90:39:f5:fe:0f:28:08:cc:17:ea:3f:
b4:c9:e0:60:a5:49:73:3e:6a:67:36:e8:d6:7c:26:34:59:a7:
20:9c:16:03:3c:16:68:a2:47:c2:a6:4e:61:88:0b:8f:ca:cd:
a8:a8:fe:cf:4b:3d:b0:b7:d9:8d:28:ba:6a:31:41:11:10:32:
cf:0e:b7:7b:e0:ba:60:cc:74:5f:59:1a:4c:d1:bf:34:7a:8d:
1a:d4:f1:65:df:2f:28:63:a5:f7:f9:45:a4:1a:d9:12:22:57:
fd:fc:60:ba:8a:2f:1b:9a:b4:0a:56:56:2a:6d:3d:f9:ab:ea:
50:58:9b:ce:9e:14:7c:50:65:6c:5c:93:46:2f:83:1b:3d:f6:
1c:18:85:ea:ee:07:62:3c:d0:75:8d:fd:31:d0:1f:f8:a6:00:
17:77:4e:9e:39:b9:be:9e:e0:b4:b0:a7:d9:27:0c:a3:df:33:
33:d9:14:8c:07:14:c7:9d:ee:41:30:3d:fa:76:1a:7d:2f:11:
2d:01:1b:52:05:2a:fc:ca:cd:17:c6:bc:9f:70:8a:96:5b:3a:
bb:2a:32:47:ad:9a:0d:8e:85:00:91:f7:b6:6b:65:2d:08:a2:
21:9a:43:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:23:06 2024 by rpki-client on console.sobornost.net