Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/AeTSAcejn8lbaSO2JjoYbXuDK4c.roa
File: AeTSAcejn8lbaSO2JjoYbXuDK4c.roa (raw, json)
Hash identifier: pQ9xbGK2moEn3IfuKTBko2h5GfLKBplW+0iaUz3mx4I=
Subject key identifier: 01:E4:D2:01:C7:A3:9F:C9:5B:69:23:B6:26:3A:18:6D:7B:83:2B:87
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 018CC87073D9B4BEF4E371CF16E677DA1F40
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/AeTSAcejn8lbaSO2JjoYbXuDK4c.roa
Signing time: Tue 02 Jan 2024 04:31:02 +0000
ROA not before: Tue 02 Jan 2024 04:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203061
IP address blocks: 185.239.244.0/24 maxlen: 24
185.239.246.0/23 maxlen: 24
185.254.17.0/24 maxlen: 24
185.254.16.0/24 maxlen: 24
185.244.105.0/24 maxlen: 24
185.246.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:73:d9:b4:be:f4:e3:71:cf:16:e6:77:da:1f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Jan 2 04:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01e4d201c7a39fc95b6923b6263a186d7b832b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2f:62:82:6e:71:1a:28:ad:ae:66:c9:3e:95:
6d:24:5a:a2:a2:15:f7:0b:7e:43:e2:db:2e:93:a4:
bf:0e:3d:cb:08:2a:2a:89:bb:34:fe:67:5c:70:15:
21:2b:ee:84:8e:06:e6:75:03:ac:b9:5b:e8:d6:33:
60:0c:49:9d:00:81:1d:4c:32:a3:ab:f0:3a:ee:6c:
ec:40:70:15:8b:cd:f8:ab:52:27:14:6d:7e:7e:87:
7b:7a:ff:7a:b2:f0:ee:a5:fa:b1:b5:c3:c5:75:29:
00:a5:7c:f1:c1:5c:6a:28:1c:12:68:f0:fb:e2:2e:
02:b3:57:84:06:e9:01:22:63:f1:fd:f7:11:3b:87:
a0:7c:03:b1:41:7a:20:0b:a3:4d:69:67:e6:2a:0b:
a4:a0:82:97:ba:12:2d:15:f0:4f:6d:d6:d5:b5:0c:
e0:7c:9f:7c:52:93:d3:25:4b:dc:44:48:0a:93:99:
dd:4b:3f:c3:1b:ce:f9:33:5f:9b:40:8b:a8:38:e1:
b7:66:92:1d:51:67:d7:85:b1:15:88:31:a9:5b:15:
57:b5:0a:e1:d3:f7:b5:98:40:dc:7a:c8:3f:36:f1:
c8:ad:d0:4d:b3:e0:af:bb:aa:76:39:7a:5b:cd:fd:
69:55:c4:24:6f:5e:6e:90:dd:fd:e8:21:d0:c0:89:
4a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E4:D2:01:C7:A3:9F:C9:5B:69:23:B6:26:3A:18:6D:7B:83:2B:87
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/AeTSAcejn8lbaSO2JjoYbXuDK4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.244.0/24
185.239.246.0/23
185.244.105.0/24
185.246.236.0/22
185.254.16.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:8f:b7:70:83:f6:f3:3b:a0:c3:1f:37:e7:66:3e:fa:f3:35:
b4:2a:d0:de:6f:31:f1:ab:ef:0a:a8:b0:c6:e6:a4:51:1a:c7:
46:78:59:af:dd:9c:d5:42:2f:54:7f:76:e9:16:f7:58:2b:15:
54:18:75:ee:b1:e0:04:22:85:ba:d9:76:ac:1f:f5:b9:fe:3d:
45:11:2e:b6:c5:76:a9:04:51:0c:44:86:93:3c:99:95:62:00:
c7:91:e5:ad:72:6d:d1:b8:d1:76:9a:34:a0:ba:69:d6:04:4c:
74:d6:c4:00:f0:4e:16:1c:34:0a:b6:5c:5c:99:e1:7b:47:c9:
8e:41:e9:c8:9d:30:30:b6:cc:34:c0:2f:4f:e4:0c:b0:ec:a2:
24:9a:88:e0:33:27:22:06:69:a3:72:74:2a:8b:06:52:11:54:
19:67:90:25:ae:2b:0a:92:24:fa:dd:f5:24:e9:05:e3:76:7a:
f0:82:da:db:80:c0:02:9b:bf:06:f7:be:20:3c:56:f6:cb:20:
92:af:52:6a:af:fa:9a:aa:96:e9:b0:b8:86:33:0c:c9:e5:a2:
4e:5c:9d:11:42:09:79:95:96:73:88:f9:b8:62:1b:b0:75:5f:
19:7b:cb:cd:e9:c9:35:04:03:76:0e:b9:6f:a2:c4:60:02:42:
63:82:31:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:08 2024 by rpki-client on console-fra.rpki-client.org