Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/eUfI4NMLgCveis0kj5Hz8-0Fvek.roa
File: eUfI4NMLgCveis0kj5Hz8-0Fvek.roa (raw, json)
Hash identifier: qu2b18Mnm2xpzYDhsM/p742xuOEnceXxKKaGsG161KE=
Subject key identifier: 79:47:C8:E0:D3:0B:80:2B:DE:8A:CD:24:8F:91:F3:F3:ED:05:BD:E9
Certificate issuer: /CN=006e643d0b67f4b333feacdc4616d4e4f3de32cd
Certificate serial: 01857321C9AFB9F8D62B60A0C9E112014E27
Authority key identifier: 00:6E:64:3D:0B:67:F4:B3:33:FE:AC:DC:46:16:D4:E4:F3:DE:32:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AG5kPQtn9LMz_qzcRhbU5PPeMs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/eUfI4NMLgCveis0kj5Hz8-0Fvek.roa
Signing time: Mon 02 Jan 2023 15:37:52 +0000
ROA not before: Mon 02 Jan 2023 15:37:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204703
IP address blocks: 185.153.93.0/24 maxlen: 32
2a0c:f280::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:21:c9:af:b9:f8:d6:2b:60:a0:c9:e1:12:01:4e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006e643d0b67f4b333feacdc4616d4e4f3de32cd
Validity
Not Before: Jan 2 15:37:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7947c8e0d30b802bde8acd248f91f3f3ed05bde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e8:84:87:47:19:0f:9a:d3:f9:97:97:ce:76:
5d:8f:e6:fa:ca:7c:ac:38:50:a7:b2:55:3d:56:24:
39:2b:7f:ba:70:fb:86:ee:22:5c:53:7b:b6:29:0b:
f7:a8:2e:00:c6:e3:68:e5:64:44:93:cd:13:20:b9:
fb:a5:e5:04:47:1d:96:51:b4:ab:02:1c:e0:e6:ae:
e1:e8:27:5e:4e:c8:a0:de:f6:61:e5:48:35:4c:45:
60:63:11:1d:c8:0d:64:fd:77:90:c3:4d:29:ad:15:
58:7d:36:28:77:86:ad:85:70:42:1f:f1:c7:e5:98:
32:32:50:52:dd:ba:cc:38:58:94:4e:68:52:cd:16:
57:5e:d3:41:48:39:6c:8d:82:54:bb:00:f6:ed:50:
f1:c8:7a:b3:e1:97:79:30:7f:6c:9a:7c:74:bc:78:
cd:b2:08:f2:fc:ae:b6:f3:1d:0d:8e:a2:92:44:76:
64:d7:04:28:bc:7b:65:f7:95:2e:57:c8:94:00:26:
1d:89:97:c4:ad:ab:ce:ca:00:de:a6:2d:05:8d:1e:
e7:08:e1:8a:1a:f6:ab:d5:9c:69:52:e7:ea:2c:b0:
00:fd:15:f2:a4:95:59:95:87:f3:74:b2:c3:9d:40:
31:de:1a:b6:2f:fa:e2:2c:8b:18:98:55:3e:0d:7d:
6f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:47:C8:E0:D3:0B:80:2B:DE:8A:CD:24:8F:91:F3:F3:ED:05:BD:E9
X509v3 Authority Key Identifier:
keyid:00:6E:64:3D:0B:67:F4:B3:33:FE:AC:DC:46:16:D4:E4:F3:DE:32:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AG5kPQtn9LMz_qzcRhbU5PPeMs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/eUfI4NMLgCveis0kj5Hz8-0Fvek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/AG5kPQtn9LMz_qzcRhbU5PPeMs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.93.0/24
IPv6:
2a0c:f280::/29
Signature Algorithm: sha256WithRSAEncryption
98:b0:cd:32:31:14:14:27:bd:cb:b2:ae:4a:2f:fa:80:af:be:
86:86:8c:cd:35:5c:99:44:5e:e9:01:63:28:b4:54:f0:da:b9:
3e:37:97:a9:1a:be:de:d1:22:90:99:21:55:e5:b7:87:72:7e:
af:21:e9:4b:f3:c0:2e:db:cd:a2:c1:c1:d3:1d:8c:72:bd:3c:
2f:0f:4a:48:74:86:89:1c:54:65:db:56:e0:37:1f:66:19:a4:
d9:7d:94:dc:8a:6f:2a:1b:14:21:c4:a2:ad:9b:e5:27:aa:f7:
53:07:75:d0:1b:45:d1:e9:32:b6:5c:5b:4a:dc:3d:1a:09:1e:
22:ff:9c:2e:ec:3b:2d:8f:25:c0:b4:e9:c0:48:8d:84:bc:e6:
39:d8:d6:1f:41:d1:35:96:76:02:86:ef:58:f9:87:84:ab:b5:
aa:10:f7:73:0b:6c:fa:77:95:da:a7:41:a4:31:c9:57:19:d4:
cd:d9:8b:ff:ce:4d:d3:1a:cd:30:e0:ae:f9:4a:36:03:42:f4:
96:e3:be:7c:8b:5c:d5:de:11:10:b4:95:87:9d:bc:00:84:bf:
df:1c:7e:8d:b2:b1:61:9a:64:ed:82:2c:cb:7e:88:92:54:e1:
9b:05:a2:16:04:0e:92:74:b9:c2:25:66:c6:90:f5:54:37:00:
75:f2:71:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:58 2024 by rpki-client on console-ams.rpki-client.org