Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8fd5b9-284a-47c2-956e-db8a731e502c/1/qOsbi1h-3YJqSsU_cSWvUpEJVMQ.roa
File: qOsbi1h-3YJqSsU_cSWvUpEJVMQ.roa (raw, json)
Hash identifier: ed/eI/wCCKKg9ZVTl13LIE9dVPn7UWSoOwWKY/VED/s=
Subject key identifier: A8:EB:1B:8B:58:7E:DD:82:6A:4A:C5:3F:71:25:AF:52:91:09:54:C4
Certificate issuer: /CN=5b262c9b03da5eebec0934363368635d1a4d3a89
Certificate serial: 018DACBABD3143A5E30AA1857796E8C4D9D6
Authority key identifier: 5B:26:2C:9B:03:DA:5E:EB:EC:09:34:36:33:68:63:5D:1A:4D:3A:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyYsmwPaXuvsCTQ2M2hjXRpNOok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8fd5b9-284a-47c2-956e-db8a731e502c/1/qOsbi1h-3YJqSsU_cSWvUpEJVMQ.roa
Signing time: Thu 15 Feb 2024 12:25:35 +0000
ROA not before: Thu 15 Feb 2024 12:25:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 185.229.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ac:ba:bd:31:43:a5:e3:0a:a1:85:77:96:e8:c4:d9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b262c9b03da5eebec0934363368635d1a4d3a89
Validity
Not Before: Feb 15 12:25:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8eb1b8b587edd826a4ac53f7125af52910954c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:86:04:30:22:67:51:27:39:2a:3c:16:68:
cd:ea:b7:68:36:ce:6f:cd:c9:b6:8c:1d:76:97:ab:
0e:29:da:2a:86:5f:bf:c3:26:96:96:7f:61:f2:31:
be:1b:c8:9a:35:ac:42:72:98:29:6e:52:2d:9b:dc:
1e:63:7a:68:e2:c9:b7:cf:f6:a4:f5:8b:16:f1:ab:
24:d3:66:fe:a8:1a:d4:ba:bd:7e:68:ef:9b:60:e2:
89:ca:92:76:f6:52:20:f8:5e:71:5a:6c:ee:44:03:
93:87:ab:7e:59:be:eb:bc:9f:94:e0:c5:c7:7f:6d:
35:fb:14:0a:36:3b:a7:de:27:b7:4c:77:f3:06:5c:
58:c0:b2:06:09:aa:2c:ae:f3:8e:2c:c5:6a:90:d3:
4f:48:01:ec:20:ba:3f:31:ff:59:cb:68:04:b5:47:
a5:c6:23:57:b0:50:45:88:38:4f:09:09:f7:13:cb:
02:4f:95:2d:ac:e1:be:6c:b2:d9:1b:34:48:5d:5f:
34:53:7a:8b:64:2f:96:ab:21:39:cc:7e:9c:f9:6f:
63:1a:9b:3c:6d:b3:b9:b6:5a:2f:df:b4:d4:ae:35:
f3:07:49:fe:61:db:df:36:39:e9:6c:ca:f3:9f:73:
bf:a9:ce:e7:45:57:11:37:32:01:bf:5a:a5:cc:24:
be:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EB:1B:8B:58:7E:DD:82:6A:4A:C5:3F:71:25:AF:52:91:09:54:C4
X509v3 Authority Key Identifier:
keyid:5B:26:2C:9B:03:DA:5E:EB:EC:09:34:36:33:68:63:5D:1A:4D:3A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyYsmwPaXuvsCTQ2M2hjXRpNOok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8fd5b9-284a-47c2-956e-db8a731e502c/1/qOsbi1h-3YJqSsU_cSWvUpEJVMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8fd5b9-284a-47c2-956e-db8a731e502c/1/WyYsmwPaXuvsCTQ2M2hjXRpNOok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.207.0/24
Signature Algorithm: sha256WithRSAEncryption
28:9d:d9:fa:34:0f:8f:8b:41:12:aa:cf:3c:10:45:1e:f6:68:
76:cb:b2:de:89:25:df:9c:90:a4:e1:e2:a1:75:07:c2:10:5d:
77:fc:2b:4c:39:27:6b:4e:16:8a:67:36:57:80:f3:77:1e:fc:
d9:96:24:48:b4:de:15:9d:09:b4:43:e7:5a:38:8a:37:00:af:
38:f8:80:cd:a4:b6:d9:cc:04:03:81:80:d5:70:49:ea:81:72:
8f:07:4a:7b:40:24:80:88:57:a2:b5:57:48:35:ce:c1:b0:6e:
fb:c6:46:9b:d2:5d:49:19:66:60:df:6f:eb:a2:51:60:d3:ed:
2e:75:ac:fb:eb:9b:63:f4:c2:fb:8f:f4:27:7e:84:f7:c0:93:
00:df:e0:5e:0d:6b:2d:ba:64:37:3b:fb:50:7d:10:68:7d:3b:
e7:70:f2:8a:e3:63:9b:12:c7:4e:85:e8:dd:f4:b7:67:05:82:
75:b7:81:80:c7:33:37:08:d7:a7:f2:e6:d4:57:0c:d0:5c:46:
b8:c3:e6:ab:96:03:5e:8d:50:25:3c:73:8d:84:39:85:95:72:
c0:24:c9:25:20:44:75:36:25:af:f0:a4:5f:2d:6c:3c:a0:2f:
09:8e:fe:42:b8:34:f1:a4:7f:7e:4e:85:51:0d:7e:10:49:d0:
9d:ee:7c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:59 2024 by rpki-client on console-ams.rpki-client.org