Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/FI7Z6yvyxDFRqlHMsOLt6qmVJXA.roa
File: FI7Z6yvyxDFRqlHMsOLt6qmVJXA.roa (raw, json)
Hash identifier: PLzLUFpzsOFgbqzgH46w2dwNTziPEejDroZh60hsXdQ=
Subject key identifier: 14:8E:D9:EB:2B:F2:C4:31:51:AA:51:CC:B0:E2:ED:EA:A9:95:25:70
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 018B4886CDCC30091668CB8E1AE7B2FAABD3
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/FI7Z6yvyxDFRqlHMsOLt6qmVJXA.roa
Signing time: Thu 19 Oct 2023 15:21:15 +0000
ROA not before: Thu 19 Oct 2023 15:21:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51059
IP address blocks: 185.2.206.0/24 maxlen: 24
185.2.204.0/24 maxlen: 24
185.2.205.0/24 maxlen: 24
185.2.207.0/24 maxlen: 24
109.107.32.0/19 maxlen: 19
2a02:1348::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:48:86:cd:cc:30:09:16:68:cb:8e:1a:e7:b2:fa:ab:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Oct 19 15:21:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=148ed9eb2bf2c43151aa51ccb0e2edeaa9952570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b1:96:39:9f:d8:75:6f:8d:22:9a:03:10:e0:
cc:0e:af:77:3c:d8:cb:f0:7b:18:f3:b1:a8:8a:c9:
19:43:bd:d0:02:12:52:32:c4:44:49:fc:9e:68:63:
ee:58:ab:ca:04:f2:a4:0d:a8:6f:c5:c1:af:1f:86:
30:8a:3c:11:74:c1:fc:3c:1d:18:e4:0e:7b:62:3a:
1f:cc:21:64:00:cf:81:4c:b1:1f:df:76:ef:6d:2f:
fe:3b:d3:9b:4d:4e:8c:7a:08:e2:fd:99:0e:93:95:
f6:08:40:58:89:38:2a:a9:39:7a:7d:e1:5a:7f:00:
2a:40:2f:ae:c6:05:58:28:29:61:dc:0b:74:9f:83:
9e:86:78:71:95:1f:94:3c:7e:95:fb:14:6c:25:b8:
6e:4d:19:f3:0e:1f:63:d1:8a:10:eb:a6:fa:0a:71:
e6:ac:a4:17:c8:fd:71:ed:32:db:a4:a4:fc:85:78:
67:37:02:30:b0:47:93:e4:a8:21:85:aa:64:44:da:
3a:33:c4:99:67:5e:5a:55:e5:bf:d6:03:f6:4a:8a:
13:14:6f:2a:a9:a3:20:ba:5a:a7:ef:d8:f3:31:31:
59:61:c4:f2:12:d6:9e:66:49:f0:08:91:50:0e:2c:
d4:a3:4b:53:1a:95:4b:10:46:ef:e2:48:47:44:db:
d6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8E:D9:EB:2B:F2:C4:31:51:AA:51:CC:B0:E2:ED:EA:A9:95:25:70
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/FI7Z6yvyxDFRqlHMsOLt6qmVJXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.32.0/19
185.2.204.0/22
IPv6:
2a02:1348::/32
Signature Algorithm: sha256WithRSAEncryption
87:31:fb:18:f8:7a:75:c4:fe:2f:81:2f:8e:3f:b2:a0:4c:8e:
4a:d7:ec:f0:47:8c:77:98:e0:81:26:71:f2:14:a2:b2:66:98:
d0:3f:f4:09:3b:1b:be:6a:63:3b:e9:f1:46:33:72:f9:91:3a:
ec:ba:26:f6:46:f0:86:b1:0d:9a:cb:90:51:eb:c0:ab:58:a2:
92:78:dd:c0:e0:81:f0:44:98:7b:2f:1f:b9:df:3f:91:74:94:
59:c5:d2:0f:44:f6:0d:73:82:e2:27:4a:93:86:17:b6:c6:5f:
63:70:21:e9:0e:6d:6f:0a:20:aa:9a:c7:33:86:d1:e1:e7:f0:
44:42:25:fb:10:85:41:a1:92:f9:ec:3d:c4:3a:d9:9f:27:cb:
65:6e:45:bc:1e:dc:0b:27:27:b8:68:a8:e8:de:3e:04:9f:89:
c8:17:c4:98:9f:45:4d:d8:08:d2:00:0b:57:70:a5:68:84:38:
87:e0:96:08:64:ba:f3:ed:f7:48:27:e1:a4:a7:0f:ee:8e:97:
97:07:0a:b6:24:fb:52:75:66:32:b6:f1:ed:63:df:68:87:9a:
ae:2f:9c:c1:28:c3:15:98:cb:2f:c6:f5:85:8c:01:00:a4:e0:
0b:bd:6e:fd:f6:9e:29:d6:71:37:44:4f:31:43:b8:0a:36:79:
9b:3a:a4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:52 2025 by rpki-client