Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/331659-30ca-4a88-a26c-440848c0cf71/1/XYOsBdophXT9ft2F4x_GZ8y_0ro.roa
File: XYOsBdophXT9ft2F4x_GZ8y_0ro.roa (raw, json)
Hash identifier: on502mPL6ehOemihzxhppbVp/waoCJLCxtwFLLp+7Fk=
Subject key identifier: 5D:83:AC:05:DA:29:85:74:FD:7E:DD:85:E3:1F:C6:67:CC:BF:D2:BA
Certificate issuer: /CN=81724e7b0cb233ae7e7f2eb3766959fc6827fb1b
Certificate serial: 01856D93EE74E2640E1B13CA1F33D939D0F1
Authority key identifier: 81:72:4E:7B:0C:B2:33:AE:7E:7F:2E:B3:76:69:59:FC:68:27:FB:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXJOewyyM65-fy6zdmlZ_Ggn-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/331659-30ca-4a88-a26c-440848c0cf71/1/XYOsBdophXT9ft2F4x_GZ8y_0ro.roa
Signing time: Sun 01 Jan 2023 13:44:49 +0000
ROA not before: Sun 01 Jan 2023 13:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203271
IP address blocks: 185.14.175.0/24 maxlen: 24
2a06:9080::/32 maxlen: 32
2a06:9087:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:ee:74:e2:64:0e:1b:13:ca:1f:33:d9:39:d0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81724e7b0cb233ae7e7f2eb3766959fc6827fb1b
Validity
Not Before: Jan 1 13:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d83ac05da298574fd7edd85e31fc667ccbfd2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d1:1b:58:4e:56:26:70:f9:e1:e7:7c:79:dc:
d5:aa:43:2a:df:0c:d8:43:3e:4d:8b:75:aa:b0:d1:
1c:23:b4:e1:35:c7:04:bd:04:a0:cf:48:b0:30:66:
4a:7d:10:ef:c4:6d:f0:38:c6:12:b7:0e:b7:09:3a:
a4:7d:09:10:34:a2:9a:bb:8e:ad:68:ca:d7:af:2f:
2a:ec:20:c9:db:84:7b:0a:88:5f:a9:6f:34:29:3b:
1c:7d:2d:7c:84:e0:fb:6a:fe:94:a2:f5:34:37:20:
1d:6a:ac:4e:4d:02:f0:78:6b:08:f0:6a:af:19:de:
33:21:41:e9:b1:8f:a0:c1:e5:da:75:66:63:b4:9f:
5a:6d:ba:98:9a:8a:56:c1:15:ea:b7:70:de:6a:ee:
17:49:42:bd:04:9e:85:90:cd:bb:46:66:8f:7d:f0:
d2:5e:fb:d9:a7:ab:35:7d:54:dc:e9:e3:65:31:28:
c0:f8:2b:35:53:38:07:14:7b:87:b8:29:4b:53:5e:
1c:45:50:95:5c:34:25:44:d7:57:96:c2:8a:4b:39:
c2:80:5f:61:62:5e:5e:c7:15:c6:f7:7b:86:bf:cc:
40:32:4f:fb:97:ca:d0:67:26:a8:85:8b:90:7f:c7:
20:4b:a3:4c:50:ae:f7:d1:50:c4:e8:a2:22:56:4b:
4e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:83:AC:05:DA:29:85:74:FD:7E:DD:85:E3:1F:C6:67:CC:BF:D2:BA
X509v3 Authority Key Identifier:
keyid:81:72:4E:7B:0C:B2:33:AE:7E:7F:2E:B3:76:69:59:FC:68:27:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXJOewyyM65-fy6zdmlZ_Ggn-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/331659-30ca-4a88-a26c-440848c0cf71/1/XYOsBdophXT9ft2F4x_GZ8y_0ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/331659-30ca-4a88-a26c-440848c0cf71/1/gXJOewyyM65-fy6zdmlZ_Ggn-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.175.0/24
IPv6:
2a06:9080::/32
2a06:9087:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
5c:2a:ea:c4:c1:b4:d1:76:25:c2:97:52:9e:cd:aa:10:e9:7f:
ad:87:90:b8:31:76:a2:59:ce:98:7e:64:92:60:38:07:13:47:
d2:ae:82:40:60:a6:05:e4:9a:ea:0f:47:b7:f4:a0:96:07:a2:
f3:42:ea:5d:11:36:43:34:3c:59:4b:7e:23:75:30:7e:f9:86:
7f:25:73:ba:03:5a:68:6d:38:0d:81:56:32:27:1a:66:a3:c1:
86:49:db:15:1e:f6:43:8b:41:04:33:61:6c:50:88:f3:f8:e2:
06:03:a5:a2:fa:67:a1:04:a9:10:77:66:05:7c:0c:de:97:f0:
b4:f3:3d:03:36:f7:ed:65:0a:1c:f7:67:09:46:50:fd:7e:0b:
f8:6c:bb:d4:25:cd:c1:b6:2e:e1:0d:c7:f9:c2:21:0f:ee:cb:
24:03:8f:79:ee:4d:b0:20:b2:60:e5:14:e1:b7:e4:d9:31:c6:
28:8b:78:c9:de:58:bb:e6:ca:6a:cc:bc:6a:26:9c:fa:7d:8d:
d3:74:a7:6b:8a:36:e0:f8:7b:f4:b1:29:1f:e6:a8:f3:8d:5b:
e0:5c:3e:4c:87:ef:74:a5:66:0c:30:e4:8b:4a:cf:ec:b2:11:
57:a9:ff:95:fe:dd:41:4d:05:31:f4:fc:ae:35:d2:5f:07:64:
7b:88:79:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:48 2024 by rpki-client on console-fra.rpki-client.org