Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/efeccb-d35c-49a2-811a-c0b38212a65b/1/dGC6U0IZOnmAR45DVsqMOJpKGbc.roa
File: dGC6U0IZOnmAR45DVsqMOJpKGbc.roa (raw, json)
Hash identifier: 5tj0duTS24F3BCgMu78ejIWotF/s+qwHj0I7oY6w5k0=
Subject key identifier: 74:60:BA:53:42:19:3A:79:80:47:8E:43:56:CA:8C:38:9A:4A:19:B7
Certificate issuer: /CN=7dd653d9d32c295da5b736a4aabe304e9fe1394f
Certificate serial: 01309656
Authority key identifier: 7D:D6:53:D9:D3:2C:29:5D:A5:B7:36:A4:AA:BE:30:4E:9F:E1:39:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdZT2dMsKV2ltzakqr4wTp_hOU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/efeccb-d35c-49a2-811a-c0b38212a65b/1/dGC6U0IZOnmAR45DVsqMOJpKGbc.roa
Signing time: Tue 03 May 2022 10:19:53 +0000
ROA not before: Tue 03 May 2022 10:19:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.188.8.0/24 maxlen: 24
185.188.10.0/23 maxlen: 23
185.249.210.0/24 maxlen: 24
185.249.209.0/24 maxlen: 24
185.249.208.0/22 maxlen: 24
185.249.211.0/24 maxlen: 24
185.249.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19961430 (0x1309656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dd653d9d32c295da5b736a4aabe304e9fe1394f
Validity
Not Before: May 3 10:19:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7460ba5342193a7980478e4356ca8c389a4a19b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a0:0d:6d:7d:4f:20:94:fc:17:31:16:b0:51:
a8:03:53:ec:47:ab:30:0e:ce:32:a9:ae:24:f8:2e:
94:f3:c8:d1:45:36:39:bf:af:db:8a:b0:4b:99:57:
ef:93:13:b3:af:89:05:06:0f:0c:27:1e:ac:af:c1:
f2:8f:b2:93:47:b1:38:5a:6b:26:ec:39:68:54:ec:
95:05:54:72:2b:6c:c7:a9:21:9a:d1:ab:01:8a:95:
9c:f8:f5:f6:fe:35:4a:3b:ce:59:9c:14:5d:99:1a:
a9:44:04:dc:d9:76:3b:a2:bd:a6:20:dc:22:7f:97:
e6:3d:04:e7:02:7c:9f:51:91:ee:fa:3d:f5:3e:e2:
66:93:9e:5d:ae:93:eb:d8:08:28:ba:fa:75:f3:e4:
e5:be:25:f1:26:1e:8a:84:40:78:91:16:ab:35:ca:
89:6b:7f:85:61:94:e6:9c:28:77:3f:67:4f:c5:84:
5d:d7:f0:8f:88:8f:24:3c:77:17:85:28:0f:d6:73:
8e:ab:84:79:66:c3:75:cd:0c:3c:f4:c3:a9:d9:52:
af:2c:3e:60:b7:25:2b:05:5b:68:d2:e0:80:77:32:
59:05:f0:e9:a2:be:ac:95:43:1a:b2:2f:8d:9a:c6:
e6:be:ba:a2:d0:ec:93:60:6d:06:c0:6e:0d:d3:e2:
57:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:60:BA:53:42:19:3A:79:80:47:8E:43:56:CA:8C:38:9A:4A:19:B7
X509v3 Authority Key Identifier:
keyid:7D:D6:53:D9:D3:2C:29:5D:A5:B7:36:A4:AA:BE:30:4E:9F:E1:39:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdZT2dMsKV2ltzakqr4wTp_hOU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efeccb-d35c-49a2-811a-c0b38212a65b/1/dGC6U0IZOnmAR45DVsqMOJpKGbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efeccb-d35c-49a2-811a-c0b38212a65b/1/fdZT2dMsKV2ltzakqr4wTp_hOU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.8.0/24
185.188.10.0/23
185.249.208.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:7f:d3:c5:88:8c:c1:9e:1e:f8:fc:24:75:de:db:d1:c5:c3:
e3:7c:4d:8a:1e:12:1c:5b:7a:6e:e4:15:17:fd:74:82:71:62:
f2:42:db:72:85:3e:5f:4f:40:07:0b:cc:15:59:83:07:85:a8:
d6:cf:cc:08:4c:86:42:53:0d:07:ce:9d:3d:97:91:6e:6c:6f:
35:68:e9:dd:a2:d3:88:ff:ee:c0:91:13:7b:23:b1:26:a0:e3:
9b:90:b8:f4:98:fd:4f:cc:d9:26:ab:f0:1d:bd:b4:33:8c:d8:
09:11:04:99:e6:f6:8e:08:ae:d2:d2:a7:b1:ad:1b:0b:78:23:
5c:bd:d3:ae:3b:38:36:37:54:cb:41:56:f1:d3:b8:f5:ec:8a:
20:e7:de:a2:94:ca:7c:a1:83:e9:fa:71:e9:f0:d4:24:01:49:
48:79:46:21:0c:68:07:5b:95:2e:a3:17:22:68:cd:f5:f8:7a:
58:ff:20:03:a2:3b:d1:9c:24:9f:a2:48:e2:9b:10:96:ca:0c:
d0:35:d0:43:1d:6f:a6:97:32:40:dc:78:cf:5a:85:d7:29:d3:
3f:40:c3:5f:53:8d:95:8e:bc:84:06:8c:bd:07:1e:04:36:08:
a1:e0:05:86:0f:af:1c:82:f5:34:be:da:41:86:d9:84:4d:aa:
9f:f9:b4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:04 2025 by rpki-client