Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/08fd6b-02b4-4e34-97a9-74cff927b033/1/K2kR4Dv4Go6IUp2SDND4WGoHDiQ.roa
File: K2kR4Dv4Go6IUp2SDND4WGoHDiQ.roa (raw, json)
Hash identifier: r/q96kdqPvAGy4pOnA+QpODeUHFbJuSA1hc2P3p13j0=
Subject key identifier: 2B:69:11:E0:3B:F8:1A:8E:88:52:9D:92:0C:D0:F8:58:6A:07:0E:24
Certificate issuer: /CN=fc9003cbb188b6c79716ee38dcee468ac19d8cab
Certificate serial: 02C15F4D
Authority key identifier: FC:90:03:CB:B1:88:B6:C7:97:16:EE:38:DC:EE:46:8A:C1:9D:8C:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JADy7GItseXFu443O5GisGdjKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/08fd6b-02b4-4e34-97a9-74cff927b033/1/K2kR4Dv4Go6IUp2SDND4WGoHDiQ.roa
Signing time: Sat 01 Jan 2022 12:02:12 +0000
ROA not before: Sat 01 Jan 2022 12:02:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203712
IP address blocks: 185.126.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46227277 (0x2c15f4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9003cbb188b6c79716ee38dcee468ac19d8cab
Validity
Not Before: Jan 1 12:02:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b6911e03bf81a8e88529d920cd0f8586a070e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9f:bd:68:8f:84:21:70:ce:66:44:7d:5e:51:
dc:4e:11:fa:13:b0:54:ce:3e:37:e4:d4:75:89:21:
c3:14:0f:f9:23:7e:1e:51:f7:ef:e8:38:a8:23:5b:
19:c8:8d:55:3f:cd:03:00:45:2b:c0:59:8e:7b:8a:
b8:b3:83:c0:44:b2:85:1c:2c:58:0e:89:5c:2b:cc:
2c:c6:ae:10:3d:89:43:50:f5:f9:7b:b4:80:4a:69:
cb:91:b9:31:2e:c2:f7:cb:12:70:4b:ed:6d:77:13:
5f:ad:48:1a:b8:f1:53:c8:6e:bc:3f:e2:9b:2b:e1:
28:aa:91:73:ed:51:35:22:aa:e8:44:68:da:6d:cb:
03:bb:0e:d6:26:7f:cc:ef:ee:8a:e0:02:52:ad:3e:
cc:bc:c4:17:c1:9f:5c:74:22:3b:f0:08:c0:4a:1a:
53:ad:85:72:e1:10:95:cf:a4:56:51:21:b8:be:a5:
3d:31:d6:be:1a:5d:76:83:5b:1c:50:7b:b9:64:e3:
6e:23:f6:6d:04:69:c6:b7:3a:5b:18:17:78:3f:f4:
97:f5:ef:3a:69:8a:76:a1:c2:b8:ad:2b:aa:93:23:
48:ff:bf:01:0b:c5:e4:96:d6:f2:16:98:df:4b:63:
2b:30:5c:60:62:e6:10:0c:63:5f:98:4f:64:0f:0c:
89:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:69:11:E0:3B:F8:1A:8E:88:52:9D:92:0C:D0:F8:58:6A:07:0E:24
X509v3 Authority Key Identifier:
keyid:FC:90:03:CB:B1:88:B6:C7:97:16:EE:38:DC:EE:46:8A:C1:9D:8C:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JADy7GItseXFu443O5GisGdjKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/08fd6b-02b4-4e34-97a9-74cff927b033/1/K2kR4Dv4Go6IUp2SDND4WGoHDiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/08fd6b-02b4-4e34-97a9-74cff927b033/1/_JADy7GItseXFu443O5GisGdjKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.104.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:ce:89:11:61:38:61:9f:db:fa:51:97:fa:4d:45:ab:15:82:
c4:c2:dd:b5:e7:93:8d:9a:a4:c1:5d:b8:64:7b:ce:a7:14:5d:
98:44:c7:fa:7b:46:dd:a6:43:6d:02:f3:5e:2c:d1:c3:cd:ae:
cc:f0:35:06:8f:d7:0e:92:4b:5d:c4:b9:c8:11:58:98:75:11:
98:bc:ec:e2:e9:35:a7:0e:15:7a:f2:f8:5d:67:c4:dd:79:42:
a5:38:8e:34:88:f1:8b:8e:56:a6:e4:42:d4:91:19:78:b5:1f:
34:5d:37:b9:a8:02:5e:05:ec:50:46:f4:23:7c:b5:6e:94:6d:
90:b0:c2:99:12:00:7d:b4:52:5f:29:10:30:6b:f2:f9:8f:c6:
76:aa:f1:9c:d9:7f:e6:db:c4:2c:b4:2b:2a:93:03:c1:d2:0f:
47:b9:13:c8:eb:93:31:5a:79:d1:dd:26:4e:41:89:82:8d:81:
09:66:d1:95:5a:9e:49:93:89:0d:32:df:86:a1:b4:bd:49:51:
b6:33:03:08:f5:e6:00:a7:07:c6:7e:a7:1d:13:cb:39:ab:e4:
01:9b:31:1a:7b:f1:8e:6c:10:c8:26:81:eb:96:06:76:ad:ae:
a2:2d:a6:d7:4a:0b:21:81:9f:1a:f0:0c:ce:a1:5c:2c:b9:8f:
f9:2b:55:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:08 2024 by rpki-client on console-ams.rpki-client.org