Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/JOFaRYtEEaymW9Wq88xHhQMHaj0.roa
File: JOFaRYtEEaymW9Wq88xHhQMHaj0.roa (raw, json)
Hash identifier: 9XMhqciJGFvLm6RbLb0OElI2ZByvedXVQuWCQHJE+G4=
Subject key identifier: 24:E1:5A:45:8B:44:11:AC:A6:5B:D5:AA:F3:CC:47:85:03:07:6A:3D
Certificate issuer: /CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Certificate serial: 018A70D271B247856610E93B4BFA7342CFE3
Authority key identifier: B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/JOFaRYtEEaymW9Wq88xHhQMHaj0.roa
Signing time: Thu 07 Sep 2023 18:05:54 +0000
ROA not before: Thu 07 Sep 2023 18:05:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 185.136.206.0/24 maxlen: 24
185.207.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:70:d2:71:b2:47:85:66:10:e9:3b:4b:fa:73:42:cf:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Validity
Not Before: Sep 7 18:05:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24e15a458b4411aca65bd5aaf3cc478503076a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8f:f8:db:fe:3c:40:c0:7f:41:11:74:69:ae:
78:8e:b8:b9:a3:b7:84:93:5a:f0:fa:7a:99:9a:61:
23:66:43:44:34:ea:2e:44:e0:0d:9d:77:f4:7e:87:
65:7b:5d:38:2e:4b:21:fb:55:06:3a:de:11:84:8c:
01:f7:7e:22:c6:ad:9f:ea:13:09:97:3a:52:b0:8b:
5c:ca:da:2d:9a:96:d2:14:78:bf:54:86:6e:7b:21:
71:99:5c:25:71:58:8a:2c:51:e9:2d:aa:2f:9c:70:
1e:9f:34:36:56:36:6e:2c:09:c7:15:27:7e:61:41:
5b:ac:b5:a8:34:20:3d:41:19:54:c0:b4:fa:50:d3:
13:a8:82:6c:1f:db:1a:11:c1:47:22:da:85:a8:2c:
07:37:ce:ef:29:04:ab:c2:bc:bb:96:ab:bd:eb:60:
69:4d:1a:3c:5a:bf:ba:46:05:2f:fe:19:8f:1f:ae:
57:e9:a5:79:f0:9c:bb:ff:0a:79:72:04:a4:93:7a:
37:11:73:89:13:83:de:4f:8b:b7:0c:dd:86:24:fe:
c2:50:da:09:51:80:c7:57:9e:cc:9c:64:8c:51:b7:
9b:5d:94:c3:5f:b5:5d:6d:a7:7e:91:8a:15:62:e1:
e2:87:f4:f1:56:8a:f9:55:75:b0:cc:88:36:fd:07:
9e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E1:5A:45:8B:44:11:AC:A6:5B:D5:AA:F3:CC:47:85:03:07:6A:3D
X509v3 Authority Key Identifier:
keyid:B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/JOFaRYtEEaymW9Wq88xHhQMHaj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/twWU8mXww-sA58_Cj-yFkMimMqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.206.0/24
185.207.39.0/24
Signature Algorithm: sha256WithRSAEncryption
84:ff:90:67:58:f5:d1:2f:1c:1f:49:e4:7e:49:df:84:a6:1b:
43:9c:a8:64:47:55:d8:bb:7e:b5:af:e5:2c:d6:a6:47:91:60:
44:56:e5:66:6b:c9:db:a0:fb:14:39:a7:15:97:6a:e4:0b:2c:
4e:4e:b8:15:1b:ec:62:89:fc:b3:22:3c:12:95:17:31:74:2f:
5a:d4:6e:3a:5d:a6:c5:6b:1a:61:34:34:12:f5:3a:af:39:c3:
6a:8e:71:50:fa:1a:fa:36:76:ec:11:db:2e:59:ca:ba:16:a4:
3b:b0:81:6e:9f:20:b5:34:85:02:a6:0d:0a:7f:51:31:36:48:
00:94:aa:1b:65:99:01:40:c6:09:a1:41:f2:87:3a:34:56:2d:
b4:ba:db:f6:3d:f9:2c:50:15:de:10:a1:0c:3f:67:cb:f6:d4:
34:ca:8f:51:82:a3:33:08:37:80:60:ba:86:97:af:30:5e:37:
85:ea:84:35:aa:23:3a:bc:59:6e:6b:a5:8f:03:48:8e:05:70:
20:79:6d:7d:67:02:08:6d:4e:38:86:ba:96:0e:77:ff:e0:21:
11:da:76:69:0c:ac:50:a3:e8:c8:63:73:d7:71:d8:1f:40:e7:
38:fa:38:5c:09:92:65:83:22:7c:72:38:39:af:3f:3b:c2:31:
09:6f:90:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:50 2024 by rpki-client on console-ams.rpki-client.org