Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/4RfyZcMLdgm7sK2SwhNM_Zx8L_k.roa
File: 4RfyZcMLdgm7sK2SwhNM_Zx8L_k.roa (raw, json)
Hash identifier: InR2+TmeUADWhGVMOKXDsxjDViZcJa1Jgos7O+67u2w=
Subject key identifier: E1:17:F2:65:C3:0B:76:09:BB:B0:AD:92:C2:13:4C:FD:9C:7C:2F:F9
Certificate issuer: /CN=eead7e8a2349f402a87bfb32ab6e9946f8c4c3f0
Certificate serial: 018CC6B900C0DB0D447C942AA1443268F1F0
Authority key identifier: EE:AD:7E:8A:23:49:F4:02:A8:7B:FB:32:AB:6E:99:46:F8:C4:C3:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7q1-iiNJ9AKoe_syq26ZRvjEw_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/4RfyZcMLdgm7sK2SwhNM_Zx8L_k.roa
Signing time: Mon 01 Jan 2024 20:31:02 +0000
ROA not before: Mon 01 Jan 2024 20:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58040
IP address blocks: 185.185.86.0/24 maxlen: 24
185.185.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:00:c0:db:0d:44:7c:94:2a:a1:44:32:68:f1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eead7e8a2349f402a87bfb32ab6e9946f8c4c3f0
Validity
Not Before: Jan 1 20:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e117f265c30b7609bbb0ad92c2134cfd9c7c2ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8c:fb:31:8a:99:18:5a:7c:8e:b3:29:6d:02:
3f:da:90:f3:ec:0a:d8:24:a0:30:e4:39:d7:4e:51:
9f:91:42:35:ff:72:42:e6:a6:16:39:7d:51:1b:a2:
da:18:09:66:a8:87:78:48:ea:e8:bf:a5:5e:e7:67:
0f:ae:fe:13:6d:c8:42:69:0b:a2:ab:90:17:6c:2e:
8a:30:c8:b1:e3:71:64:6c:66:56:3b:05:19:98:bd:
74:b5:f1:e4:de:b9:53:3f:6d:1b:8a:22:53:9b:92:
6c:88:66:05:73:04:b1:d5:4f:8e:51:39:81:49:e8:
bf:7e:37:61:9a:d0:d4:43:4b:18:36:0b:3a:f6:ab:
19:ad:13:8d:32:c8:2c:e9:0b:d0:f3:03:c5:0d:f9:
48:04:6b:27:89:50:aa:ea:19:b8:f8:17:be:bd:5a:
4c:03:9a:d5:a1:47:b1:b5:47:8d:b8:cd:ec:0c:65:
f5:f1:f9:0a:63:e6:c7:d4:a3:a4:7e:10:01:24:a8:
d6:02:5e:a8:08:7b:82:82:3c:83:fa:14:2f:c1:04:
96:10:2d:22:42:65:96:88:87:e1:1a:c4:fb:0b:88:
a6:f0:90:88:3f:4a:f7:54:17:ca:6a:db:2e:bf:d0:
eb:69:e0:e7:0b:31:d7:9a:a3:a4:8d:1f:f7:79:ac:
2b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:17:F2:65:C3:0B:76:09:BB:B0:AD:92:C2:13:4C:FD:9C:7C:2F:F9
X509v3 Authority Key Identifier:
keyid:EE:AD:7E:8A:23:49:F4:02:A8:7B:FB:32:AB:6E:99:46:F8:C4:C3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q1-iiNJ9AKoe_syq26ZRvjEw_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/4RfyZcMLdgm7sK2SwhNM_Zx8L_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/7q1-iiNJ9AKoe_syq26ZRvjEw_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.86.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:54:dc:42:32:46:1a:4d:a0:de:5b:b8:ca:c3:53:a0:79:c8:
f7:45:50:60:0d:1a:ae:36:fb:fd:c0:9d:3a:30:7f:a3:1e:f2:
d3:a4:58:7b:15:88:04:7d:86:79:13:b8:1d:ae:86:86:f0:fb:
bb:75:b2:67:cf:bd:37:18:34:a2:a6:42:aa:b3:f2:23:08:97:
f7:e2:24:d4:af:7b:b4:b4:1c:1b:0b:22:a6:d3:e0:b1:80:2c:
24:d1:3f:4d:09:98:88:a4:e8:38:b8:f7:8c:a2:e5:f2:4c:e9:
25:c7:7a:14:be:b3:09:5e:7a:6e:a5:f7:da:26:2d:d9:02:60:
75:46:38:2d:7f:c2:3a:1c:8d:f5:79:e7:3f:a3:46:b8:d0:5d:
8e:4c:62:d7:90:cb:87:49:fc:8c:5e:82:66:2a:59:4c:23:25:
b9:98:25:7b:12:1d:0c:96:90:8e:a3:5b:4d:80:7d:08:d0:9e:
a7:f4:bc:02:38:7d:1d:be:d8:20:08:3a:a9:ea:9e:5f:03:fe:
5b:42:17:08:b1:0e:15:a4:2b:d4:12:29:9f:bc:21:82:02:69:
a6:39:62:20:9f:78:fc:9f:05:45:0a:d5:bf:e6:f6:16:9f:54:
31:8f:9c:09:36:aa:33:68:a5:04:87:92:ec:7b:e5:2e:34:0f:
97:2b:bb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:23:39 2025 by rpki-client