Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/289081-1925-4eb2-aee3-c0de6ed8b303/1/fckEDEoKHkR0MLbeh1g7SOPZdnc.roa
File: fckEDEoKHkR0MLbeh1g7SOPZdnc.roa (raw, json)
Hash identifier: O6RPR9p50YQuq6KTvBfxUwzTRd74ux7sced8sT4oP3g=
Subject key identifier: 7D:C9:04:0C:4A:0A:1E:44:74:30:B6:DE:87:58:3B:48:E3:D9:76:77
Certificate issuer: /CN=67cf714896a1257bd7ceb11c2bbf10e27dfd3782
Certificate serial: 05BC973B
Authority key identifier: 67:CF:71:48:96:A1:25:7B:D7:CE:B1:1C:2B:BF:10:E2:7D:FD:37:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z89xSJahJXvXzrEcK78Q4n39N4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/289081-1925-4eb2-aee3-c0de6ed8b303/1/fckEDEoKHkR0MLbeh1g7SOPZdnc.roa
Signing time: Sat 01 Jan 2022 14:02:25 +0000
ROA not before: Sat 01 Jan 2022 14:02:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38955
IP address blocks: 185.164.4.0/23 maxlen: 23
185.164.6.0/23 maxlen: 23
2a0a:7c00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96245563 (0x5bc973b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cf714896a1257bd7ceb11c2bbf10e27dfd3782
Validity
Not Before: Jan 1 14:02:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7dc9040c4a0a1e447430b6de87583b48e3d97677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:50:f0:75:f1:f0:52:51:e6:d9:45:07:5d:23:
7a:de:3a:99:e3:5c:09:d2:9f:bd:4f:27:2a:53:1e:
dc:d7:db:e5:d1:d0:61:47:91:4a:6a:bb:32:26:60:
40:20:ce:b6:37:ab:e8:ce:20:34:7f:d0:8c:63:8c:
b8:0b:57:f2:e1:96:d6:c2:d7:43:18:a6:cc:04:8e:
86:e4:0e:ea:07:6d:28:fa:e7:d7:84:63:fb:7c:cc:
7b:c0:a5:53:9b:7f:fc:21:f1:d6:9b:91:0b:b4:9a:
5f:17:c6:c2:39:c3:0a:be:ae:f8:e2:77:bb:0a:10:
41:43:b5:a6:71:03:52:43:2c:a8:0c:8c:cb:66:61:
ff:f5:ca:e0:ea:87:e5:84:9b:e7:3b:e9:43:8f:94:
b8:cf:5c:85:d0:41:3f:95:43:2d:97:1b:65:45:d4:
a7:41:2c:df:5f:0e:0a:8a:99:fe:54:6b:75:d4:a6:
8e:9b:66:0a:22:ce:97:05:94:5a:d5:dd:41:eb:66:
4b:09:99:fa:33:0e:9c:8e:b8:4e:2c:0e:5d:59:29:
a2:69:27:96:be:76:dd:94:10:df:7a:9a:b1:31:b0:
3e:2e:16:7b:b1:c5:00:7f:68:10:16:09:d3:23:15:
92:2b:6a:22:0e:a6:bd:9f:4a:8c:fd:25:cc:fc:61:
b8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C9:04:0C:4A:0A:1E:44:74:30:B6:DE:87:58:3B:48:E3:D9:76:77
X509v3 Authority Key Identifier:
keyid:67:CF:71:48:96:A1:25:7B:D7:CE:B1:1C:2B:BF:10:E2:7D:FD:37:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z89xSJahJXvXzrEcK78Q4n39N4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/289081-1925-4eb2-aee3-c0de6ed8b303/1/fckEDEoKHkR0MLbeh1g7SOPZdnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/289081-1925-4eb2-aee3-c0de6ed8b303/1/Z89xSJahJXvXzrEcK78Q4n39N4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.4.0/22
IPv6:
2a0a:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
3a:25:e3:37:4c:7f:64:63:20:9a:61:0c:67:b0:02:84:9f:a4:
9f:a7:cd:dc:b5:44:60:1f:34:1c:80:11:77:1f:cd:93:d6:36:
9c:6b:2b:69:de:89:94:6e:d4:d2:88:bb:35:c5:7b:63:1b:79:
7c:0b:e1:ae:0d:47:6c:5c:60:72:3b:a2:06:79:b5:c0:c6:4f:
87:d5:99:e9:45:c9:69:d4:24:e5:9e:84:a0:95:9e:31:65:46:
e4:b3:22:93:10:ab:ca:df:9b:31:09:45:82:a0:2e:32:c0:33:
05:41:11:ad:72:e0:f6:68:b9:de:d3:45:b9:93:4d:fc:a3:50:
ac:63:12:cb:a4:63:dd:ec:f8:15:9f:da:ee:8e:da:4c:82:6c:
ad:6d:89:18:0e:ce:e6:6b:e3:f0:69:b6:23:a1:12:60:f2:bc:
e6:15:8c:02:14:90:2e:63:c9:4a:6f:00:db:60:17:cb:80:43:
19:2d:da:4f:6f:5e:76:47:3f:6b:23:7d:fc:e5:2f:46:e0:97:
32:d8:46:53:2f:1b:e8:34:a7:91:05:63:f0:a9:c9:c9:69:15:
17:38:92:f8:ec:59:7a:58:94:1a:29:3d:15:4b:49:fc:d9:e1:
68:af:de:fc:51:88:21:bb:74:9a:3a:7f:22:34:e0:ad:9e:8f:
98:d6:c2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:50 2024 by rpki-client on console-fra.rpki-client.org