Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/741668-d2e5-4ea2-a55a-a7514fc4eb48/1/j105-1dP1nlvBEYGY6j9br8aTMQ.roa
File: j105-1dP1nlvBEYGY6j9br8aTMQ.roa (raw, json)
Hash identifier: +fW0o2zmnjKViKuVKPKwBUKhosIY8+mgMOACCnig6Vs=
Subject key identifier: 8F:5D:39:FB:57:4F:D6:79:6F:04:46:06:63:A8:FD:6E:BF:1A:4C:C4
Certificate issuer: /CN=108e1a53b1eb11d821be966dfa4af17f70cc08bd
Certificate serial: 0181F6E4A57FBB38CC305208E27062B86BAD
Authority key identifier: 10:8E:1A:53:B1:EB:11:D8:21:BE:96:6D:FA:4A:F1:7F:70:CC:08:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EI4aU7HrEdghvpZt-krxf3DMCL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/741668-d2e5-4ea2-a55a-a7514fc4eb48/1/j105-1dP1nlvBEYGY6j9br8aTMQ.roa
Signing time: Wed 13 Jul 2022 09:29:48 +0000
ROA not before: Wed 13 Jul 2022 09:29:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41011
IP address blocks: 193.238.244.0/24 maxlen: 24
193.238.245.0/24 maxlen: 24
193.238.246.0/24 maxlen: 24
185.238.161.0/24 maxlen: 24
185.108.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f6:e4:a5:7f:bb:38:cc:30:52:08:e2:70:62:b8:6b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108e1a53b1eb11d821be966dfa4af17f70cc08bd
Validity
Not Before: Jul 13 09:29:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f5d39fb574fd6796f04460663a8fd6ebf1a4cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ba:fa:ce:9d:96:a3:a4:14:03:32:df:65:0b:
22:ac:00:fd:dc:f8:b1:8b:59:0c:86:df:cc:43:a8:
b3:4b:99:0f:53:e6:18:77:ed:de:70:a4:8f:a2:1d:
2c:88:b3:0f:e7:ea:1f:fd:13:11:c8:2b:5a:ec:6a:
1b:0e:6d:9c:b2:47:67:14:94:ca:db:9e:9e:fc:21:
00:84:e4:7d:91:ee:c1:76:48:68:e6:8b:7d:b4:b2:
55:d6:75:08:1b:4a:0a:a4:cd:55:17:d1:6a:20:b2:
a9:94:ee:8c:9d:4d:ad:fc:cf:b5:22:86:59:14:42:
d4:6c:0d:7b:6b:0a:07:9b:e0:97:e7:b6:bb:9f:7d:
da:01:fd:fd:f6:b8:27:73:2a:d0:9b:66:fe:c3:8d:
b4:dd:df:b0:b1:bd:95:41:3f:50:ca:73:04:49:9a:
47:3d:35:64:8e:a0:30:bd:eb:e7:7e:3e:04:56:a8:
f1:9f:cd:89:92:d5:27:20:13:f6:79:bf:b3:78:67:
e3:c4:8e:79:ab:15:ff:dc:2b:e0:09:03:5f:5b:94:
82:ad:51:8d:4d:d6:62:98:87:0f:ee:aa:64:5a:93:
9a:29:a8:17:0c:b2:3b:53:68:7e:73:f4:2a:1e:0a:
38:8d:6c:90:5c:c6:49:df:52:4d:3f:c3:c5:8f:e7:
a7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5D:39:FB:57:4F:D6:79:6F:04:46:06:63:A8:FD:6E:BF:1A:4C:C4
X509v3 Authority Key Identifier:
keyid:10:8E:1A:53:B1:EB:11:D8:21:BE:96:6D:FA:4A:F1:7F:70:CC:08:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EI4aU7HrEdghvpZt-krxf3DMCL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/741668-d2e5-4ea2-a55a-a7514fc4eb48/1/j105-1dP1nlvBEYGY6j9br8aTMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/741668-d2e5-4ea2-a55a-a7514fc4eb48/1/EI4aU7HrEdghvpZt-krxf3DMCL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.156.0/24
185.238.161.0/24
193.238.244.0-193.238.246.255
Signature Algorithm: sha256WithRSAEncryption
4f:56:28:aa:dd:c9:33:78:1f:13:c6:e5:97:ce:c3:cf:56:35:
74:5f:d8:b5:86:aa:1e:8c:ce:9a:8e:52:cf:0f:f4:2c:0a:3a:
d0:a9:ee:88:6b:e5:92:0b:91:78:31:85:a5:28:bb:d1:10:43:
6d:e1:9d:d7:35:d2:d0:1b:dd:98:19:06:cb:cb:d5:e4:51:44:
2c:3d:89:26:31:d7:b8:96:4c:62:fb:2e:20:3b:dd:40:56:b9:
80:1b:a0:5f:11:d9:61:7e:3e:f0:02:a7:95:13:67:fa:87:d2:
94:e4:86:55:c4:59:10:44:2f:9c:4f:71:0b:18:d8:33:de:60:
40:7a:58:2c:70:fe:30:6d:b3:51:72:12:5e:c3:98:ab:18:16:
c1:b4:1a:e4:93:2c:65:e4:55:8b:de:85:5b:ee:06:70:ef:c3:
50:28:c0:25:69:98:8d:1a:b0:04:c6:ea:b5:c8:8e:7d:d1:06:
e4:cb:20:9d:0b:1f:b2:53:12:15:94:16:8b:76:a3:ef:6d:4a:
ee:41:4c:18:b9:90:f5:f8:09:af:49:e1:2c:76:c7:7d:22:99:
6f:ed:36:a1:71:cd:dd:01:61:42:ef:43:8d:68:d4:b4:6b:92:
03:2c:04:b5:ef:20:06:1c:df:1d:d6:db:46:e8:4b:cf:ae:d4:
f4:92:71:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:25 2024 by rpki-client on console-fra.rpki-client.org