Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d75206-3b0e-45e6-b0aa-37d41c5b81bf/1/EoAAuA4MAV0SUm4ZAvreL-1cNuM.roa
File: EoAAuA4MAV0SUm4ZAvreL-1cNuM.roa (raw, json)
Hash identifier: FmE66bdgc7GJJeDaRYYG3xjJP5L6FlhneUUFjoT14Sk=
Subject key identifier: 12:80:00:B8:0E:0C:01:5D:12:52:6E:19:02:FA:DE:2F:ED:5C:36:E3
Certificate issuer: /CN=adb9b628fd33093fa2ac0890ee1ce555cba82671
Certificate serial: 018CC7953EDA619D1823733BD2DE3BB89CB4
Authority key identifier: AD:B9:B6:28:FD:33:09:3F:A2:AC:08:90:EE:1C:E5:55:CB:A8:26:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbm2KP0zCT-irAiQ7hzlVcuoJnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d75206-3b0e-45e6-b0aa-37d41c5b81bf/1/EoAAuA4MAV0SUm4ZAvreL-1cNuM.roa
Signing time: Tue 02 Jan 2024 00:31:36 +0000
ROA not before: Tue 02 Jan 2024 00:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201814
IP address blocks: 185.225.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:3e:da:61:9d:18:23:73:3b:d2:de:3b:b8:9c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb9b628fd33093fa2ac0890ee1ce555cba82671
Validity
Not Before: Jan 2 00:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=128000b80e0c015d12526e1902fade2fed5c36e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1a:ac:3a:e6:f5:ad:c9:c3:c1:23:3b:61:37:
73:c7:66:ed:ce:c4:db:e7:14:60:82:83:b1:ee:44:
71:ec:c8:6a:c5:61:f8:9b:39:67:d3:c5:9b:86:ad:
a8:c5:f3:1e:9d:46:c8:06:14:e5:cd:c6:1f:a3:ae:
26:ac:84:e4:b1:c6:77:d3:6d:98:7d:4a:f1:b7:1b:
00:2b:66:c5:45:c0:c7:d3:3a:19:68:3d:e9:58:40:
47:a9:95:46:ae:ba:a1:82:c2:c9:ce:1e:a6:ac:84:
78:d6:01:62:6c:c3:93:37:ca:96:79:a4:39:a2:db:
0a:f3:11:60:2d:e8:cc:eb:82:7e:c2:bd:ed:20:34:
b9:3d:28:bd:25:56:70:fa:56:29:d7:8e:08:a4:6f:
1b:4e:3a:69:96:24:46:0c:de:db:f2:ac:6d:5a:0c:
88:5c:50:53:3c:23:ac:96:4a:a1:92:cb:71:9e:28:
d9:f7:f0:cf:f3:5c:0a:22:87:7d:7f:c3:a5:d9:ce:
3b:55:ff:09:4e:04:4e:47:4a:bb:82:49:db:c3:64:
5f:46:b7:16:13:fb:3b:2e:0d:e4:7a:b7:79:95:af:
f8:2a:bd:3e:d0:f0:7f:4d:b0:32:cb:1f:81:90:7a:
ce:b6:5d:3a:56:28:7e:dc:ff:18:65:fa:6e:7a:02:
07:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:80:00:B8:0E:0C:01:5D:12:52:6E:19:02:FA:DE:2F:ED:5C:36:E3
X509v3 Authority Key Identifier:
keyid:AD:B9:B6:28:FD:33:09:3F:A2:AC:08:90:EE:1C:E5:55:CB:A8:26:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbm2KP0zCT-irAiQ7hzlVcuoJnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d75206-3b0e-45e6-b0aa-37d41c5b81bf/1/EoAAuA4MAV0SUm4ZAvreL-1cNuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d75206-3b0e-45e6-b0aa-37d41c5b81bf/1/rbm2KP0zCT-irAiQ7hzlVcuoJnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.191.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:96:4e:8e:58:d7:34:bc:2a:0d:63:23:55:03:d5:f5:a9:43:
5d:bb:9e:98:4f:3d:cd:70:1c:fe:5a:b3:32:9b:0d:d9:3c:53:
bd:b1:a4:03:b1:17:a8:b6:cc:d8:b3:80:09:5e:4b:35:ae:1e:
aa:52:3e:42:87:b9:20:10:4c:a8:88:e0:91:93:20:14:87:28:
92:e2:58:f7:a5:49:a8:f9:80:06:68:ec:00:33:3d:0b:cb:fe:
63:53:5b:e8:18:f3:2c:0a:29:cf:d9:24:64:a7:e9:f4:0a:2d:
9b:c7:3a:51:a7:a4:e3:2a:ef:07:3a:9f:f7:93:97:a6:72:24:
6c:10:6c:a3:c1:ee:a5:58:30:36:4e:1e:98:e5:26:92:e4:fc:
a3:2a:70:50:8a:7c:98:3e:e2:04:6c:64:3a:07:aa:12:80:14:
b9:31:29:32:c5:5e:03:66:6c:7b:10:16:da:46:f2:9a:56:07:
11:89:fb:87:9f:d1:04:62:28:30:70:4c:10:2f:17:5e:0a:be:
47:81:1f:b9:a7:96:2c:49:d0:0a:e6:80:cb:6d:78:02:14:92:
66:53:9a:fa:1e:5c:ab:58:a2:89:66:00:ea:f8:dc:14:4d:86:
d5:a8:3a:85:0f:1d:1c:80:5a:f9:0c:9d:78:06:0f:ce:94:0a:
05:04:6e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:29 2024 by rpki-client on console-ams.rpki-client.org