Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/fe5817-a482-42dd-a7f6-8c99481ec6c4/1/KaA0_QxakYxe5q2jo3ejuflmCgk.roa
File: KaA0_QxakYxe5q2jo3ejuflmCgk.roa (raw, json)
Hash identifier: MmAaZ2WhWdgtjjeUAf1EZkkwsVziClVr1yBJKNprnqQ=
Subject key identifier: 29:A0:34:FD:0C:5A:91:8C:5E:E6:AD:A3:A3:77:A3:B9:F9:66:0A:09
Certificate issuer: /CN=6aa45f8cf463dc92bb2431359b8b6e5ffd8f719c
Certificate serial: 018D16DD92C71A33AF79134D8510DB08FF03
Authority key identifier: 6A:A4:5F:8C:F4:63:DC:92:BB:24:31:35:9B:8B:6E:5F:FD:8F:71:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqRfjPRj3JK7JDE1m4tuX_2PcZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/fe5817-a482-42dd-a7f6-8c99481ec6c4/1/KaA0_QxakYxe5q2jo3ejuflmCgk.roa
Signing time: Wed 17 Jan 2024 10:00:36 +0000
ROA not before: Wed 17 Jan 2024 10:00:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202766
IP address blocks: 185.247.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:16:dd:92:c7:1a:33:af:79:13:4d:85:10:db:08:ff:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa45f8cf463dc92bb2431359b8b6e5ffd8f719c
Validity
Not Before: Jan 17 10:00:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29a034fd0c5a918c5ee6ada3a377a3b9f9660a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:da:e4:f5:c6:96:53:4e:21:be:b9:d2:3b:
57:84:f1:32:6f:d3:07:06:68:9c:c3:47:2e:8e:b1:
ed:ff:e4:ec:42:36:fa:0e:e1:f3:99:3a:1f:c1:52:
6e:9b:2a:61:e1:b2:5f:a4:c8:49:07:1a:b0:7a:70:
e8:13:2f:a8:95:8d:da:fb:c5:21:c1:20:3a:79:b5:
6a:1a:ad:d2:14:d8:a7:80:88:8f:d0:9e:da:ee:5c:
3b:b2:46:64:87:52:ba:06:5c:a2:26:ed:e1:b6:00:
ec:c5:91:cf:24:fc:92:0f:2d:ee:b4:e9:4a:4e:e8:
eb:0c:92:3b:46:cb:ef:f6:44:a2:6e:71:ae:6c:b4:
0e:82:76:f7:5e:f9:c4:34:ae:7a:42:0c:89:00:43:
ab:39:c9:aa:88:44:68:ef:9e:cf:9f:e0:94:87:0c:
5f:89:59:1e:a4:97:f2:bd:34:17:93:58:4c:ec:b6:
c9:59:9e:06:e0:ed:c4:66:7a:a7:a6:c5:16:db:8f:
01:04:5d:dd:2b:1e:4c:62:21:f9:81:7a:c3:43:12:
53:a4:f0:5a:ea:78:38:05:77:c3:1f:79:8f:0b:ce:
41:00:af:96:57:bd:35:0a:4c:1c:9a:fb:d7:41:b7:
46:1b:ea:24:f0:2b:d6:27:a2:85:d8:68:ab:32:c3:
af:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A0:34:FD:0C:5A:91:8C:5E:E6:AD:A3:A3:77:A3:B9:F9:66:0A:09
X509v3 Authority Key Identifier:
keyid:6A:A4:5F:8C:F4:63:DC:92:BB:24:31:35:9B:8B:6E:5F:FD:8F:71:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqRfjPRj3JK7JDE1m4tuX_2PcZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fe5817-a482-42dd-a7f6-8c99481ec6c4/1/KaA0_QxakYxe5q2jo3ejuflmCgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fe5817-a482-42dd-a7f6-8c99481ec6c4/1/aqRfjPRj3JK7JDE1m4tuX_2PcZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.24.0/22
Signature Algorithm: sha256WithRSAEncryption
77:22:a6:8a:9d:19:bc:02:bf:6d:0f:1a:ca:8f:15:f7:17:8c:
57:49:38:bf:18:c7:9c:15:d0:04:e8:e5:b0:b0:f4:24:25:cc:
cc:6d:63:fb:ac:03:fb:c2:b4:27:0f:32:b0:3e:bd:76:06:ac:
07:e0:22:b9:14:3d:da:3c:19:b6:f4:b1:2f:0e:63:a7:21:0b:
48:96:bc:65:fd:3f:1a:be:b0:75:81:88:0e:9e:67:76:38:9f:
fa:e8:c0:f6:1f:a9:7e:96:fb:a9:b7:5a:75:a9:25:0f:ec:31:
be:01:da:5a:c9:36:3d:2e:7e:c9:45:9f:7a:cc:bc:f0:4a:59:
8c:0d:e0:c7:28:e5:9f:f8:d9:7e:c9:e7:a1:87:33:ae:6a:e1:
1a:6a:06:b8:1f:54:32:06:eb:02:8e:fe:6a:a3:73:62:09:a7:
be:e5:8a:39:d9:fb:78:bc:54:c6:02:49:ab:c9:1a:a0:22:ac:
2f:4c:02:d7:87:08:94:a6:b2:e1:03:7b:30:e7:49:01:17:ea:
d4:31:b8:12:69:43:19:b1:e9:2a:30:2a:44:c4:2a:8d:f8:11:
6d:2d:e2:45:9c:bd:8a:18:4e:54:41:ac:70:d8:48:e6:3d:e0:
43:8b:dc:0f:c9:0e:85:2f:1b:32:dc:c7:25:d3:97:3a:4d:a3:
44:86:9b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:56 2024 by rpki-client on console-ams.rpki-client.org