Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/kb5cGqJww2-LPTQ6q2QJ3BFuA9o.roa
File: kb5cGqJww2-LPTQ6q2QJ3BFuA9o.roa (raw, json)
Hash identifier: LN/PXB9jWPS+E+1IK8lhoNAyN0zmz94agrSt8cXD7/8=
Subject key identifier: 91:BE:5C:1A:A2:70:C3:6F:8B:3D:34:3A:AB:64:09:DC:11:6E:03:DA
Certificate issuer: /CN=192fc85b01f21a0d685c03001df47ac460937bf1
Certificate serial: 018B81915D17BC7047D870B18C097C593924
Authority key identifier: 19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/kb5cGqJww2-LPTQ6q2QJ3BFuA9o.roa
Signing time: Mon 30 Oct 2023 17:11:09 +0000
ROA not before: Mon 30 Oct 2023 17:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207431
IP address blocks: 185.190.31.0/24 maxlen: 24
185.190.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:81:91:5d:17:bc:70:47:d8:70:b1:8c:09:7c:59:39:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=192fc85b01f21a0d685c03001df47ac460937bf1
Validity
Not Before: Oct 30 17:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91be5c1aa270c36f8b3d343aab6409dc116e03da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:52:09:f7:c0:fb:d5:0e:47:91:24:16:71:b1:
05:f5:66:45:a2:be:19:f6:f4:26:c1:e1:1b:a2:a8:
13:d5:26:ad:a2:27:2d:bc:8e:2d:1a:52:40:8b:b7:
1a:28:44:1b:78:d7:57:f6:a8:e9:ed:a6:df:79:08:
ed:af:c5:3c:c3:6c:9f:ca:df:4f:4d:52:74:bc:24:
0e:5c:77:ed:7d:61:37:35:c8:b3:bf:8e:9e:1b:1e:
f2:73:32:5c:5d:61:df:9e:19:e3:f4:1d:36:2d:bc:
5a:69:a2:f5:72:eb:5f:eb:bc:30:02:c2:c4:ad:33:
9d:81:e6:d5:d7:30:2b:cb:c7:84:79:ea:29:57:22:
e1:76:c0:67:05:00:83:45:45:62:bb:a7:2e:be:61:
e0:aa:ec:dc:dd:8a:03:c3:db:e2:d5:55:39:76:e8:
a5:07:95:d2:a5:26:e3:9a:7d:4a:4f:19:65:23:a8:
71:85:a5:1b:48:b7:de:ff:54:a2:f5:dd:2a:d6:c0:
59:cd:f7:9c:68:8b:d6:f0:30:8f:e6:d5:11:eb:b2:
20:f7:87:04:76:56:61:6d:38:bd:cd:0d:2e:45:98:
38:5a:4d:da:b2:8b:a0:2f:14:38:5b:33:fc:45:36:
0e:d4:bc:5e:e9:1e:1e:1c:d3:67:3b:37:b2:6d:9a:
ef:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BE:5C:1A:A2:70:C3:6F:8B:3D:34:3A:AB:64:09:DC:11:6E:03:DA
X509v3 Authority Key Identifier:
keyid:19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/kb5cGqJww2-LPTQ6q2QJ3BFuA9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.30.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:e5:89:d3:95:b2:6c:4b:12:dd:f7:2c:e5:c4:99:89:4b:08:
49:15:79:3f:5d:5c:59:7b:1e:86:b7:67:5c:b9:ff:ef:2b:0f:
b1:f3:8d:8f:16:18:d7:3f:8e:2d:ea:06:37:e3:e6:35:b2:9d:
89:50:ca:dc:2e:dd:36:a8:e0:b4:0b:a9:44:6b:6a:ee:91:3f:
9d:1e:d7:71:1d:c3:57:1c:07:b9:4b:09:b9:21:fb:08:17:b7:
62:53:30:f1:b0:b7:a6:1a:d8:4f:45:c4:ab:57:39:e6:a4:74:
e0:cf:fd:cb:c2:14:a5:46:42:cb:8a:e5:f2:d1:9e:7d:ae:4d:
99:4a:e7:98:29:65:14:0e:65:9c:6b:5c:64:3c:3d:39:18:a1:
8f:3e:64:d3:ec:83:4d:99:10:3d:65:e8:de:44:8d:48:4c:d7:
c0:75:0a:2b:fd:e8:9a:ea:d7:37:00:4d:d4:1a:d5:71:5b:c3:
de:19:e8:58:25:42:14:09:9f:a2:56:31:e4:93:e0:0c:db:b2:
75:78:3e:b5:16:b9:35:ea:be:4b:f4:8e:20:b0:76:23:58:4b:
41:9a:20:4d:15:d1:fc:d5:08:b2:f7:4a:d9:ef:73:82:fd:f9:
e8:c1:99:f6:13:4c:ac:a9:6f:87:00:7e:c0:d5:c3:f9:29:9e:
fe:8f:af:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:28:07 2025 by rpki-client