Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/JmTKv-PfmlrDrwr3tP936vBHcy8.roa
File: JmTKv-PfmlrDrwr3tP936vBHcy8.roa (raw, json)
Hash identifier: yETvTHoQA0Zgrc2DAY4Ez7H/JN0iTnsM62BI45ugHGc=
Subject key identifier: 26:64:CA:BF:E3:DF:9A:5A:C3:AF:0A:F7:B4:FF:77:EA:F0:47:73:2F
Certificate issuer: /CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
Certificate serial: 01856C0116394E7FFEC2AF6D066DE6E9B40A
Authority key identifier: 09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/JmTKv-PfmlrDrwr3tP936vBHcy8.roa
Signing time: Sun 01 Jan 2023 06:24:48 +0000
ROA not before: Sun 01 Jan 2023 06:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59462
IP address blocks: 185.22.231.0/24 maxlen: 24
185.150.16.0/24 maxlen: 24
2a0e:d487:f000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:16:39:4e:7f:fe:c2:af:6d:06:6d:e6:e9:b4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
Validity
Not Before: Jan 1 06:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2664cabfe3df9a5ac3af0af7b4ff77eaf047732f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:00:58:cc:c2:2b:68:ea:49:34:52:6d:03:
60:1b:46:06:9a:9a:e4:8d:33:52:65:b5:10:8d:88:
76:11:d2:aa:c8:ed:15:95:eb:a7:25:fc:88:1c:17:
cd:d2:fd:9c:6a:2e:27:0d:bf:39:be:6e:93:16:2a:
1e:08:c2:7f:bb:f5:4d:56:72:02:77:6e:bb:01:a7:
de:8d:28:9a:72:1d:2a:78:7a:59:5a:42:3f:de:d8:
33:d4:a2:02:3d:1f:45:bc:83:a1:ea:84:22:87:60:
1a:fa:a9:69:b5:2d:37:97:5e:bb:28:d3:fb:db:93:
e2:7c:28:11:8e:ae:4f:6a:64:87:83:7a:44:b4:60:
bf:a8:92:5b:45:6a:a4:a4:de:14:1b:5b:fd:cd:94:
59:f3:eb:fc:d7:01:c4:28:86:d2:69:c3:dc:be:3f:
d8:bb:d1:e6:ff:1c:78:3a:40:21:07:9c:e8:6d:fb:
b7:d5:a0:89:85:88:56:e8:85:53:05:58:36:98:0b:
5c:2c:57:bd:c5:f5:dc:a2:87:30:ff:2c:a3:b6:ee:
ed:f5:de:48:68:42:03:83:0a:35:25:c0:80:d5:58:
69:7c:39:3b:e8:f2:fa:4e:ad:0d:d7:36:1b:1b:1b:
42:6e:28:f4:7b:68:49:f5:9c:76:56:4e:67:5f:33:
cc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:64:CA:BF:E3:DF:9A:5A:C3:AF:0A:F7:B4:FF:77:EA:F0:47:73:2F
X509v3 Authority Key Identifier:
keyid:09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/JmTKv-PfmlrDrwr3tP936vBHcy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/CbnTdFC2KuPxROtCrFLOJDtiino.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.231.0/24
185.150.16.0/24
IPv6:
2a0e:d487:f000::/48
Signature Algorithm: sha256WithRSAEncryption
86:b9:52:b3:7d:06:30:43:3a:7a:c6:a1:dc:df:3b:93:a7:5b:
c6:f1:be:4b:e7:e5:c6:23:a0:4c:e7:76:4b:0a:96:7e:12:98:
80:47:b1:f7:59:3d:83:af:8d:f5:00:1d:cf:8c:dd:38:c8:96:
ec:13:05:f6:ca:0a:7b:42:61:03:b5:0c:61:7f:81:3f:b7:de:
18:28:7f:e3:16:a4:26:02:e3:01:61:0a:8e:21:ab:3c:43:54:
43:39:52:f6:2b:2e:b4:24:ed:53:7d:03:d8:88:ac:ad:a8:b4:
69:7d:c4:2c:38:72:51:5a:d7:4b:85:f1:62:aa:2b:ad:d3:42:
b6:42:ea:34:ac:f7:26:c7:a5:da:e9:f8:01:63:f8:89:52:0f:
22:10:3f:ce:64:e3:63:82:7f:98:bb:d8:d2:d3:87:0a:45:a9:
8d:35:25:ce:03:23:c6:53:ba:75:97:14:68:18:87:42:f8:7d:
95:b3:46:34:f5:e4:b2:96:6e:c9:e9:65:10:a2:d1:38:46:47:
85:62:83:5c:69:61:0d:ed:3b:d0:15:0e:9c:ce:ef:f2:bf:ce:
d9:76:c5:63:83:95:f7:21:85:de:92:82:e7:4b:fb:6b:6c:03:
af:d0:45:3e:d0:01:a8:9b:66:38:c1:2e:bf:ad:4b:62:b7:ae:
12:59:61:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:45 2024 by rpki-client on console-ams.rpki-client.org