Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/6bf11e-bfba-4329-941e-3572bc40ee2d/1/Vn4UuyxSiGJdRMuuoEpA2nJfEgw.roa
File: Vn4UuyxSiGJdRMuuoEpA2nJfEgw.roa (raw, json)
Hash identifier: amVq4OhrTZkQ5XLFlfk2T9/sSYE6oA5xlTudWdICZ8w=
Subject key identifier: 56:7E:14:BB:2C:52:88:62:5D:44:CB:AE:A0:4A:40:DA:72:5F:12:0C
Certificate issuer: /CN=18376823d1fc69cd224f76d77656dcd89e545d5e
Certificate serial: 018CC726D06D4C305E2AB1B4A5DA69FD9E0D
Authority key identifier: 18:37:68:23:D1:FC:69:CD:22:4F:76:D7:76:56:DC:D8:9E:54:5D:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDdoI9H8ac0iT3bXdlbc2J5UXV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/6bf11e-bfba-4329-941e-3572bc40ee2d/1/Vn4UuyxSiGJdRMuuoEpA2nJfEgw.roa
Signing time: Mon 01 Jan 2024 22:30:58 +0000
ROA not before: Mon 01 Jan 2024 22:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49020
IP address blocks: 185.139.14.0/24 maxlen: 24
185.139.12.0/24 maxlen: 24
185.139.12.0/22 maxlen: 24
185.139.15.0/24 maxlen: 24
185.139.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:d0:6d:4c:30:5e:2a:b1:b4:a5:da:69:fd:9e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18376823d1fc69cd224f76d77656dcd89e545d5e
Validity
Not Before: Jan 1 22:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=567e14bb2c5288625d44cbaea04a40da725f120c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a9:2d:71:c5:75:59:20:0b:2f:68:0b:5d:2e:
2a:14:f4:95:95:61:11:35:15:81:46:99:d1:d2:9b:
26:98:7c:ba:07:ab:43:51:12:73:45:ff:ea:15:35:
9d:f0:61:54:8e:21:7f:21:0c:a0:39:a3:7b:31:93:
29:58:2d:70:a3:7b:8e:2b:07:8b:c9:2d:45:5a:be:
84:0b:ca:f3:41:37:9d:57:92:bb:83:da:da:be:40:
ef:b8:a5:de:24:ee:3e:98:88:7c:d4:1d:a4:11:bb:
93:66:9d:d1:bb:14:67:c0:25:e3:b8:67:28:f5:46:
84:ba:b9:d7:bc:bf:a8:55:2d:a3:e9:28:eb:de:5a:
45:dd:1d:5e:c0:5b:68:cc:14:8a:09:c3:ac:ae:a3:
ed:23:d0:82:51:55:7c:f8:3c:c6:37:6b:e3:05:f8:
7d:07:8a:a7:0c:59:62:61:f7:69:5d:2c:d7:6a:91:
71:0c:f3:d0:69:29:08:6f:68:35:49:e4:2b:74:04:
6d:3a:6e:ea:62:6b:a7:98:0d:98:5f:35:16:c3:a0:
b5:42:03:8f:ac:a4:37:bd:cd:2e:eb:9b:bb:f1:aa:
b5:2c:be:e4:77:c0:87:b1:1b:34:ef:f6:cb:39:d1:
24:ee:fd:a4:df:f3:46:85:3a:df:55:6f:49:2b:8b:
c9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7E:14:BB:2C:52:88:62:5D:44:CB:AE:A0:4A:40:DA:72:5F:12:0C
X509v3 Authority Key Identifier:
keyid:18:37:68:23:D1:FC:69:CD:22:4F:76:D7:76:56:DC:D8:9E:54:5D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDdoI9H8ac0iT3bXdlbc2J5UXV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6bf11e-bfba-4329-941e-3572bc40ee2d/1/Vn4UuyxSiGJdRMuuoEpA2nJfEgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6bf11e-bfba-4329-941e-3572bc40ee2d/1/GDdoI9H8ac0iT3bXdlbc2J5UXV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.12.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:8f:cf:4e:fb:e3:43:f5:1a:21:87:93:7d:d3:0f:51:92:2c:
9f:0c:3a:cf:d8:79:24:9b:27:92:ce:f7:09:77:c9:23:42:f2:
d5:d7:3e:71:65:14:75:47:cc:a9:80:ad:dc:3c:88:f3:f6:c5:
33:6b:0f:38:9d:39:32:49:b3:86:11:fd:5b:98:8c:90:6e:7b:
d8:3d:66:3c:b8:47:3f:bd:6f:5b:9b:5a:fb:7b:65:28:c7:b0:
e2:70:9b:6f:b1:e5:a6:79:df:39:aa:21:df:d9:f0:6a:70:10:
f2:13:a4:d3:11:99:e1:01:a6:e4:f0:3d:78:b0:0a:06:cc:a5:
9a:ba:6b:62:d5:1d:b7:f8:e7:4e:09:f2:fb:90:ff:e2:d0:4a:
15:14:6e:a0:28:67:b1:ed:21:f5:57:75:4a:ea:b0:88:94:1c:
10:73:00:19:c6:c4:d3:24:eb:2d:0c:5f:e1:11:c3:1a:f5:4c:
c3:89:60:54:15:c4:cb:02:32:0b:23:e2:09:42:d2:ea:91:f6:
0e:fd:7d:1d:0e:d9:02:6a:39:57:c5:c9:8b:ae:5e:61:01:5f:
e8:b6:60:e9:08:03:ae:45:a4:3b:38:96:29:0f:5d:c1:9a:24:
46:ad:32:0c:09:85:a7:f6:5d:6a:15:6a:e4:df:82:2c:24:83:
4a:b4:70:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 7 06:04:41 2024 by rpki-client on console-ams.rpki-client.org