Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/JbcsSUBqJIV7FPCn1O2EvVpPiAg.roa
File: JbcsSUBqJIV7FPCn1O2EvVpPiAg.roa (raw, json)
Hash identifier: g6lEGfKHcN08s7P8YNII0sfT3Rs5qiba7Usj06uvh6I=
Subject key identifier: 25:B7:2C:49:40:6A:24:85:7B:14:F0:A7:D4:ED:84:BD:5A:4F:88:08
Certificate issuer: /CN=60614515907e8eac99806617d5f69c40db91a3f5
Certificate serial: 018CC2DB2C6C848EC416DF4263511E459305
Authority key identifier: 60:61:45:15:90:7E:8E:AC:99:80:66:17:D5:F6:9C:40:DB:91:A3:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGFFFZB-jqyZgGYX1facQNuRo_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/JbcsSUBqJIV7FPCn1O2EvVpPiAg.roa
Signing time: Mon 01 Jan 2024 02:29:52 +0000
ROA not before: Mon 01 Jan 2024 02:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206491
IP address blocks: 185.185.88.0/23 maxlen: 23
2a0b:4e80::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:2c:6c:84:8e:c4:16:df:42:63:51:1e:45:93:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60614515907e8eac99806617d5f69c40db91a3f5
Validity
Not Before: Jan 1 02:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25b72c49406a24857b14f0a7d4ed84bd5a4f8808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:89:13:5c:01:74:b9:87:55:32:06:26:f9:
89:58:43:f1:79:a4:15:cc:45:97:5f:ae:e3:3e:03:
12:73:74:da:9b:08:34:12:8d:58:16:3b:eb:31:b7:
50:94:88:ab:49:4a:8e:8b:23:7e:fa:b0:1a:61:b0:
b2:9e:63:8e:0a:25:3d:0a:46:fe:e8:0a:85:07:61:
cc:a3:ea:6a:99:dc:f9:ed:88:35:ad:db:2c:2b:e5:
ea:83:33:47:b8:a9:ed:94:1c:13:bc:c5:6c:0f:41:
bc:ef:69:4d:58:88:68:ba:43:79:31:3d:b1:35:d6:
56:97:90:08:06:9c:a8:23:f0:05:b9:3f:b6:28:bf:
df:59:93:e7:d8:30:c6:ca:15:b8:06:e0:63:7f:a1:
f9:3f:97:b9:41:24:bd:7d:36:1d:8f:84:48:c7:f5:
b2:16:a2:3e:9b:ab:df:29:24:24:02:8c:18:88:69:
18:2b:09:73:cf:c9:7e:cd:b5:09:28:2e:d3:91:50:
26:58:3f:be:ae:17:39:04:d3:a5:74:10:c6:3e:76:
8f:64:a3:4d:b6:44:f0:82:dc:40:64:b8:13:d2:54:
91:f2:d7:d9:9c:99:77:26:71:1f:f1:ef:ce:be:39:
fa:24:df:64:3f:55:20:ea:e8:68:55:8b:33:8a:0b:
77:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B7:2C:49:40:6A:24:85:7B:14:F0:A7:D4:ED:84:BD:5A:4F:88:08
X509v3 Authority Key Identifier:
keyid:60:61:45:15:90:7E:8E:AC:99:80:66:17:D5:F6:9C:40:DB:91:A3:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGFFFZB-jqyZgGYX1facQNuRo_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/JbcsSUBqJIV7FPCn1O2EvVpPiAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/YGFFFZB-jqyZgGYX1facQNuRo_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.88.0/23
IPv6:
2a0b:4e80::/29
Signature Algorithm: sha256WithRSAEncryption
71:c0:6a:83:22:56:61:5c:5f:e6:6c:a0:9c:97:d7:e4:6c:4d:
b8:32:67:c6:fb:fd:5e:84:c3:65:19:bd:8b:aa:bc:77:8a:cf:
5f:83:2f:ea:05:8c:c8:2a:64:51:8c:48:c2:31:54:e5:d5:0d:
12:43:b5:7e:42:67:dd:13:f6:e3:e1:36:70:eb:db:de:c1:87:
04:d6:9b:5f:97:a5:33:ff:2d:77:c2:38:e1:5f:56:7e:c9:11:
49:2b:b0:42:17:db:3a:56:f8:a1:23:76:3c:00:f9:5a:b2:a1:
dd:b3:61:04:5d:08:6f:07:5d:2d:1c:5c:a2:f6:24:da:67:a6:
e4:98:8c:69:0f:4e:c2:e6:26:9b:99:eb:68:a4:b5:9e:99:e0:
54:31:1b:f6:02:90:c9:96:3f:c0:77:6c:26:33:e6:00:ae:db:
4a:f8:ad:fc:9a:1c:d1:b3:c9:b4:6a:a0:0b:27:bc:f7:68:d1:
ec:d7:93:11:94:1e:fd:8b:39:f3:07:b9:fc:78:60:d8:50:86:
73:3f:f4:8d:a5:68:de:58:31:28:da:91:f8:98:4c:89:c2:8f:
b9:5f:fe:51:b3:1e:b9:0d:5d:7d:9d:c4:10:2e:1e:0e:98:22:
9d:8d:66:b6:81:65:ef:a4:3a:32:47:45:28:68:be:32:3e:28:
ed:27:ad:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 09:22:50 2024 by rpki-client on console-fra.rpki-client.org