Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/abo3PxWcu0YqjyfUPkXrD2OcqNA.roa
File: abo3PxWcu0YqjyfUPkXrD2OcqNA.roa (raw, json)
Hash identifier: EwTUAFExkRXkUHD3o64XsgfJeDzD5XQwXYimDZV+pjk=
Subject key identifier: 69:BA:37:3F:15:9C:BB:46:2A:8F:27:D4:3E:45:EB:0F:63:9C:A8:D0
Certificate issuer: /CN=60614515907e8eac99806617d5f69c40db91a3f5
Certificate serial: 018CC2DB2C2880EC5E0BAC912296D76639FD
Authority key identifier: 60:61:45:15:90:7E:8E:AC:99:80:66:17:D5:F6:9C:40:DB:91:A3:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGFFFZB-jqyZgGYX1facQNuRo_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/abo3PxWcu0YqjyfUPkXrD2OcqNA.roa
Signing time: Mon 01 Jan 2024 02:29:52 +0000
ROA not before: Mon 01 Jan 2024 02:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51790
IP address blocks: 185.185.91.0/24 maxlen: 24
185.185.90.0/23 maxlen: 23
2a0b:4e87::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:2c:28:80:ec:5e:0b:ac:91:22:96:d7:66:39:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60614515907e8eac99806617d5f69c40db91a3f5
Validity
Not Before: Jan 1 02:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69ba373f159cbb462a8f27d43e45eb0f639ca8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:9b:32:ad:3b:61:9d:ae:88:a7:3c:b4:4f:
ee:e2:ff:e1:e7:29:68:54:33:04:dd:99:7a:a3:75:
10:d1:c2:64:bd:13:97:ac:3c:6b:45:ab:e0:f0:a6:
5a:9b:32:cf:77:ce:8b:fb:94:db:b6:f1:3e:74:ec:
70:53:c9:81:b7:76:ab:36:d3:33:c9:0c:4e:37:ea:
13:43:eb:6f:e6:b5:8f:0a:1c:a2:8c:c1:55:1a:1c:
03:32:78:10:d8:ce:d1:dd:d5:5c:16:89:75:a7:6c:
e9:df:4e:de:ff:a2:6d:d2:80:60:02:e5:e8:e4:f0:
b3:cb:50:19:3b:a7:ac:54:da:be:1f:c4:94:cc:9b:
07:a6:37:82:47:15:cb:b5:98:5f:5a:f8:08:a7:a8:
ef:a9:ea:bc:6c:3c:b4:3d:6d:7f:80:c2:01:ca:56:
3b:6c:c8:b5:cd:f5:75:0d:5d:a8:7a:c2:6c:b8:99:
87:5a:68:92:13:3b:8d:11:ad:e0:b5:f9:41:8e:82:
fa:73:9b:2b:fb:9b:59:65:8a:ed:aa:ab:0a:42:78:
d4:50:10:8a:3d:df:63:c3:5f:ca:19:0d:aa:8a:33:
eb:43:5b:be:2d:e6:b3:77:1c:f0:84:85:f6:37:36:
b2:e0:a6:b3:8a:04:79:a4:50:79:63:0b:c3:64:37:
64:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BA:37:3F:15:9C:BB:46:2A:8F:27:D4:3E:45:EB:0F:63:9C:A8:D0
X509v3 Authority Key Identifier:
keyid:60:61:45:15:90:7E:8E:AC:99:80:66:17:D5:F6:9C:40:DB:91:A3:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGFFFZB-jqyZgGYX1facQNuRo_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/abo3PxWcu0YqjyfUPkXrD2OcqNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/YGFFFZB-jqyZgGYX1facQNuRo_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.90.0/23
IPv6:
2a0b:4e87::/32
Signature Algorithm: sha256WithRSAEncryption
60:b4:14:e9:c8:78:54:c8:98:9b:b4:31:98:f2:09:6d:09:1f:
82:23:33:ed:2b:c2:69:0e:c1:a0:a8:fc:e1:f2:3f:c2:de:4c:
2a:b2:7c:4d:4b:ba:7f:f0:35:01:90:c8:f3:61:7b:42:18:7e:
9f:fd:95:fe:c6:61:c7:f5:e7:ab:8a:1d:13:ff:ab:13:e4:33:
64:9f:ce:31:ab:ac:c8:14:dd:47:86:d9:9e:b6:7b:10:57:c0:
0a:72:82:ce:21:25:2a:7e:36:e2:92:72:6b:54:5a:a0:b2:a4:
d5:fc:0f:cf:c8:33:d2:5a:07:5e:21:14:cb:af:1d:30:66:d3:
95:0e:d4:29:59:9a:a1:61:59:09:2a:31:ce:02:a0:be:6e:f3:
e2:11:14:97:b3:e1:f4:f0:8a:1d:d3:24:78:c2:51:fe:19:8a:
25:0b:89:6c:0e:59:6e:b3:40:ca:fb:e5:e9:50:8a:7d:46:ec:
b2:0e:b3:82:0e:e9:13:ad:25:22:53:29:30:78:ba:56:9a:ce:
7f:ac:55:a3:23:2c:06:53:90:6a:58:2b:71:87:97:32:7e:f5:
3a:d1:24:cf:d6:d7:b7:4b:25:7c:b8:4b:ed:bf:45:9b:7a:78:
e5:53:85:e6:e8:b1:bd:2e:52:79:52:d2:37:be:f0:ec:d4:14:
bb:f4:e5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 09:37:21 2024 by rpki-client on console-ams.rpki-client.org