Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/f84176-5561-487f-b912-eab0289dc5b7/1/2bbkxTkFGtiinr_Al-qQN65HHpk.roa
File: 2bbkxTkFGtiinr_Al-qQN65HHpk.roa (raw, json)
Hash identifier: GIuAJyDKTeEGkgNvoJNnrGaUVBsht+Ord/Ifmd96kkA=
Subject key identifier: D9:B6:E4:C5:39:05:1A:D8:A2:9E:BF:C0:97:EA:90:37:AE:47:1E:99
Certificate issuer: /CN=d520c233bb42174725fb62738844a2be83cae1f6
Certificate serial: 018CC3B720F9C4766391BD94B8C9FE1C6C9C
Authority key identifier: D5:20:C2:33:BB:42:17:47:25:FB:62:73:88:44:A2:BE:83:CA:E1:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SDCM7tCF0cl-2JziESivoPK4fY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/f84176-5561-487f-b912-eab0289dc5b7/1/2bbkxTkFGtiinr_Al-qQN65HHpk.roa
Signing time: Mon 01 Jan 2024 06:30:07 +0000
ROA not before: Mon 01 Jan 2024 06:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24961
IP address blocks: 185.114.109.0/24 maxlen: 24
185.114.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:20:f9:c4:76:63:91:bd:94:b8:c9:fe:1c:6c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d520c233bb42174725fb62738844a2be83cae1f6
Validity
Not Before: Jan 1 06:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9b6e4c539051ad8a29ebfc097ea9037ae471e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4b:94:17:6e:d2:28:c9:27:fc:4f:ca:26:c5:
59:90:c1:04:4e:ed:4e:e8:bb:91:ae:03:00:29:c7:
4a:2a:38:61:1a:e7:3b:83:fc:5a:ba:49:df:f1:e2:
d4:2c:db:9b:1d:a5:f2:9b:08:65:88:75:4b:06:19:
29:c2:51:f4:e2:84:fa:25:59:36:6c:4f:5f:80:04:
ef:de:aa:c4:68:69:04:00:8b:09:22:72:ae:9e:58:
1f:e6:93:84:fa:08:11:38:3f:22:c2:6b:a6:09:0a:
35:b9:2e:28:71:fd:ef:87:58:3e:83:89:e6:5a:18:
fe:3b:d4:6d:74:57:80:45:a7:dc:6f:da:aa:ab:9b:
f0:06:fa:77:c5:b4:3f:fd:f0:7c:2c:31:2f:01:62:
d7:4a:c0:e3:9c:b7:cb:01:8e:d4:96:34:35:e6:cf:
dd:d9:2f:90:01:6c:a0:fd:df:d9:89:0d:1a:a4:5f:
76:e4:42:a3:e2:8d:64:9f:56:c7:a2:38:eb:09:d5:
db:c5:e4:fa:84:90:65:b2:16:ea:fe:1e:46:67:a5:
64:d9:d6:43:5d:b5:cd:d1:7f:7c:fb:9b:2c:fe:bb:
c2:34:d9:6c:4e:b3:49:01:bc:4c:ab:fa:af:f4:f8:
44:d9:cf:9e:b5:40:9f:9c:5c:46:2f:76:bc:62:ac:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B6:E4:C5:39:05:1A:D8:A2:9E:BF:C0:97:EA:90:37:AE:47:1E:99
X509v3 Authority Key Identifier:
keyid:D5:20:C2:33:BB:42:17:47:25:FB:62:73:88:44:A2:BE:83:CA:E1:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SDCM7tCF0cl-2JziESivoPK4fY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f84176-5561-487f-b912-eab0289dc5b7/1/2bbkxTkFGtiinr_Al-qQN65HHpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f84176-5561-487f-b912-eab0289dc5b7/1/1SDCM7tCF0cl-2JziESivoPK4fY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.108.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:45:19:63:4a:92:2f:56:f0:ea:c1:2d:80:f9:70:71:44:3b:
01:0b:1a:37:c6:e1:6a:77:0a:e4:cf:d3:31:13:20:f7:a6:05:
bb:04:dc:55:96:5c:df:b1:8c:8f:e6:f5:5e:78:5c:18:03:7d:
2e:3f:5e:57:6c:27:f1:f7:8b:8d:64:7c:e3:91:ff:a6:67:80:
c1:8d:21:26:eb:12:3d:9e:8d:98:3c:a5:cd:28:54:e1:b5:3f:
3a:79:59:66:28:b4:53:e6:ed:3e:da:f6:b6:c8:f5:ce:60:f1:
b3:df:b5:82:f9:6e:b7:b7:7d:07:34:bb:f6:34:a1:8e:09:28:
93:07:e8:73:c6:6c:92:ce:91:d2:82:b2:0d:32:a5:5d:01:05:
dc:33:aa:0a:01:ea:7b:8c:22:a8:e9:d0:14:90:ee:a8:49:ef:
fc:4b:df:11:c6:c1:61:7a:6a:c8:8c:c6:ba:a5:18:6c:2c:19:
b0:2f:80:46:5e:a3:91:74:c9:1b:4e:e4:a7:73:0d:45:e5:77:
1b:3a:97:26:19:da:a0:4f:13:49:1b:33:a7:21:65:3e:71:61:
50:b7:27:64:54:1b:5b:0c:ad:83:83:e4:59:7f:a2:bc:23:47:
60:53:3e:bb:01:1e:5c:d6:bc:36:3b:e6:12:81:d5:15:a8:84:
ee:59:26:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:30 2024 by rpki-client on console-ams.rpki-client.org