Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/f84176-5561-487f-b912-eab0289dc5b7/1/jK5OPihnHlXf4x9wsEoA5HJp_C0.roa
File: jK5OPihnHlXf4x9wsEoA5HJp_C0.roa (raw, json)
Hash identifier: ybZ88zfUgqw3tZQDOXx+Af2Mi5oTN0kSOqzlMIoaVfM=
Subject key identifier: 8C:AE:4E:3E:28:67:1E:55:DF:E3:1F:70:B0:4A:00:E4:72:69:FC:2D
Certificate issuer: /CN=d520c233bb42174725fb62738844a2be83cae1f6
Certificate serial: 06229169
Authority key identifier: D5:20:C2:33:BB:42:17:47:25:FB:62:73:88:44:A2:BE:83:CA:E1:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SDCM7tCF0cl-2JziESivoPK4fY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/f84176-5561-487f-b912-eab0289dc5b7/1/jK5OPihnHlXf4x9wsEoA5HJp_C0.roa
Signing time: Sat 01 Jan 2022 09:58:28 +0000
ROA not before: Sat 01 Jan 2022 09:58:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24961
IP address blocks: 185.114.109.0/24 maxlen: 24
185.114.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102928745 (0x6229169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d520c233bb42174725fb62738844a2be83cae1f6
Validity
Not Before: Jan 1 09:58:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8cae4e3e28671e55dfe31f70b04a00e47269fc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:55:56:b5:ba:0a:b4:cf:ab:38:cf:ef:39:7d:
62:68:05:fb:ff:a0:8c:52:61:7e:fe:ec:e7:7c:08:
12:3a:1d:a5:28:6d:b5:24:9f:07:d1:55:72:da:f6:
d6:b5:51:7f:eb:24:3c:9e:40:e2:8d:40:fc:c6:51:
e6:ca:22:4e:2f:a3:32:32:06:38:50:a2:a5:f4:b7:
3a:bf:0a:c7:0c:9d:01:41:76:0e:23:03:d4:e3:38:
84:c9:89:59:94:9d:33:9f:85:35:ac:70:c3:34:f6:
19:d6:a8:47:5a:45:f5:71:5a:33:e3:51:2d:08:64:
6e:d2:26:f1:94:00:93:f1:62:ef:da:1c:5f:a4:d9:
35:3d:d3:b0:04:2b:0f:43:84:f2:9d:21:22:0b:38:
d2:8a:d6:61:e9:ef:35:f3:7d:d3:c6:8b:78:ff:f9:
d4:c0:07:51:91:b3:b1:95:ea:78:18:f3:1e:b4:d8:
2f:43:e5:ef:ab:b9:90:e3:7f:c1:98:9b:a7:19:a8:
ff:1f:65:5d:7d:55:9c:01:7c:6e:cb:c7:a7:fc:d8:
bb:f3:6a:f3:73:5e:a0:39:06:9c:3b:e1:eb:f0:37:
81:f2:27:90:65:5e:9e:17:4e:c1:a1:97:37:8c:07:
20:38:75:1e:d3:14:4a:62:f4:37:cc:77:94:03:2a:
2c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AE:4E:3E:28:67:1E:55:DF:E3:1F:70:B0:4A:00:E4:72:69:FC:2D
X509v3 Authority Key Identifier:
keyid:D5:20:C2:33:BB:42:17:47:25:FB:62:73:88:44:A2:BE:83:CA:E1:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SDCM7tCF0cl-2JziESivoPK4fY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f84176-5561-487f-b912-eab0289dc5b7/1/jK5OPihnHlXf4x9wsEoA5HJp_C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f84176-5561-487f-b912-eab0289dc5b7/1/1SDCM7tCF0cl-2JziESivoPK4fY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.108.0/23
Signature Algorithm: sha256WithRSAEncryption
38:57:02:56:e4:d4:9f:dc:97:48:93:3d:70:94:3c:72:a3:f3:
63:5b:df:8b:78:5e:dc:c9:ba:19:df:59:ad:17:e0:ba:2f:7e:
63:32:04:6f:72:12:01:8a:9d:65:7d:6f:7e:cb:00:49:2c:da:
0b:7a:2d:5f:84:88:35:38:0a:38:35:e2:01:82:5d:fc:58:b9:
2f:a8:d1:68:12:69:2f:bc:4d:8c:00:9e:52:72:65:b2:9c:1f:
3d:80:f3:87:b0:3f:fc:36:ce:49:c2:78:c4:f4:d0:75:50:98:
d4:b9:8f:6f:10:34:02:63:76:f7:e9:94:74:40:a5:79:c0:a3:
56:e4:9f:ca:ed:ab:2f:50:b3:9f:46:43:04:d8:48:32:60:9a:
63:bd:d2:ec:c5:87:fe:0d:59:0b:da:64:3a:9f:3c:70:b5:58:
72:0b:e2:83:b5:59:39:56:20:b6:19:5a:4a:79:42:b1:e3:b5:
c7:f3:e6:38:eb:2b:7a:9f:f9:f6:12:09:9b:9d:0b:26:5c:31:
6c:30:da:9a:b4:fb:9a:7f:92:2f:a6:5b:29:bb:0d:fd:92:e7:
42:b8:ad:16:26:51:b9:8e:8d:8e:19:ab:26:c4:1b:7d:da:a8:
61:b7:c4:04:ae:ea:53:fe:15:26:00:63:58:6a:11:55:20:df:
50:2d:21:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:58 2024 by rpki-client on console-fra.rpki-client.org