Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/T8xpAhRezN9Q7b_N4TgCdmzQanc.roa
File: T8xpAhRezN9Q7b_N4TgCdmzQanc.roa (raw, json)
Hash identifier: uWmPfkSSbzhp4g8lpWcHfSMpBmtYrKU6VwKz77MR8i0=
Subject key identifier: 4F:CC:69:02:14:5E:CC:DF:50:ED:BF:CD:E1:38:02:76:6C:D0:6A:77
Certificate issuer: /CN=64347465bc925c8e756ddfaa609eda02cc52d031
Certificate serial: 018CC348DA7A5ADBA05E7CD95FCC1553DD07
Authority key identifier: 64:34:74:65:BC:92:5C:8E:75:6D:DF:AA:60:9E:DA:02:CC:52:D0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/T8xpAhRezN9Q7b_N4TgCdmzQanc.roa
Signing time: Mon 01 Jan 2024 04:29:40 +0000
ROA not before: Mon 01 Jan 2024 04:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42314
IP address blocks: 85.114.105.0/24 maxlen: 24
85.114.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:da:7a:5a:db:a0:5e:7c:d9:5f:cc:15:53:dd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64347465bc925c8e756ddfaa609eda02cc52d031
Validity
Not Before: Jan 1 04:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fcc6902145eccdf50edbfcde13802766cd06a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e2:a6:0d:0b:80:ae:4f:6e:ab:ae:bd:d4:a2:
ae:f2:70:11:32:83:47:a8:a3:1b:e2:46:01:1d:13:
d7:f4:9e:60:8d:f6:6a:ce:9c:24:8d:ef:00:a5:48:
c8:af:e7:96:1e:58:ec:bd:c7:79:96:83:57:58:c0:
14:81:f8:b4:c0:98:86:6a:e5:a2:54:fc:75:e1:7b:
fa:26:f6:d6:bf:5b:5d:df:34:ad:e8:ab:c0:3f:6a:
c0:8e:30:99:03:a6:56:cd:d8:a8:cc:cb:a1:65:13:
03:d9:e2:80:c1:52:ca:d2:5b:72:19:70:0a:b6:24:
71:4c:07:3f:a7:33:06:e0:56:83:0e:d5:e6:74:76:
5b:c1:42:fc:cf:6e:cf:e0:26:16:51:5b:31:e3:3c:
2e:d6:7c:15:34:c2:97:ec:6f:3f:b8:11:03:e3:42:
b7:cb:a0:3f:a1:74:b9:2b:b1:ed:bf:c7:b2:21:85:
c3:7e:ef:f3:da:ab:c6:a7:c4:4d:8d:2e:23:de:0e:
3e:e7:8e:de:ab:00:b9:df:94:17:c2:b3:71:43:0d:
b5:b4:e8:90:ed:e0:b6:86:39:21:46:a4:59:c2:31:
3b:ff:d4:3c:1b:c3:31:d0:37:5d:4d:a9:3c:5e:1e:
73:6a:be:d3:9b:4c:fd:36:df:9b:cc:ab:d3:ae:b3:
8b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CC:69:02:14:5E:CC:DF:50:ED:BF:CD:E1:38:02:76:6C:D0:6A:77
X509v3 Authority Key Identifier:
keyid:64:34:74:65:BC:92:5C:8E:75:6D:DF:AA:60:9E:DA:02:CC:52:D0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/T8xpAhRezN9Q7b_N4TgCdmzQanc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.114.105.0-85.114.106.255
Signature Algorithm: sha256WithRSAEncryption
0d:c2:f7:d9:72:f6:15:16:87:67:01:cb:5c:af:4b:a8:70:12:
79:e7:54:ef:f0:9e:ba:b7:fc:5e:51:e2:bf:f5:d8:32:d4:36:
3b:d6:ec:2b:77:3a:d0:90:1f:4d:dc:fe:a0:e7:bb:4a:79:ee:
2e:2d:0a:52:67:a0:85:cb:15:de:ec:c7:d2:57:03:48:1f:13:
17:ef:78:42:e9:b4:d4:3a:1b:ea:6a:cb:2b:24:ed:90:5b:cb:
81:5b:19:f3:f2:ad:2e:3a:a2:4f:b8:67:32:53:80:0e:df:8d:
bf:a6:8f:96:a2:d6:75:63:b2:77:1f:5e:30:d4:21:71:b8:c5:
9d:38:dc:0b:1f:6b:d9:30:14:80:3a:f4:9e:c5:b9:0f:91:81:
6d:f4:18:24:2c:74:8f:67:90:24:30:50:1b:ee:8c:8b:71:79:
9c:23:07:ce:f0:fd:28:fe:e3:ca:c6:15:f0:7f:5c:eb:46:d4:
58:65:a7:fc:3e:43:da:b0:10:16:14:51:d2:32:e1:a7:65:e5:
9d:45:43:56:2c:14:25:29:3c:12:79:d9:3b:19:02:f9:09:d8:
32:2e:6a:53:f6:21:cf:9e:9b:ef:ca:9a:43:7f:9b:f0:57:1d:
e1:14:e9:01:65:b4:15:23:b7:28:64:26:ce:bd:1c:b7:8c:64:
3f:31:da:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:22 2024 by rpki-client on console-fra.rpki-client.org