Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/UGjtkCEf844yJfQVVc_yvDZ7sIM.roa
File: UGjtkCEf844yJfQVVc_yvDZ7sIM.roa (raw, json)
Hash identifier: OVR2nnBgdTz2KDVr32k1PYTbtyjJeRgnu0c46Qy121w=
Subject key identifier: 50:68:ED:90:21:1F:F3:8E:32:25:F4:15:55:CF:F2:BC:36:7B:B0:83
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 04DA2FF3
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/UGjtkCEf844yJfQVVc_yvDZ7sIM.roa
Signing time: Thu 30 Jun 2022 15:08:02 +0000
ROA not before: Thu 30 Jun 2022 15:08:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.229.200.0/22 maxlen: 24
185.213.242.0/24 maxlen: 24
185.130.60.0/22 maxlen: 24
185.111.188.0/24 maxlen: 24
185.244.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81407987 (0x4da2ff3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Jun 30 15:08:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5068ed90211ff38e3225f41555cff2bc367bb083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:df:b7:9c:ed:6b:c9:75:66:d0:fb:0f:24:7d:
4b:ef:a7:51:1c:c8:91:c3:73:e1:94:df:b0:40:84:
5a:38:d8:48:a9:ff:c4:a5:5d:34:26:fa:19:5d:2a:
84:15:8e:d9:a1:85:33:8b:b4:c3:47:15:a6:41:db:
cc:17:bc:82:30:fb:f3:39:4f:7c:18:bc:8d:69:fc:
b8:88:0d:60:c9:e9:44:df:55:57:97:ed:ca:f7:c0:
17:f7:f7:59:df:89:3e:94:05:bc:98:80:50:22:5e:
67:9b:ad:07:2c:99:c5:aa:97:52:89:97:10:e3:91:
2c:06:ad:3e:cb:40:28:95:2c:6e:ae:c0:cd:1b:03:
ed:1c:70:b9:bf:47:b0:42:9a:f1:e6:51:a9:ae:2f:
ba:59:ec:c0:37:9a:5f:a2:20:82:e5:21:18:10:49:
d2:aa:c1:40:bd:38:6d:04:12:c8:ac:4e:30:14:50:
da:08:6c:99:78:17:75:11:e1:35:88:93:56:72:c1:
85:d6:8e:cf:56:ce:53:81:a4:75:d3:e2:15:23:41:
9e:8a:fb:36:ce:ab:e9:8d:fa:de:e6:20:0a:2e:14:
6d:48:f2:87:1b:2b:dc:43:39:21:17:ee:c1:e7:d8:
16:e4:7d:68:19:21:f4:81:26:84:62:b9:bf:1b:9a:
8c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:68:ED:90:21:1F:F3:8E:32:25:F4:15:55:CF:F2:BC:36:7B:B0:83
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/UGjtkCEf844yJfQVVc_yvDZ7sIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.188.0/24
185.130.60.0/22
185.213.242.0/24
185.229.200.0/22
185.244.94.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:56:8f:7b:a0:5d:3c:60:dc:8d:95:4c:97:13:a3:b9:9e:11:
80:cf:d6:ff:5b:41:1e:d9:2b:02:d2:cb:63:79:a4:65:e8:8d:
24:05:24:ff:87:59:c3:dc:d8:18:4c:e8:93:e4:f6:58:e7:b5:
92:1a:03:c1:3c:0f:8e:b2:77:3f:c1:1b:4e:f8:b6:93:7f:59:
64:4c:9f:3d:8f:40:0f:be:92:45:49:e7:d4:e1:66:bf:98:ea:
ce:90:ec:a7:a1:13:5d:7a:2d:05:72:83:10:7d:38:fd:95:bf:
a1:7c:0c:8e:2d:48:8d:e4:02:6b:74:de:3f:b0:01:31:c7:99:
ef:5b:77:fb:5c:2f:c7:c6:a8:ad:67:ad:b3:29:fe:9e:77:fc:
c3:b3:21:fa:62:b0:7a:5e:ff:aa:98:f0:ab:9e:45:ec:5f:37:
89:f8:ed:5d:8f:99:c0:76:38:e5:3b:29:b0:66:23:2c:07:5f:
ca:f1:8c:91:ff:ce:e3:eb:51:83:be:07:83:cb:68:2f:4a:9d:
bf:4c:ab:2f:c1:f1:b0:fd:9d:73:42:f5:96:a5:01:5c:1e:23:
7d:ac:1b:de:7c:71:82:59:57:58:54:4f:65:7f:f5:04:5c:1b:
e9:e7:a5:82:d8:5e:61:e0:38:c0:e2:ef:76:4e:bc:3f:a8:9a:
9d:79:1c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:46 2024 by rpki-client on console-ams.rpki-client.org