Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a3c775-39c5-4bbb-b33e-d929e2b76d68/1/bk7namKrYjVHaPvQea--rLejjwU.roa
File: bk7namKrYjVHaPvQea--rLejjwU.roa (raw, json)
Hash identifier: 13K8YSIhUXMKlDzrmLPgOSJJywGZQNp4JMaB8RUEm+8=
Subject key identifier: 6E:4E:E7:6A:62:AB:62:35:47:68:FB:D0:79:AF:BE:AC:B7:A3:8F:05
Certificate issuer: /CN=dfc0b1df0e7bd00045ebe10302c320ffbdba0716
Certificate serial: 018CC801090EC62D49BBC9E531A0317D97FE
Authority key identifier: DF:C0:B1:DF:0E:7B:D0:00:45:EB:E1:03:02:C3:20:FF:BD:BA:07:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/38Cx3w570ABF6-EDAsMg_726BxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a3c775-39c5-4bbb-b33e-d929e2b76d68/1/bk7namKrYjVHaPvQea--rLejjwU.roa
Signing time: Tue 02 Jan 2024 02:29:20 +0000
ROA not before: Tue 02 Jan 2024 02:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62290
IP address blocks: 185.24.116.0/23 maxlen: 23
185.24.116.0/22 maxlen: 23
212.102.109.0/24 maxlen: 24
2a00:72a0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:09:0e:c6:2d:49:bb:c9:e5:31:a0:31:7d:97:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfc0b1df0e7bd00045ebe10302c320ffbdba0716
Validity
Not Before: Jan 2 02:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e4ee76a62ab62354768fbd079afbeacb7a38f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f2:2f:34:ca:e2:b3:d1:7a:75:07:aa:17:ba:
ef:15:ae:12:3e:d5:8a:dc:17:b6:c5:29:42:44:b4:
1d:20:33:31:ff:d6:e4:11:65:41:3f:d0:5d:6a:b9:
3a:c2:f3:f2:59:73:04:c5:d4:62:86:9b:48:18:74:
41:9e:87:56:9e:9b:40:59:e4:55:6a:31:7f:ca:c9:
55:80:a9:b0:85:57:80:af:c9:87:83:e0:44:6d:06:
6a:5c:c3:a1:bf:7c:e2:91:70:db:3d:ee:34:47:2f:
ac:6d:49:d7:e7:8e:b8:ca:97:70:75:3e:1d:36:b2:
6d:0e:00:94:31:05:fa:fe:a1:03:00:0d:54:70:d8:
45:48:fc:ee:e0:33:62:03:2b:2b:0c:a0:3f:65:34:
3f:22:f5:b6:4a:03:be:89:dc:5a:c2:84:68:53:58:
72:3f:4f:4a:37:71:a2:4a:4d:42:a8:b5:20:ca:d7:
e1:7d:b6:63:d7:e4:73:fb:2a:94:ed:97:b9:96:31:
01:ae:b0:2f:8b:37:f4:0a:f0:cd:db:c9:0d:cd:74:
8f:eb:2e:46:2d:87:85:13:e6:ca:72:f8:cf:72:a7:
20:d5:33:1e:d2:25:16:9d:ca:f4:ea:18:3b:d8:59:
51:76:b7:77:68:6b:59:96:d1:51:ea:7c:7c:42:9d:
57:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4E:E7:6A:62:AB:62:35:47:68:FB:D0:79:AF:BE:AC:B7:A3:8F:05
X509v3 Authority Key Identifier:
keyid:DF:C0:B1:DF:0E:7B:D0:00:45:EB:E1:03:02:C3:20:FF:BD:BA:07:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38Cx3w570ABF6-EDAsMg_726BxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a3c775-39c5-4bbb-b33e-d929e2b76d68/1/bk7namKrYjVHaPvQea--rLejjwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a3c775-39c5-4bbb-b33e-d929e2b76d68/1/38Cx3w570ABF6-EDAsMg_726BxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.116.0/22
212.102.109.0/24
IPv6:
2a00:72a0::/32
Signature Algorithm: sha256WithRSAEncryption
0a:ea:5e:7c:62:0b:ac:09:68:a9:37:d6:b3:c9:72:d8:dc:8c:
4d:48:d5:0d:c7:6a:a8:62:11:0f:8f:3a:9e:68:45:eb:41:0a:
3f:02:29:a4:9a:69:a6:de:bb:fc:21:49:b9:d6:13:40:68:56:
98:e6:ed:ed:f1:f5:d4:27:e4:8f:25:50:2e:1a:fa:0b:78:77:
27:94:c6:d5:cb:f2:8d:55:79:be:b6:77:c5:5b:04:44:ea:4d:
93:7d:44:26:00:7f:e1:0e:14:d6:0a:39:18:f6:12:08:90:43:
56:5b:7d:52:3d:39:07:16:81:28:4e:f4:6c:e2:d9:b7:d5:a5:
69:3f:74:94:84:f1:8d:e0:f1:04:34:3b:fe:c6:0d:6d:22:42:
5a:dd:fb:77:1a:b5:9d:2f:6b:76:4b:76:9b:ed:f3:24:89:79:
fd:4e:64:cd:e1:0b:98:cc:02:a8:14:0a:87:cf:da:6c:89:a9:
75:91:05:b5:fa:98:45:0e:2d:fd:8e:5e:b0:28:e9:35:a2:4d:
6d:19:14:18:13:6f:6b:0c:7a:45:df:a1:b5:c2:1e:32:5f:13:
1d:bc:e5:55:ff:90:67:60:8a:cd:6b:ce:1a:a8:1d:50:cf:8c:
8a:9e:76:e0:89:b1:51:d1:ed:77:5e:b1:43:ce:d3:25:4e:d8:
56:15:ca:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:29 2025 by rpki-client