Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/11a678-11b6-4a35-a5ac-bb74c97f7269/1/keVdOSDQyNW492X0kRMC5df8Dio.roa
File: keVdOSDQyNW492X0kRMC5df8Dio.roa (raw, json)
Hash identifier: XcUTueoBIQ7QjNrKI9SMQurOSCEwRUjGy2ZYhHTUVjw=
Subject key identifier: 91:E5:5D:39:20:D0:C8:D5:B8:F7:65:F4:91:13:02:E5:D7:FC:0E:2A
Certificate issuer: /CN=e314905c56633e9fde791b3005d9a4af7d31a7a0
Certificate serial: 0187E84337AA13DEC8FC5859DDE7863BC312
Authority key identifier: E3:14:90:5C:56:63:3E:9F:DE:79:1B:30:05:D9:A4:AF:7D:31:A7:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xSQXFZjPp_eeRswBdmkr30xp6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/11a678-11b6-4a35-a5ac-bb74c97f7269/1/keVdOSDQyNW492X0kRMC5df8Dio.roa
Signing time: Thu 04 May 2023 19:35:31 +0000
ROA not before: Thu 04 May 2023 19:35:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41033
IP address blocks: 185.235.184.0/24 maxlen: 24
185.235.185.0/24 maxlen: 24
185.235.187.0/24 maxlen: 24
2a0d:7100:1::/48 maxlen: 48
2a0d:7100:4::/48 maxlen: 48
2a0d:7100:2::/48 maxlen: 48
2a0d:7100:5::/48 maxlen: 48
2a0d:7100::/48 maxlen: 48
2a0d:7100:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e8:43:37:aa:13:de:c8:fc:58:59:dd:e7:86:3b:c3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e314905c56633e9fde791b3005d9a4af7d31a7a0
Validity
Not Before: May 4 19:35:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91e55d3920d0c8d5b8f765f4911302e5d7fc0e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e8:54:6a:79:3d:da:71:61:b4:ab:23:67:db:
cb:ce:5f:37:a0:00:2b:e5:cb:d3:86:ee:d5:dd:1e:
75:d5:75:83:f0:fa:af:92:aa:73:ab:2e:73:43:2c:
5f:46:9a:71:67:67:21:61:b4:51:e5:39:42:a4:44:
0c:56:a8:b7:0a:24:60:05:a8:ed:96:f7:f4:ea:6d:
7c:b9:40:bd:fd:96:57:44:80:f3:39:cb:6d:0c:c3:
53:ba:11:87:88:7c:6d:4c:90:31:02:64:d9:82:76:
ca:fc:12:9b:38:5e:8c:47:1f:ea:4d:7e:3b:1e:0f:
4e:4c:b5:a8:c2:ac:ff:63:e0:f5:a1:49:69:fc:33:
e0:0b:5b:a7:08:86:8d:e1:8e:7b:35:53:71:e6:e2:
d6:49:ec:c9:8a:81:b2:9f:bd:7b:dc:64:a9:37:24:
f9:ef:7b:9c:72:fb:60:27:3d:6e:20:2c:c3:43:9f:
3c:70:ec:6c:9e:da:65:73:8c:b8:67:f0:8e:03:ef:
75:fd:6d:66:da:f5:5a:6d:76:17:77:4a:4a:4b:44:
07:f6:f1:40:7a:a8:f5:3d:c0:30:03:0f:5e:8b:1a:
bb:b6:db:75:5c:15:07:75:b5:a5:84:e4:a6:da:34:
69:72:58:6b:b8:40:25:64:a5:79:b0:df:d2:f7:3b:
29:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E5:5D:39:20:D0:C8:D5:B8:F7:65:F4:91:13:02:E5:D7:FC:0E:2A
X509v3 Authority Key Identifier:
keyid:E3:14:90:5C:56:63:3E:9F:DE:79:1B:30:05:D9:A4:AF:7D:31:A7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xSQXFZjPp_eeRswBdmkr30xp6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/11a678-11b6-4a35-a5ac-bb74c97f7269/1/keVdOSDQyNW492X0kRMC5df8Dio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/11a678-11b6-4a35-a5ac-bb74c97f7269/1/4xSQXFZjPp_eeRswBdmkr30xp6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.184.0/23
185.235.187.0/24
IPv6:
2a0d:7100::-2a0d:7100:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
02:fe:b2:91:47:5a:a7:37:1c:f6:a0:76:6c:f0:3e:ff:67:b3:
45:63:75:c1:c0:5f:ae:a8:bf:1b:56:ad:2a:80:5c:b5:3c:7d:
36:73:a2:fa:df:15:5f:97:8c:ff:a1:e2:90:81:87:ec:d0:8e:
4f:d9:6f:56:6e:6a:f9:c5:d6:78:18:23:b5:15:c7:75:8a:04:
83:2f:80:04:d8:38:d5:42:8c:96:38:be:61:90:8e:70:c4:61:
54:3d:2f:d9:75:53:58:c0:e0:c4:c1:4e:4a:28:7c:ff:9e:1f:
3b:38:e1:28:07:35:31:28:77:38:87:84:5c:9b:4a:b5:b8:d9:
a3:2b:0d:50:f5:17:06:e0:59:c1:dd:33:af:31:ed:2a:fd:eb:
47:16:e3:84:d9:6f:07:35:78:50:74:01:d7:ca:dc:26:ec:2d:
95:c4:69:aa:8b:81:18:08:a3:7f:97:d9:ba:5b:07:6a:65:c7:
0e:ac:39:7f:60:93:ee:b7:cd:dd:cc:3c:ef:e8:f1:92:f8:81:
1a:54:4d:3d:de:4f:4e:77:63:1e:31:c5:35:a4:b9:6c:8e:f1:
7b:86:55:ce:fc:38:37:42:e0:d5:99:0d:00:df:c2:9d:25:07:
3c:dd:b4:2c:78:af:56:31:bc:9b:02:5c:11:d1:ec:12:06:fc:
dc:d8:b0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 21 12:17:03 2023 by rpki-client on console-fra.rpki-client.org