Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/fc8955-a4ac-4c9e-a68b-0070b1e92991/1/8IcO2DuiaCSrgf8AnemlcbqLZs4.roa
File: 8IcO2DuiaCSrgf8AnemlcbqLZs4.roa (raw, json)
Hash identifier: g2iuQim5oc3nSvTomUT5nXkfWaU9riS4RvYm4bYs/lE=
Subject key identifier: F0:87:0E:D8:3B:A2:68:24:AB:81:FF:00:9D:E9:A5:71:BA:8B:66:CE
Certificate issuer: /CN=c2d4b1f3e5a875ed79cdbe724047b0f3ec8911c6
Certificate serial: 0193632C076D3A2C1B247559599D1D66F3F8
Authority key identifier: C2:D4:B1:F3:E5:A8:75:ED:79:CD:BE:72:40:47:B0:F3:EC:89:11:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtSx8-Wode15zb5yQEew8-yJEcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/fc8955-a4ac-4c9e-a68b-0070b1e92991/1/8IcO2DuiaCSrgf8AnemlcbqLZs4.roa
Signing time: Mon 25 Nov 2024 11:54:10 +0000
ROA not before: Mon 25 Nov 2024 11:54:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34380
IP address blocks: 185.162.148.0/22 maxlen: 24
185.162.148.0/24 maxlen: 24
185.162.149.0/24 maxlen: 24
185.162.150.0/24 maxlen: 24
185.162.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:63:2c:07:6d:3a:2c:1b:24:75:59:59:9d:1d:66:f3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d4b1f3e5a875ed79cdbe724047b0f3ec8911c6
Validity
Not Before: Nov 25 11:54:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0870ed83ba26824ab81ff009de9a571ba8b66ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:04:37:da:54:62:a9:41:ef:59:bd:c9:8b:ff:
2c:b1:b4:a5:89:7c:31:6c:e0:51:e7:44:40:0e:86:
0c:d5:0c:9d:1e:39:6d:75:9d:b8:24:85:37:61:ff:
a2:e3:6d:03:e5:db:a7:1b:72:f7:22:6a:20:63:4f:
f2:a0:ad:ff:75:17:09:15:9e:0f:c7:d4:61:73:20:
b0:fa:38:49:b2:76:9b:e5:5f:45:91:dd:92:53:d0:
51:34:17:53:e3:cb:d4:ee:40:01:7f:c0:ca:5e:ac:
15:37:97:40:65:62:29:06:bf:49:a5:29:c3:e8:9e:
a0:85:a0:bb:b1:4b:3d:97:25:b5:8d:df:a7:be:e9:
e1:99:4c:ec:22:cd:34:fe:85:78:c6:2b:ba:9c:bb:
86:8c:c7:0b:83:48:5b:6c:99:e5:6a:65:36:a2:8c:
e1:1f:85:ce:77:c0:5c:d7:1c:9f:f8:54:64:9b:67:
de:36:2b:e3:23:7d:f9:1f:fb:b3:72:8f:50:85:cc:
00:fc:e7:cc:8b:37:11:27:b7:0c:9a:42:2c:83:4b:
ce:6f:b5:11:66:5b:53:49:23:9d:b0:0c:42:0a:ee:
67:14:93:3d:41:74:33:d3:eb:27:2e:b1:a9:6b:4b:
48:4e:46:ff:26:0f:42:84:26:68:27:0b:20:2a:f0:
2f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:87:0E:D8:3B:A2:68:24:AB:81:FF:00:9D:E9:A5:71:BA:8B:66:CE
X509v3 Authority Key Identifier:
keyid:C2:D4:B1:F3:E5:A8:75:ED:79:CD:BE:72:40:47:B0:F3:EC:89:11:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtSx8-Wode15zb5yQEew8-yJEcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fc8955-a4ac-4c9e-a68b-0070b1e92991/1/8IcO2DuiaCSrgf8AnemlcbqLZs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fc8955-a4ac-4c9e-a68b-0070b1e92991/1/wtSx8-Wode15zb5yQEew8-yJEcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.148.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:a0:d5:36:01:9e:bc:2c:37:67:2d:86:bd:b0:52:65:12:95:
53:4c:21:d0:59:8c:c1:38:11:a8:d8:03:0b:f1:0c:a3:ec:c0:
3b:9e:f0:86:63:6c:18:46:fd:34:cb:34:ea:d5:52:8d:f6:6c:
85:9a:82:c0:d6:8f:f4:fd:95:75:45:12:2f:73:c4:d8:c8:cf:
61:a8:21:a3:cc:76:a3:29:d7:56:13:34:a9:04:e6:5d:30:a9:
55:77:58:5d:b2:29:e9:d5:50:bc:3f:df:51:fa:e3:a4:7c:ee:
0a:bc:06:43:19:e0:2b:97:a4:ef:5c:c1:7d:b6:39:3c:91:19:
83:36:0a:2e:62:0e:72:d9:f5:4b:c2:36:29:07:23:b8:11:8d:
56:1a:da:46:aa:f4:98:36:c0:00:00:70:5a:a4:ac:30:9b:d1:
47:7f:4b:8d:31:6d:12:d7:6e:e0:d6:bf:f2:2c:f7:98:7c:e5:
ae:f5:7a:2c:ee:14:99:5c:eb:11:3d:ad:35:f6:7a:a4:a0:23:
85:fe:ac:c1:b7:5a:7c:4d:43:be:a6:c1:df:cd:b2:4c:52:2f:
f4:4e:04:06:58:f0:18:2e:c0:99:b1:61:0e:b4:6b:36:1d:6b:
04:42:86:b4:16:01:9d:4f:09:a7:75:51:25:0b:cd:13:61:59:
a4:05:27:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:46:51 2024 by rpki-client on console-fra.rpki-client.org