Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/9-29GJe5Zg7tYkQBmtJEGvxqBEk.roa
File: 9-29GJe5Zg7tYkQBmtJEGvxqBEk.roa (raw, json)
Hash identifier: 3sKn0WrYK94DKIhNBA2kyP3IMTl1ktdvMS3KrMYTjVw=
Subject key identifier: F7:ED:BD:18:97:B9:66:0E:ED:62:44:01:9A:D2:44:1A:FC:6A:04:49
Certificate issuer: /CN=ef738909f94d9968436bb4e09a2d47cc7901733c
Certificate serial: 018CC8DF86FF0A973E8883E3829898936DAD
Authority key identifier: EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OJCflNmWhDa7Tgmi1HzHkBczw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/9-29GJe5Zg7tYkQBmtJEGvxqBEk.roa
Signing time: Tue 02 Jan 2024 06:32:21 +0000
ROA not before: Tue 02 Jan 2024 06:32:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30860
IP address blocks: 185.255.120.0/24 maxlen: 24
185.255.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:86:ff:0a:97:3e:88:83:e3:82:98:98:93:6d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef738909f94d9968436bb4e09a2d47cc7901733c
Validity
Not Before: Jan 2 06:32:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7edbd1897b9660eed6244019ad2441afc6a0449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f7:5e:22:b3:c1:a2:fa:a2:d7:28:bf:74:e7:
26:ef:4f:63:b9:70:55:6c:99:45:43:8a:76:2a:e9:
d2:5d:0e:2e:21:7a:b4:45:22:9a:b2:28:6e:7c:fc:
44:52:c6:d2:cb:1a:47:71:e7:a6:76:0e:23:7a:78:
32:2e:16:65:18:61:36:41:05:b6:0e:72:9a:7b:75:
c9:f3:1d:52:44:99:7d:45:d8:38:e4:f8:ff:9a:c8:
4b:4e:00:0d:e8:11:ad:b7:90:76:79:c9:f2:0c:ff:
92:26:53:be:7a:68:3c:d6:0b:5a:c0:03:b8:c6:28:
d2:c9:85:70:4c:8f:bb:53:ad:af:98:5c:6f:fe:d4:
ca:f6:2b:8f:b6:08:b4:22:d1:e4:55:1c:fe:6c:b7:
25:06:3b:fe:15:07:d2:87:19:b3:05:eb:bc:6f:6e:
6d:7a:0a:7f:8f:c3:a3:9a:e0:9e:1f:4d:e2:25:df:
50:3a:34:57:70:eb:dd:68:cf:0f:8c:8f:cc:32:04:
8e:ea:1a:4c:42:86:2a:3f:d0:00:43:1f:f6:d9:cc:
81:92:7b:1e:cb:f8:e0:07:14:26:94:94:cd:9e:f2:
31:91:d5:9b:3b:19:17:df:3a:86:ae:eb:82:12:36:
29:92:c6:f9:4f:f2:9b:6c:c8:ed:08:4e:53:9a:13:
61:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:ED:BD:18:97:B9:66:0E:ED:62:44:01:9A:D2:44:1A:FC:6A:04:49
X509v3 Authority Key Identifier:
keyid:EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OJCflNmWhDa7Tgmi1HzHkBczw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/9-29GJe5Zg7tYkQBmtJEGvxqBEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/73OJCflNmWhDa7Tgmi1HzHkBczw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.120.0/24
185.255.122.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:4a:80:c3:9c:99:aa:82:05:f8:84:d5:39:8c:4e:2c:88:60:
2c:98:f3:5b:9f:49:1c:79:bc:79:a4:bb:b4:12:87:9c:d9:96:
47:14:64:af:28:e1:01:bb:a4:0b:13:b6:86:2f:7e:a1:64:14:
cb:0e:18:37:04:20:54:85:fb:fa:41:af:74:41:79:82:67:84:
dd:f1:32:ac:57:a9:e5:d6:b6:88:1c:b0:4a:c1:9f:6c:20:da:
62:f4:2b:78:d1:21:10:f3:19:29:ea:71:c5:dc:ae:a9:6d:8f:
2e:d3:f6:09:8f:a7:f0:2a:04:ec:8f:fd:a2:b8:ad:bd:31:91:
68:ee:5e:ca:d2:c9:cf:55:58:93:e5:61:45:81:40:16:85:cf:
9a:94:b1:b2:cd:43:8a:4d:dc:3f:b9:19:c0:56:65:e5:1d:90:
df:eb:13:c5:ff:02:5e:6f:40:85:40:5b:b4:b6:33:fa:db:ef:
cd:24:5c:f8:da:b9:ca:63:5d:69:21:db:c3:97:3f:5b:4b:ba:
89:82:1b:c6:2d:c5:5e:21:5c:d3:db:1b:6a:3d:a5:d4:c0:21:
4c:31:52:2a:40:75:13:11:c9:31:81:96:4e:1a:cf:07:1a:7c:
2e:1f:d0:b6:de:a6:86:0f:af:f1:50:d7:dd:c1:53:c7:c4:a7:
02:d1:40:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 11:48:33 2024 by rpki-client on console-fra.rpki-client.org