Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4a132d-233b-4740-93c4-46dd63ea76f3/1/eqaKKWWHOn5nDL2Ic1yW4Sg6tsk.roa
File: eqaKKWWHOn5nDL2Ic1yW4Sg6tsk.roa (raw, json)
Hash identifier: l87/Wk5IbnuFAVlnIcuAFhP0RTGnWzpvHROeIyA1n1Y=
Subject key identifier: 7A:A6:8A:29:65:87:3A:7E:67:0C:BD:88:73:5C:96:E1:28:3A:B6:C9
Certificate issuer: /CN=3934bea04024280609f917b87bed080daf4c7ea4
Certificate serial: 018CC94CD62EAED649E0FD842EEE1F3E72B7
Authority key identifier: 39:34:BE:A0:40:24:28:06:09:F9:17:B8:7B:ED:08:0D:AF:4C:7E:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTS-oEAkKAYJ-Re4e-0IDa9MfqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4a132d-233b-4740-93c4-46dd63ea76f3/1/eqaKKWWHOn5nDL2Ic1yW4Sg6tsk.roa
Signing time: Tue 02 Jan 2024 08:31:45 +0000
ROA not before: Tue 02 Jan 2024 08:31:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 185.214.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:d6:2e:ae:d6:49:e0:fd:84:2e:ee:1f:3e:72:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3934bea04024280609f917b87bed080daf4c7ea4
Validity
Not Before: Jan 2 08:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7aa68a2965873a7e670cbd88735c96e1283ab6c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b8:b4:67:d0:5c:a6:0b:dc:5f:ae:d9:af:0f:
10:79:55:a1:5d:56:a2:89:e5:76:14:e3:72:1e:96:
d8:d1:37:cb:01:df:15:1a:94:eb:95:f9:19:14:e8:
25:aa:9b:7f:e2:77:6a:dd:59:21:aa:41:88:77:9a:
eb:8a:bc:02:14:b0:7a:fb:d4:e7:b7:84:4a:24:4b:
0c:bf:45:90:b2:74:5f:de:a7:15:a2:2e:0c:09:48:
58:24:0f:3b:b8:50:d3:77:62:34:2a:d3:01:e9:e4:
d4:e3:d3:da:1d:76:71:a0:73:86:51:ff:0c:24:2c:
6d:fc:c6:e7:1b:ec:ca:73:ee:31:36:d7:56:c8:89:
48:b9:70:f4:e4:04:74:1d:6b:06:c9:42:ee:04:a5:
db:ca:af:5f:98:7f:33:14:c8:48:31:b7:a3:ed:8f:
5e:ae:0f:61:01:7d:2e:0f:e3:51:e7:ae:e6:53:26:
ed:b7:49:88:90:e0:12:e2:15:c9:47:a0:3c:c2:7e:
54:e0:27:7d:6d:24:a0:b7:a2:92:79:0c:83:e3:95:
f1:cd:5a:4f:c3:04:d4:eb:42:ee:93:21:60:22:05:
17:80:4e:5d:81:a3:45:a9:61:6c:42:8a:e7:37:79:
04:4d:47:84:07:03:20:36:bf:31:6e:db:a1:d2:30:
d0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A6:8A:29:65:87:3A:7E:67:0C:BD:88:73:5C:96:E1:28:3A:B6:C9
X509v3 Authority Key Identifier:
keyid:39:34:BE:A0:40:24:28:06:09:F9:17:B8:7B:ED:08:0D:AF:4C:7E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTS-oEAkKAYJ-Re4e-0IDa9MfqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4a132d-233b-4740-93c4-46dd63ea76f3/1/eqaKKWWHOn5nDL2Ic1yW4Sg6tsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4a132d-233b-4740-93c4-46dd63ea76f3/1/OTS-oEAkKAYJ-Re4e-0IDa9MfqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.167.0/24
Signature Algorithm: sha256WithRSAEncryption
09:50:56:18:a1:62:97:d9:ec:c5:db:a6:cc:3f:e2:af:80:8c:
4a:50:78:0f:8f:bf:5e:d8:26:f2:69:c1:02:1e:78:97:77:ba:
a9:e2:f0:62:0b:00:7c:a2:ac:30:44:2c:62:0c:7d:eb:3f:36:
f4:93:0e:be:db:b3:e2:be:85:6b:46:f6:95:c3:d8:71:11:6e:
ad:a0:e3:9a:7e:b4:81:ba:60:f0:dd:91:19:3c:fe:ab:63:f1:
b0:c0:30:d0:a2:76:13:39:dd:f5:ad:dd:9f:8d:43:d1:1d:ef:
de:cc:12:3e:10:31:79:e9:1e:6a:1e:3a:b9:a8:7f:0b:5f:ca:
33:9d:e1:de:5d:35:8a:7a:5e:9a:ae:41:be:5c:b0:7b:1f:13:
69:52:97:79:6b:d6:f2:bd:99:26:9f:98:67:95:9d:c7:e9:ba:
41:a9:cc:8a:9e:39:98:a8:d3:15:c5:58:17:fa:7d:61:61:84:
fa:1c:48:ac:fd:f9:56:04:ae:25:f8:c5:4f:dd:df:4b:59:b2:
cf:7a:a6:51:1d:c6:7c:62:8f:cc:ca:1f:54:27:aa:66:a4:46:
12:9a:cb:65:92:aa:3f:68:ea:b6:3e:53:9c:4d:1f:ee:91:6e:
ac:aa:30:24:37:9e:1c:dd:e1:38:98:6d:db:05:d9:3e:2d:09:
73:0a:0e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:27 2024 by rpki-client on console-ams.rpki-client.org