Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/62e7bb-5357-468f-b787-d15f52357ec3/1/a68wMEKoEwQMABn430X9yz-Jw3E.roa
File: a68wMEKoEwQMABn430X9yz-Jw3E.roa (raw, json)
Hash identifier: MhgY/i4bgPILw7rIstAgC8m3RoREG4pRbF8MM3qbYg0=
Subject key identifier: 6B:AF:30:30:42:A8:13:04:0C:00:19:F8:DF:45:FD:CB:3F:89:C3:71
Certificate issuer: /CN=4011d37a045d139289d0a2b933a02d228036032b
Certificate serial: 1106FA1B
Authority key identifier: 40:11:D3:7A:04:5D:13:92:89:D0:A2:B9:33:A0:2D:22:80:36:03:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBHTegRdE5KJ0KK5M6AtIoA2Ays.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/62e7bb-5357-468f-b787-d15f52357ec3/1/a68wMEKoEwQMABn430X9yz-Jw3E.roa
Signing time: Sat 01 Jan 2022 08:58:57 +0000
ROA not before: Sat 01 Jan 2022 08:58:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199484
IP address blocks: 185.153.248.0/22 maxlen: 22
185.153.249.0/24 maxlen: 24
185.153.250.0/24 maxlen: 24
185.153.248.0/24 maxlen: 24
185.153.251.0/24 maxlen: 24
2a07:89c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285669915 (0x1106fa1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4011d37a045d139289d0a2b933a02d228036032b
Validity
Not Before: Jan 1 08:58:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6baf303042a813040c0019f8df45fdcb3f89c371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:a0:05:07:84:ca:82:48:74:0e:67:a8:77:
ab:62:19:43:02:30:af:1b:34:33:c9:65:38:0f:41:
68:20:d7:04:6f:f7:dd:93:d0:16:fa:e4:51:95:c0:
8a:49:fe:81:05:1a:83:8a:95:8c:01:df:4b:6d:f1:
d8:0b:2e:50:1b:79:1c:06:fd:5a:92:b2:55:a4:b6:
89:d3:e9:84:f5:b5:a3:f7:36:d8:bc:b9:3e:a8:e0:
e6:d3:93:4a:a4:cf:68:16:50:dd:91:b4:3e:72:12:
e0:7a:04:c8:fc:f1:b7:7d:7f:24:24:c2:44:eb:5d:
5d:4c:bd:48:ae:49:06:19:a3:4c:9a:78:39:bf:cf:
89:10:cf:f6:84:66:9e:f1:9f:23:cd:70:43:64:74:
50:8f:ce:f9:89:da:c7:c4:d6:2b:4d:37:65:29:cf:
f0:16:1b:8b:18:04:9b:f5:38:58:b0:9d:28:d5:ca:
0d:f2:98:e5:80:c3:47:38:68:b9:5b:3c:a1:41:4b:
6c:61:82:b1:41:92:df:b5:98:dd:c6:a0:f0:b6:38:
b1:e7:3b:f0:d5:81:69:7a:3e:71:f5:91:5b:59:e1:
2e:18:a6:66:c3:ac:ab:e3:93:f6:2f:71:79:08:ca:
07:44:61:c1:93:ea:77:d5:f4:d0:25:01:78:76:aa:
f0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AF:30:30:42:A8:13:04:0C:00:19:F8:DF:45:FD:CB:3F:89:C3:71
X509v3 Authority Key Identifier:
keyid:40:11:D3:7A:04:5D:13:92:89:D0:A2:B9:33:A0:2D:22:80:36:03:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBHTegRdE5KJ0KK5M6AtIoA2Ays.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/62e7bb-5357-468f-b787-d15f52357ec3/1/a68wMEKoEwQMABn430X9yz-Jw3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/62e7bb-5357-468f-b787-d15f52357ec3/1/QBHTegRdE5KJ0KK5M6AtIoA2Ays.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.248.0/22
IPv6:
2a07:89c0::/29
Signature Algorithm: sha256WithRSAEncryption
b5:2c:83:bb:bd:6a:a0:64:ea:c6:b4:dd:b2:53:2c:e3:20:1f:
2f:dd:bc:bb:68:cf:20:5a:4d:bf:67:bc:57:ab:f5:b3:70:a6:
92:8c:41:4f:0b:92:d6:9c:29:ac:44:59:7b:91:09:e3:ae:bf:
81:53:53:a7:8f:5a:e4:d6:66:11:8c:b5:1c:62:de:4a:ac:5b:
e2:a6:e4:58:22:26:bc:f0:f0:65:18:2f:cf:6f:59:11:34:33:
28:45:f6:1c:76:00:63:8a:b7:76:ae:83:04:6e:ec:f9:da:30:
74:6a:ba:76:53:54:4e:6d:ee:ca:30:4f:42:d6:5f:05:9d:c6:
40:66:6b:d2:b1:b2:c7:cd:18:fc:92:cb:68:58:42:b0:28:33:
ad:5d:de:d3:43:fd:16:8b:55:ae:2d:c8:30:b7:4b:51:f6:f6:
e0:0a:4a:6e:41:21:45:09:a4:81:19:9c:c1:b3:88:e0:c4:f5:
61:dc:73:eb:32:5c:91:eb:b1:7a:dc:3e:1d:fd:92:08:5c:16:
b0:c4:46:1d:9b:ee:9a:90:12:e8:00:6d:6c:b9:f1:b7:c9:b8:
3b:8b:ec:25:0c:bf:21:e2:42:98:76:37:c4:a0:c8:6c:fd:e5:
a4:6f:40:f2:82:7f:1a:f5:ef:63:77:05:b7:1e:ae:ad:ac:3b:
bc:ac:28:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:27 2024 by rpki-client on console-ams.rpki-client.org