Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/ruXkH_EtEYY6jRzL3Jc1rxED55w.roa
File: ruXkH_EtEYY6jRzL3Jc1rxED55w.roa (raw, json)
Hash identifier: liuJ5609/OJYBE6kXSK5hBNQF/RTi+xrX5RQe0K1b/U=
Subject key identifier: AE:E5:E4:1F:F1:2D:11:86:3A:8D:1C:CB:DC:97:35:AF:11:03:E7:9C
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 0185A0237EC0A5116687496C98127F639A88
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/ruXkH_EtEYY6jRzL3Jc1rxED55w.roa
Signing time: Wed 11 Jan 2023 09:22:38 +0000
ROA not before: Wed 11 Jan 2023 09:22:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3262
IP address blocks: 185.194.24.0/24 maxlen: 24
185.219.217.0/24 maxlen: 24
185.219.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a0:23:7e:c0:a5:11:66:87:49:6c:98:12:7f:63:9a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Jan 11 09:22:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aee5e41ff12d11863a8d1ccbdc9735af1103e79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:8c:88:bf:e8:66:5a:19:ab:9b:2f:d3:ff:
61:4f:e2:31:7f:76:0b:6d:44:cd:ca:03:c8:04:14:
53:59:18:31:74:7d:9c:de:4d:2f:f9:c4:20:93:fd:
ba:4e:ed:95:92:d1:f4:89:1b:b5:a6:14:91:28:34:
f5:9d:39:e6:16:02:8f:ef:63:92:7c:13:e2:2a:c1:
f2:96:c3:3b:5b:0f:f3:42:6b:e0:36:07:cd:82:36:
20:1b:10:80:ec:6e:47:3a:14:b5:2a:ff:3e:1a:6a:
9d:8b:f4:9f:45:7b:79:b6:57:62:a4:0f:8a:6f:07:
09:72:58:f1:96:90:e9:d5:bc:c1:ab:be:75:77:82:
b6:54:3f:af:ae:11:11:86:a0:bc:bd:46:8b:88:52:
46:5f:64:6a:56:45:a9:25:c7:aa:d3:03:d5:5b:ba:
b9:ad:df:d2:4e:49:69:1e:43:6d:94:a9:06:9e:64:
99:3b:5a:a6:72:37:2d:8b:a2:ad:58:1d:ed:27:19:
96:cb:2c:9e:cf:22:53:b5:d9:ad:f8:d9:23:bd:6a:
7f:2a:b1:4d:cb:d7:33:73:9e:28:2e:20:e4:cc:c7:
9a:7f:c5:5c:d2:54:16:91:8e:9a:ea:8d:22:5d:54:
05:fb:f4:cb:84:66:20:c8:91:e6:d8:1f:f3:97:3e:
83:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E5:E4:1F:F1:2D:11:86:3A:8D:1C:CB:DC:97:35:AF:11:03:E7:9C
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/ruXkH_EtEYY6jRzL3Jc1rxED55w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.24.0/24
185.219.216.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:87:ac:1f:71:59:71:bd:ce:ea:b3:56:53:de:27:c9:3b:da:
ea:30:84:bc:db:ca:8e:21:93:8e:c3:c3:a9:e8:33:b5:58:35:
0d:66:48:95:c1:4d:58:6d:e6:97:8b:58:a1:f6:35:fd:a0:c5:
97:45:43:db:4f:74:4c:ae:c4:39:07:79:d1:2b:34:f4:15:76:
eb:5b:f6:32:3d:49:49:d1:4e:82:88:42:55:ff:76:1f:ba:d6:
40:1b:c2:4f:e8:5f:ff:fc:0c:19:2e:b8:95:a1:30:c7:02:cc:
5c:eb:24:c7:9f:2b:7c:89:d6:e5:6f:0c:69:a7:0c:f0:89:a0:
c5:79:5b:97:66:99:44:89:21:c1:92:51:ec:f0:9e:33:b6:13:
f9:e0:6a:55:ec:ea:7b:f5:8d:30:b2:89:03:c7:3f:db:13:6e:
41:fa:13:66:1a:87:79:81:68:a6:8a:27:5a:42:60:6d:44:c8:
20:3f:04:1a:42:df:56:89:2e:1b:cd:7e:da:c4:4e:53:79:57:
52:ce:84:7c:bc:13:38:7e:1a:8e:a1:15:e7:9a:5a:2a:48:4f:
05:94:3d:41:44:b7:5f:e9:52:ed:9e:fc:a8:6b:b8:23:ea:4a:
59:be:54:16:30:c2:27:c9:99:23:29:fc:9d:0c:72:fb:36:25:
5d:89:58:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:03 2025 by rpki-client