Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/j7zspX4n3yO3-qtmjbxOrdNB-TY.roa
File: j7zspX4n3yO3-qtmjbxOrdNB-TY.roa (raw, json)
Hash identifier: JjJJ5GR9udm6otp0bYafU3d1E0VziIdjmoyw/07GXCw=
Subject key identifier: 8F:BC:EC:A5:7E:27:DF:23:B7:FA:AB:66:8D:BC:4E:AD:D3:41:F9:36
Certificate issuer: /CN=85c313e9965eaa7b3ae9bd5cbf3566d44a51097d
Certificate serial: 01882A5996BA4A971BDA7B1C7483743E74DC
Authority key identifier: 85:C3:13:E9:96:5E:AA:7B:3A:E9:BD:5C:BF:35:66:D4:4A:51:09:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcMT6ZZeqns66b1cvzVm1EpRCX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/j7zspX4n3yO3-qtmjbxOrdNB-TY.roa
Signing time: Wed 17 May 2023 15:34:54 +0000
ROA not before: Wed 17 May 2023 15:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199984
IP address blocks: 185.40.85.0/24 maxlen: 24
185.40.84.0/24 maxlen: 24
185.40.86.0/24 maxlen: 24
185.40.87.0/24 maxlen: 24
185.123.103.0/24 maxlen: 24
2a04:8340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2a:59:96:ba:4a:97:1b:da:7b:1c:74:83:74:3e:74:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c313e9965eaa7b3ae9bd5cbf3566d44a51097d
Validity
Not Before: May 17 15:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fbceca57e27df23b7faab668dbc4eadd341f936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:92:2d:8c:ea:e1:0d:e7:68:ad:8d:74:35:d3:
27:c9:b0:ad:e5:83:a9:ba:9b:dc:74:05:14:f0:5b:
a9:a7:bc:5f:1a:be:32:d0:f1:a8:54:1d:8f:db:f0:
8a:f9:ca:df:6b:77:4c:82:b8:28:e0:9b:ec:9c:cd:
ec:66:51:58:49:09:8a:67:ec:ca:ab:2e:fc:1c:f1:
04:41:c8:ff:c4:27:3f:2f:a8:e8:ce:aa:dd:92:bb:
7f:a3:ab:bf:9a:f4:22:c3:7d:61:97:a9:8b:a1:42:
63:0c:fb:3b:40:51:9d:89:38:1c:fd:db:5e:5b:31:
1b:c4:5a:dc:1b:e9:5d:17:36:58:ac:e1:e1:f6:cb:
0b:59:b0:30:b4:45:07:f4:51:93:70:a7:3b:64:78:
97:67:8b:f0:05:3d:0c:01:62:9b:f7:70:66:30:00:
ef:b2:28:ff:88:78:6c:10:28:8a:d8:55:b3:63:99:
17:07:57:4e:6d:5e:81:20:b4:ab:ca:3d:b2:88:1c:
95:7f:8b:fb:2a:02:82:7c:42:74:ac:f4:d5:d8:35:
62:02:f3:be:c5:d0:bf:70:a5:6e:09:57:ea:b7:bf:
00:f1:87:35:01:ea:13:62:86:3e:a7:1b:ec:68:07:
04:1f:37:f0:74:d8:b4:b1:03:5e:84:04:1e:23:03:
a8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BC:EC:A5:7E:27:DF:23:B7:FA:AB:66:8D:BC:4E:AD:D3:41:F9:36
X509v3 Authority Key Identifier:
keyid:85:C3:13:E9:96:5E:AA:7B:3A:E9:BD:5C:BF:35:66:D4:4A:51:09:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcMT6ZZeqns66b1cvzVm1EpRCX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/j7zspX4n3yO3-qtmjbxOrdNB-TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/hcMT6ZZeqns66b1cvzVm1EpRCX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.84.0/22
185.123.103.0/24
IPv6:
2a04:8340::/29
Signature Algorithm: sha256WithRSAEncryption
83:06:cd:96:df:07:e3:19:cc:ee:ca:35:b8:60:40:33:80:d6:
58:53:1a:ea:a9:44:fe:4c:dd:59:a2:ab:be:13:0a:92:5a:58:
50:c0:3b:4f:77:54:4f:9d:c6:3c:37:a5:39:f4:f6:84:05:82:
72:20:33:bb:7e:2a:cf:b5:bb:0f:a6:54:2c:80:00:81:92:62:
df:f1:09:2f:51:5c:46:60:c6:92:5c:95:ea:8e:d4:db:7e:4a:
67:88:99:e8:4b:93:bb:17:50:07:79:7a:47:0f:2e:a3:7b:c6:
91:e2:e1:6d:9b:bb:80:87:a7:8b:15:b9:aa:47:23:57:ed:fc:
8c:a1:28:05:d3:9a:f0:2d:e7:2b:d8:bc:c1:60:b3:49:dc:87:
78:a1:e8:dd:6b:08:71:8b:3a:78:f5:26:03:e4:d1:9f:20:6e:
9c:e2:71:04:68:b2:d2:ed:36:1c:f0:72:d4:76:ad:f7:48:45:
5c:bb:06:bd:aa:1f:13:f3:d8:3b:40:44:ab:86:cb:35:d4:3c:
ab:43:fd:a4:f7:d6:06:1b:26:8c:45:8f:4e:10:ea:2d:e3:93:
64:8f:5a:47:30:20:a3:df:08:97:64:9e:7f:19:20:92:7f:a2:
d2:71:9d:3a:dd:5d:d6:ca:8b:d9:3f:9c:43:be:7c:ac:c2:ac:
d9:c1:8e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:33 2024 by rpki-client on console-fra.rpki-client.org