Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/s2s3nNx9pE5ukm-LVeGjjcZp2LU.roa
File: s2s3nNx9pE5ukm-LVeGjjcZp2LU.roa (raw, json)
Hash identifier: MwD5N7z5nXF9x3D3QAd7tGW/NGEIKERg+aqoup0BbNM=
Subject key identifier: B3:6B:37:9C:DC:7D:A4:4E:6E:92:6F:8B:55:E1:A3:8D:C6:69:D8:B5
Certificate issuer: /CN=85c313e9965eaa7b3ae9bd5cbf3566d44a51097d
Certificate serial: 0185729ED3A91F137610E3A98071B9DF9428
Authority key identifier: 85:C3:13:E9:96:5E:AA:7B:3A:E9:BD:5C:BF:35:66:D4:4A:51:09:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcMT6ZZeqns66b1cvzVm1EpRCX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/s2s3nNx9pE5ukm-LVeGjjcZp2LU.roa
Signing time: Mon 02 Jan 2023 13:14:49 +0000
ROA not before: Mon 02 Jan 2023 13:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.40.84.0/24 maxlen: 24
185.40.85.0/24 maxlen: 24
185.40.86.0/24 maxlen: 24
185.40.87.0/24 maxlen: 24
185.123.103.0/24 maxlen: 24
185.123.100.0/24 maxlen: 24
2a04:8340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:d3:a9:1f:13:76:10:e3:a9:80:71:b9:df:94:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c313e9965eaa7b3ae9bd5cbf3566d44a51097d
Validity
Not Before: Jan 2 13:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b36b379cdc7da44e6e926f8b55e1a38dc669d8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:32:c0:35:72:65:a9:a5:7e:3a:04:1b:69:67:
8d:04:4a:88:b5:33:8e:d9:c6:04:9f:bb:c5:2e:01:
6b:51:ba:23:d3:0d:39:e3:56:bb:1f:54:f7:78:52:
d1:92:6d:f7:74:7f:a7:f6:66:4f:d8:9f:bd:12:53:
29:ae:40:93:c3:ac:72:1a:f7:bb:cf:03:19:15:32:
89:cf:80:f4:a2:61:a5:76:db:1b:fe:3e:80:ea:f9:
ff:59:a4:c4:fe:5a:d6:1c:1b:67:d5:0e:1e:85:5f:
b1:c0:ff:82:6c:bc:dc:15:e7:92:c3:5e:bf:91:9b:
df:92:dc:87:5c:c4:31:f5:a0:fa:be:9f:7d:84:14:
15:8d:7b:5a:6a:c4:2f:9e:5f:ba:a1:ad:68:de:03:
07:20:e0:3e:79:b1:f7:54:63:d3:80:d6:d2:fd:65:
5a:f3:e7:45:e7:68:06:5e:de:92:3e:16:21:52:15:
33:b2:43:c0:3c:7a:17:52:23:aa:2f:0e:d8:28:74:
7b:e0:70:08:e3:92:e6:62:28:76:f4:82:2a:45:0a:
83:d4:65:4f:de:f5:2f:c4:d5:0e:d0:dd:7a:ea:98:
f9:2d:82:1b:e8:f8:20:b9:a7:15:e1:f3:26:d5:b8:
68:02:ee:26:68:0d:d8:a8:d7:bc:2a:4f:c4:c8:bf:
a9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6B:37:9C:DC:7D:A4:4E:6E:92:6F:8B:55:E1:A3:8D:C6:69:D8:B5
X509v3 Authority Key Identifier:
keyid:85:C3:13:E9:96:5E:AA:7B:3A:E9:BD:5C:BF:35:66:D4:4A:51:09:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcMT6ZZeqns66b1cvzVm1EpRCX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/s2s3nNx9pE5ukm-LVeGjjcZp2LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/hcMT6ZZeqns66b1cvzVm1EpRCX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.84.0/22
185.123.100.0/24
185.123.103.0/24
IPv6:
2a04:8340::/29
Signature Algorithm: sha256WithRSAEncryption
27:8f:b6:42:b2:00:4c:73:b5:f5:b1:a6:3d:a4:0c:a9:5a:a0:
62:06:91:51:29:a4:3d:d0:99:2c:5b:2b:1a:2c:50:14:cf:f9:
f2:62:22:2e:78:d3:e1:07:82:32:da:a0:7b:41:5b:fa:61:94:
13:db:da:96:cd:e8:e6:e9:df:57:24:ab:69:82:85:37:7e:7e:
17:82:54:db:c9:48:a0:e1:a2:1d:f4:cb:f8:17:6f:8d:9b:88:
74:e6:dc:0f:17:9b:3e:a6:a7:d8:50:46:30:8a:bb:4e:42:3b:
a7:65:7a:7a:bc:db:32:75:6f:20:43:50:c7:fb:67:cd:d7:1d:
51:5e:31:20:74:f7:92:79:f1:9d:28:b4:c5:49:e8:9a:80:bf:
d3:b2:f3:3e:ce:10:86:d9:ce:be:f1:21:72:db:24:ca:77:72:
a2:04:49:31:fc:06:1a:27:fd:54:9e:f3:29:53:8d:6c:a5:a6:
e8:eb:54:b7:5c:1c:d1:c3:4f:21:40:3a:08:58:d4:61:ad:77:
44:88:95:67:33:e2:71:07:c2:98:db:77:55:2a:26:1d:84:fe:
12:56:03:90:cb:68:7d:88:0a:f6:e8:1e:e1:24:91:54:23:e2:
28:49:a0:6a:c5:df:2d:94:16:e2:7d:6d:04:a4:d8:b3:31:38:
82:86:ad:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:09 2024 by rpki-client on console-ams.rpki-client.org