Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/901c48-0f36-4f8d-9bad-274499e1bc0b/1/2OlFfJwc3HjvZ2dYgbrJC6I7vMY.roa
File: 2OlFfJwc3HjvZ2dYgbrJC6I7vMY.roa (raw, json)
Hash identifier: duoWMhWov+D7U6GPbD2/PE4zZq8f1lrrJGxzwhDNIOY=
Subject key identifier: D8:E9:45:7C:9C:1C:DC:78:EF:67:67:58:81:BA:C9:0B:A2:3B:BC:C6
Certificate issuer: /CN=7dd2b8a1960344e1f60bb1eb4038b33562b8ea1c
Certificate serial: 19544258
Authority key identifier: 7D:D2:B8:A1:96:03:44:E1:F6:0B:B1:EB:40:38:B3:35:62:B8:EA:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdK4oZYDROH2C7HrQDizNWK46hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/901c48-0f36-4f8d-9bad-274499e1bc0b/1/2OlFfJwc3HjvZ2dYgbrJC6I7vMY.roa
Signing time: Sat 01 Jan 2022 10:54:53 +0000
ROA not before: Sat 01 Jan 2022 10:54:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199652
IP address blocks: 185.91.228.0/24 maxlen: 24
185.91.231.0/24 maxlen: 24
185.91.229.0/24 maxlen: 24
185.91.230.0/24 maxlen: 24
185.6.4.0/24 maxlen: 24
185.6.6.0/24 maxlen: 24
185.6.7.0/24 maxlen: 24
185.6.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424952408 (0x19544258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dd2b8a1960344e1f60bb1eb4038b33562b8ea1c
Validity
Not Before: Jan 1 10:54:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8e9457c9c1cdc78ef67675881bac90ba23bbcc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6c:1d:ff:6c:08:98:35:d7:0e:6f:42:9d:63:
33:28:c4:0b:82:98:cb:7c:95:1e:1e:33:eb:9c:81:
cd:8b:fd:ec:09:c8:cb:a3:78:eb:f3:6c:c1:7e:6a:
b9:f0:61:e7:9c:d4:c1:a0:a8:f0:2a:99:35:ef:25:
67:34:75:b3:88:2a:c3:d0:14:a7:f5:ed:ff:85:30:
58:08:3c:30:6d:47:b7:eb:26:1f:b0:01:5f:17:5a:
5a:10:0a:e0:c0:37:58:9e:7e:cb:52:c5:7e:ce:fc:
1b:a0:2d:59:0f:cb:0d:d5:5b:9a:12:d3:8a:8a:38:
93:df:bf:61:15:96:21:83:b3:ac:d8:23:2d:7c:9d:
8b:a0:3a:94:89:41:56:20:e5:2a:36:1e:74:b9:b7:
88:49:a6:80:b0:3f:4e:64:7d:d7:56:3b:d5:c0:bc:
ac:b1:23:fc:cb:39:3e:e4:3d:6e:6d:c1:fb:ce:1b:
9e:3d:0b:a5:77:93:41:b1:7c:84:1f:fc:3c:08:80:
5e:36:c1:cd:50:1b:aa:ce:db:2e:dd:68:02:bb:09:
c5:0e:1e:30:55:64:4d:de:26:02:3b:46:04:b1:84:
be:c8:dd:9e:91:9c:ff:c3:6e:ad:70:50:15:6a:50:
f9:78:95:11:a1:01:f2:90:63:17:1f:2c:f9:bc:42:
de:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E9:45:7C:9C:1C:DC:78:EF:67:67:58:81:BA:C9:0B:A2:3B:BC:C6
X509v3 Authority Key Identifier:
keyid:7D:D2:B8:A1:96:03:44:E1:F6:0B:B1:EB:40:38:B3:35:62:B8:EA:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdK4oZYDROH2C7HrQDizNWK46hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/901c48-0f36-4f8d-9bad-274499e1bc0b/1/2OlFfJwc3HjvZ2dYgbrJC6I7vMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/901c48-0f36-4f8d-9bad-274499e1bc0b/1/fdK4oZYDROH2C7HrQDizNWK46hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.4.0/22
185.91.228.0/22
Signature Algorithm: sha256WithRSAEncryption
70:e9:97:6d:d4:f0:8a:81:e9:33:3f:78:95:2f:c1:d0:0a:45:
0f:67:4c:0c:8d:70:81:04:e4:0a:34:25:ea:fa:96:20:73:24:
54:d6:8f:bf:f0:c0:a9:23:8c:58:ec:9d:a7:17:15:71:d2:7a:
2f:80:2d:97:c9:4e:73:c9:0f:27:7b:ac:d1:95:ae:a1:4a:e7:
c5:31:54:0c:1b:35:67:f8:bc:78:f6:95:f0:5b:19:57:4c:a2:
18:79:7f:b3:54:5b:6b:59:81:7e:50:eb:2d:42:3d:4a:94:49:
36:b1:c2:39:ba:39:11:f0:63:1d:4a:6e:31:68:c1:b9:46:e1:
e3:64:15:1a:55:d7:d0:79:d0:00:45:db:85:2e:d0:4f:b4:50:
c7:c2:c2:99:52:8c:fe:0b:1c:b8:d8:c4:b2:72:f9:e2:f2:ea:
bb:0d:b7:91:5a:20:3b:90:bb:d1:22:cb:aa:12:d2:8e:7c:ed:
1e:13:81:33:69:85:c4:af:94:8e:fa:9d:f3:cc:7b:57:78:c2:
a5:42:bc:12:62:ee:b2:87:f6:19:f0:c7:c4:6a:e0:de:94:47:
cd:7a:d8:f6:c4:98:c6:3d:23:24:2b:b4:8a:0b:84:07:6c:1d:
08:75:30:12:f7:0a:55:32:be:84:01:6a:d4:cd:a4:ee:5e:1a:
17:0f:03:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org