Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/901c48-0f36-4f8d-9bad-274499e1bc0b/1/Jm1xwB41d1YuTAfL4pmJNVG0kLY.roa
File: Jm1xwB41d1YuTAfL4pmJNVG0kLY.roa (raw, json)
Hash identifier: kRomnKnEeVDY0bEkidjoGX7sAm5OuqXWTJ+OxLR8hHQ=
Subject key identifier: 26:6D:71:C0:1E:35:77:56:2E:4C:07:CB:E2:99:89:35:51:B4:90:B6
Certificate issuer: /CN=7dd2b8a1960344e1f60bb1eb4038b33562b8ea1c
Certificate serial: 018571554B1CFF5987E07A92720262166B31
Authority key identifier: 7D:D2:B8:A1:96:03:44:E1:F6:0B:B1:EB:40:38:B3:35:62:B8:EA:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdK4oZYDROH2C7HrQDizNWK46hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/901c48-0f36-4f8d-9bad-274499e1bc0b/1/Jm1xwB41d1YuTAfL4pmJNVG0kLY.roa
Signing time: Mon 02 Jan 2023 07:14:53 +0000
ROA not before: Mon 02 Jan 2023 07:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199652
IP address blocks: 185.249.24.0/24 maxlen: 24
185.249.27.0/24 maxlen: 24
185.249.25.0/24 maxlen: 24
185.249.26.0/24 maxlen: 24
185.91.228.0/24 maxlen: 24
185.91.231.0/24 maxlen: 24
185.91.229.0/24 maxlen: 24
185.91.230.0/24 maxlen: 24
185.6.4.0/24 maxlen: 24
185.6.6.0/24 maxlen: 24
185.6.7.0/24 maxlen: 24
185.6.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:4b:1c:ff:59:87:e0:7a:92:72:02:62:16:6b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dd2b8a1960344e1f60bb1eb4038b33562b8ea1c
Validity
Not Before: Jan 2 07:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=266d71c01e3577562e4c07cbe299893551b490b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e2:02:b1:90:39:99:d9:23:5f:5b:63:d2:33:
69:08:4d:8d:c5:01:78:ef:c8:7d:d2:96:61:97:74:
4a:e8:a4:20:49:dc:ae:a7:24:fb:0d:f2:eb:ae:fb:
9c:0d:2a:f8:a0:15:df:05:e0:ca:87:9f:11:0e:37:
e9:10:c3:9f:ea:76:0f:80:8a:a2:23:a9:f4:b0:73:
de:90:6f:a7:3f:1e:10:fa:c6:4f:73:38:47:03:9d:
07:74:a6:37:8b:a9:7c:bd:6c:a9:bb:72:f7:97:d5:
9f:e3:52:4f:79:ae:88:eb:9f:17:52:e3:97:54:4b:
be:d0:63:64:bf:df:c4:3e:86:a2:8d:e3:9b:14:eb:
52:5e:21:f1:e1:48:2a:8e:e2:d0:cb:a7:8b:c3:88:
34:2a:eb:fe:72:ff:b2:58:a2:bb:8e:49:75:89:57:
ee:c0:ea:9a:c0:03:fb:ba:7d:00:00:eb:fc:52:6c:
74:ad:4a:02:2e:14:49:c4:d2:83:46:90:60:56:bd:
9f:d9:33:14:1f:02:f1:d7:bf:3e:d5:64:e5:75:36:
e2:40:7b:8a:7d:3f:0b:32:7d:3c:67:96:02:08:e6:
89:38:b2:bf:a0:53:a1:68:39:bb:d7:c2:9b:c5:c6:
2d:64:a6:78:d5:ff:41:15:da:0c:4b:b5:13:b5:da:
19:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6D:71:C0:1E:35:77:56:2E:4C:07:CB:E2:99:89:35:51:B4:90:B6
X509v3 Authority Key Identifier:
keyid:7D:D2:B8:A1:96:03:44:E1:F6:0B:B1:EB:40:38:B3:35:62:B8:EA:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdK4oZYDROH2C7HrQDizNWK46hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/901c48-0f36-4f8d-9bad-274499e1bc0b/1/Jm1xwB41d1YuTAfL4pmJNVG0kLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/901c48-0f36-4f8d-9bad-274499e1bc0b/1/fdK4oZYDROH2C7HrQDizNWK46hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.4.0/22
185.91.228.0/22
185.249.24.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:dc:09:58:5d:5e:c6:d2:96:23:c2:ee:55:e1:6b:df:87:77:
8b:ec:fc:a3:54:30:db:df:55:35:27:21:2d:af:59:7b:d7:e7:
65:fe:0d:72:06:0a:5b:13:ff:da:89:70:6c:ad:92:bd:47:a9:
4e:48:e0:98:7f:5d:ea:a5:af:26:f7:1e:6d:3e:5b:c8:eb:99:
c1:7f:06:5b:fb:de:71:5f:90:b1:06:5b:d9:53:0d:5e:f2:a3:
ec:3d:6d:b1:ea:07:f9:c2:6f:92:9e:94:6b:d5:cf:99:93:2a:
4c:5c:dc:9c:d9:ce:8f:f9:db:9c:8d:bb:e4:14:c8:e8:30:3f:
56:6d:9e:6d:07:0e:54:bb:0f:64:ed:89:a0:91:00:8c:cf:86:
2f:21:83:9c:7d:a1:f6:da:09:13:f2:28:b3:c2:cd:cf:72:db:
03:42:ae:9a:b3:5d:ba:cb:08:93:ad:f7:cd:f8:6d:f8:87:22:
7c:50:b7:df:18:01:59:03:17:85:2d:5c:d3:ca:6e:6c:1e:0b:
30:e4:ae:dc:fd:92:a7:9c:bc:0e:96:ee:86:c3:38:09:b4:1c:
01:c7:6a:41:b9:ee:e4:99:be:9c:bb:49:16:00:a8:c5:ad:6f:
73:69:98:7a:79:5b:31:35:c7:f7:c8:7d:c7:03:99:4d:6c:2f:
d3:63:e5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:11 2024 by rpki-client on console-ams.rpki-client.org