Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2b95ed-9882-42fa-a9f5-ad80e756d256/1/69Cos5B58QzUKmeDcgaZ2MPCUwQ.roa
File: 69Cos5B58QzUKmeDcgaZ2MPCUwQ.roa (raw, json)
Hash identifier: 0Lk/eii88zc4KBkxoxAJbomiFE/tIDxEg9f8Ypq5Ha4=
Subject key identifier: EB:D0:A8:B3:90:79:F1:0C:D4:2A:67:83:72:06:99:D8:C3:C2:53:04
Certificate issuer: /CN=2b3840b5d3c3525981c8616166679de920e350f5
Certificate serial: 01856EC20D2E7EB06A9B9AEE931F945BF49A
Authority key identifier: 2B:38:40:B5:D3:C3:52:59:81:C8:61:61:66:67:9D:E9:20:E3:50:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KzhAtdPDUlmByGFhZmed6SDjUPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2b95ed-9882-42fa-a9f5-ad80e756d256/1/69Cos5B58QzUKmeDcgaZ2MPCUwQ.roa
Signing time: Sun 01 Jan 2023 19:14:49 +0000
ROA not before: Sun 01 Jan 2023 19:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21277
IP address blocks: 185.14.251.0/24 maxlen: 24
31.25.142.0/23 maxlen: 23
185.184.197.0/24 maxlen: 24
159.255.165.0/24 maxlen: 24
159.255.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:0d:2e:7e:b0:6a:9b:9a:ee:93:1f:94:5b:f4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3840b5d3c3525981c8616166679de920e350f5
Validity
Not Before: Jan 1 19:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebd0a8b39079f10cd42a6783720699d8c3c25304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3d:6f:c2:6a:6c:28:64:03:74:7a:08:c8:02:
8c:bb:69:48:38:9c:df:3a:3a:80:37:6d:16:78:e6:
e9:cf:f6:5b:cb:8a:c2:6b:9e:d0:06:18:39:3d:cc:
82:79:0f:5f:4a:e6:7d:93:79:9d:e9:1c:32:07:18:
7f:77:e8:bc:d6:79:30:20:de:31:00:f4:7f:10:0d:
75:c9:23:e7:46:cc:ef:ec:8e:b4:f7:8d:2c:8b:c9:
13:de:c2:04:9b:98:36:b5:c0:62:e4:03:a8:24:2a:
ba:88:64:ee:b8:08:e4:97:fd:95:82:32:ad:ad:55:
fc:59:c3:33:38:9d:88:b8:0b:44:49:eb:d5:d8:86:
4f:51:fa:f8:d0:96:cc:f7:d7:4f:0c:4b:00:67:38:
ff:ce:06:59:e8:47:eb:c2:e3:d5:cb:44:5f:36:28:
d9:c7:40:ec:7e:7d:86:a8:b9:b8:07:22:8a:e4:6c:
89:c0:60:14:ca:83:f7:c6:8f:bd:48:36:c5:24:e2:
e4:0a:3e:0c:dd:3c:e3:10:ef:d7:44:50:e5:db:1f:
e5:9b:f4:44:94:5c:bf:61:46:d3:a2:1c:3a:10:96:
18:16:e1:8a:d9:d5:46:03:97:0c:46:3a:c8:f5:78:
51:08:63:a7:4a:74:c2:72:15:a5:2a:c2:03:14:7f:
10:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D0:A8:B3:90:79:F1:0C:D4:2A:67:83:72:06:99:D8:C3:C2:53:04
X509v3 Authority Key Identifier:
keyid:2B:38:40:B5:D3:C3:52:59:81:C8:61:61:66:67:9D:E9:20:E3:50:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzhAtdPDUlmByGFhZmed6SDjUPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2b95ed-9882-42fa-a9f5-ad80e756d256/1/69Cos5B58QzUKmeDcgaZ2MPCUwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2b95ed-9882-42fa-a9f5-ad80e756d256/1/KzhAtdPDUlmByGFhZmed6SDjUPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.142.0/23
159.255.165.0-159.255.167.255
185.14.251.0/24
185.184.197.0/24
Signature Algorithm: sha256WithRSAEncryption
95:28:de:32:53:18:12:86:31:42:88:5a:dd:3d:ac:fa:ac:8b:
d9:c4:bf:23:52:3c:d2:3d:fe:bd:6d:bc:ec:14:65:fa:bb:8b:
50:e1:eb:c7:47:e7:7e:5c:41:84:0c:7d:96:ed:54:eb:fb:e4:
cc:98:e7:11:cf:5b:60:c7:89:2e:3d:3a:a3:e6:49:34:0c:72:
4a:35:ad:6a:fc:da:08:be:a2:7b:96:a5:22:a3:33:c3:b0:0a:
32:fa:7a:64:a8:76:83:87:6c:8c:d2:51:cf:dd:38:d6:df:c3:
be:d0:40:36:a6:e7:45:60:16:83:ee:7e:ee:47:c2:1a:0f:af:
e7:0d:15:3a:f9:b6:cb:6c:81:a3:0d:72:80:fd:fa:ce:11:8b:
5c:63:a7:cc:3a:90:68:9a:9d:1d:45:d1:82:54:28:2e:d0:c5:
45:a9:9c:f7:2d:7f:fa:ea:36:e8:33:ec:6b:93:ed:ae:ec:fe:
e0:cf:6c:71:59:36:97:65:3a:e4:54:43:eb:17:8c:2d:57:4b:
70:f3:e1:47:f9:02:a1:72:a2:f8:24:9b:f2:42:cf:66:a6:b0:
33:c2:04:7e:4b:02:2f:dc:70:43:07:7e:dd:5b:15:2a:6d:c5:
bd:de:3f:e5:6b:1f:91:e9:07:b4:a5:25:85:c4:e8:4d:e8:93:
5c:4d:7c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:16 2024 by rpki-client on console-ams.rpki-client.org