Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/SF2Fc0ZfkVRWYyooJFgZpUayA94.roa
File: SF2Fc0ZfkVRWYyooJFgZpUayA94.roa (raw, json)
Hash identifier: 51qt2q4ABRVZeEVX8xa+kP5Jzy/Ti7CAnpVexOYwUbE=
Subject key identifier: 48:5D:85:73:46:5F:91:54:56:63:2A:28:24:58:19:A5:46:B2:03:DE
Certificate issuer: /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial: 018CC8019150BFE4BE97A4F1A4D7ACD055B2
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/SF2Fc0ZfkVRWYyooJFgZpUayA94.roa
Signing time: Tue 02 Jan 2024 02:29:55 +0000
ROA not before: Tue 02 Jan 2024 02:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44294
IP address blocks: 185.239.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:91:50:bf:e4:be:97:a4:f1:a4:d7:ac:d0:55:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Validity
Not Before: Jan 2 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=485d8573465f915456632a28245819a546b203de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1c:16:d6:e7:f4:e6:4c:ed:dd:bb:a5:f1:10:
69:44:84:57:f8:f4:24:2b:95:a4:38:cb:86:a5:78:
e0:1c:92:a3:75:1a:c3:d2:e8:35:91:97:51:fc:42:
fc:5a:d9:7f:1f:09:1e:c5:74:68:d0:31:a3:29:7b:
e4:28:b7:aa:b8:71:6a:6b:10:30:80:46:6a:02:20:
04:27:87:fd:a5:31:ba:86:72:47:34:96:ee:d1:c4:
7e:3f:ee:ca:0c:51:06:fa:19:c2:ad:10:b7:1f:41:
0d:70:ab:65:57:73:71:b9:c9:6a:44:d1:d4:a4:7f:
09:ce:45:e8:e3:e0:dd:20:62:82:7c:7f:8c:a6:77:
ff:32:8b:7c:d5:08:fa:a5:56:81:a5:7c:02:aa:7e:
6d:04:b7:6f:f6:29:c9:4d:28:b9:b6:7b:46:40:bd:
dc:0a:9c:71:4a:50:de:d5:31:79:5d:8e:e6:74:4b:
9b:83:6b:e2:3f:23:c4:18:74:f8:42:9c:45:a0:af:
a5:26:73:1d:13:4a:4c:f3:47:5f:83:55:7e:73:f3:
af:27:d1:7c:84:df:b9:aa:8e:99:7b:29:02:58:3e:
a8:35:d6:f5:e4:3f:56:43:83:bf:31:67:30:c7:c9:
da:df:82:53:09:7b:f0:4d:3f:5b:47:28:b4:24:5a:
c4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5D:85:73:46:5F:91:54:56:63:2A:28:24:58:19:A5:46:B2:03:DE
X509v3 Authority Key Identifier:
keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/SF2Fc0ZfkVRWYyooJFgZpUayA94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.25.0/24
Signature Algorithm: sha256WithRSAEncryption
36:5b:55:d0:c3:9c:d2:79:e1:18:ab:df:2b:79:80:b9:2a:71:
30:7e:33:6f:02:69:ff:0c:86:09:3f:9e:02:17:13:10:c5:2d:
61:9c:8e:a3:e7:f7:db:65:50:f1:42:4a:e8:5c:c2:a2:47:7f:
3d:81:1e:39:56:0e:d9:8b:48:9a:7e:88:74:63:3e:b4:e6:bb:
29:d4:9d:80:84:33:37:4c:46:d9:50:91:46:2e:69:37:67:a0:
8c:14:6b:c1:9a:3f:c5:88:b3:0e:ea:f9:e7:46:d5:a9:c1:38:
dd:47:64:ad:d4:1a:0f:42:15:0a:67:4e:d3:56:40:27:c6:1d:
86:f3:2e:7e:01:7b:fc:ed:d9:b5:53:92:16:35:5c:fc:39:d2:
3e:b4:4b:e1:bc:a9:58:9f:10:74:9f:57:28:4e:8f:ec:90:e6:
0d:c1:e5:22:33:75:36:a0:51:69:07:50:7c:af:df:5d:1c:d4:
9e:83:04:fa:bb:9c:f4:01:ab:dc:70:89:70:e2:e2:15:b3:43:
9e:e9:0a:f4:dc:eb:b7:f2:5f:7a:67:82:44:97:de:de:a7:7f:
16:16:ec:46:d9:80:1c:f3:3d:d6:93:d2:ca:a1:82:f4:63:e0:
fc:b6:6c:2c:e6:f2:95:b4:70:e0:35:83:26:d7:f2:31:d5:49:
8a:96:09:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:46 2024 by rpki-client on console-ams.rpki-client.org