Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/jnz2GmGfv_VdS-L9BYFVZieLk58.roa
File: jnz2GmGfv_VdS-L9BYFVZieLk58.roa (raw, json)
Hash identifier: zl85sHjKjo9qpU/wWL5PrVm5Ov3oLqYTXEEB8KIAozc=
Subject key identifier: 8E:7C:F6:1A:61:9F:BF:F5:5D:4B:E2:FD:05:81:55:66:27:8B:93:9F
Certificate issuer: /CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e
Certificate serial: 018F1A389574DBF690738F7FAEC789F8D5C6
Authority key identifier: DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/jnz2GmGfv_VdS-L9BYFVZieLk58.roa
Signing time: Fri 26 Apr 2024 11:44:26 +0000
ROA not before: Fri 26 Apr 2024 11:44:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215838
IP address blocks: 185.186.24.0/24 maxlen: 24
185.186.26.0/24 maxlen: 24
2a0b:6c80::/32 maxlen: 32
2a0b:6c81::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1a:38:95:74:db:f6:90:73:8f:7f:ae:c7:89:f8:d5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e
Validity
Not Before: Apr 26 11:44:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e7cf61a619fbff55d4be2fd05815566278b939f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ac:09:4c:e3:a7:f6:ee:9c:7b:d1:b0:f1:f0:
a7:60:de:8e:44:6b:a8:da:f2:07:74:74:18:5c:55:
04:99:92:d0:a6:98:fa:ce:7d:d7:f8:7c:e7:e3:45:
be:ab:8e:02:d3:bb:50:6a:50:84:f8:79:f1:34:67:
b6:3f:93:7e:45:bf:74:1f:f0:b9:e7:68:14:11:a5:
05:be:49:2b:0c:31:f6:b4:ce:74:45:81:60:a9:d3:
c4:27:41:a4:99:f9:b8:ed:a6:51:5e:c7:b6:82:64:
fd:2c:9e:00:54:60:00:0f:1a:5e:65:bb:ed:16:46:
f3:2d:64:8f:25:6b:48:d4:9e:96:84:82:32:2e:57:
cc:d1:fc:69:b5:bb:34:e2:86:c5:81:1c:67:7f:f5:
06:d8:e0:94:22:b5:8d:94:63:12:16:fe:e5:d2:13:
0a:b8:0e:d1:c9:c8:6a:f8:8d:24:24:8c:05:f4:47:
3a:86:94:64:3b:bf:d8:af:b8:17:5b:3a:05:d7:e5:
ee:56:03:2b:27:81:b7:01:e5:33:35:56:ab:6b:a4:
a7:88:cb:df:dd:19:1a:42:a6:c3:6f:c3:7b:05:b0:
70:98:2f:9d:da:83:19:88:21:01:80:a9:d4:52:1e:
d5:1a:b0:fd:8f:17:26:75:bb:6a:77:bb:69:ee:2a:
1d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7C:F6:1A:61:9F:BF:F5:5D:4B:E2:FD:05:81:55:66:27:8B:93:9F
X509v3 Authority Key Identifier:
keyid:DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/jnz2GmGfv_VdS-L9BYFVZieLk58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/3KCtsai3lwIPDseimptautQLZT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.24.0/24
185.186.26.0/24
IPv6:
2a0b:6c80::/31
Signature Algorithm: sha256WithRSAEncryption
4d:18:4c:7a:7e:50:69:8b:3f:7a:5b:38:36:5e:a9:7c:0d:9c:
46:ab:01:0b:11:cb:98:c7:2d:79:3c:30:2d:68:10:8c:ad:53:
70:5a:f7:0d:9c:f0:92:b7:0f:84:37:6c:82:30:88:e9:c2:db:
68:eb:ab:26:8e:9d:12:fc:c6:7f:fe:a9:01:e9:7e:26:cd:79:
90:86:53:bb:d3:37:c2:19:29:91:35:0c:cc:0d:e7:ab:8f:99:
89:63:05:9d:bc:40:a3:45:16:9e:0e:75:cc:f9:c9:90:b1:cb:
4b:8e:20:74:88:de:40:dc:23:a6:e3:8f:cd:97:67:20:5c:2c:
e4:b5:f0:a1:26:79:58:d8:39:2b:12:15:7c:81:3a:1d:ac:4b:
0d:2e:77:e7:8b:00:44:f1:05:2c:0e:40:df:06:29:fc:fb:49:
56:af:14:fa:eb:5f:a0:ea:1e:9e:a8:6f:4c:83:81:6d:ea:9b:
bf:f5:e4:fb:76:d8:ee:8f:64:c4:a4:46:00:7d:23:4f:23:31:
92:42:7f:ff:1c:31:86:4d:39:63:43:ee:0b:d9:98:07:32:55:
e3:69:29:54:c7:93:bd:af:55:d0:8a:b1:08:bc:55:e7:30:6d:
2f:4b:b9:12:29:9e:4f:a1:00:c9:ba:a7:bd:0c:16:40:ad:69:
ad:b3:65:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 12:52:46 2024 by rpki-client on console-ams.rpki-client.org