Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/jqQUF3b860-rLpHN0mmdsv04Ebo.roa
File: jqQUF3b860-rLpHN0mmdsv04Ebo.roa (raw, json)
Hash identifier: JZmB4Ndxh0sopDSbg685T4SIzKBbjYWB/9OJMZUzxO4=
Subject key identifier: 8E:A4:14:17:76:FC:EB:4F:AB:2E:91:CD:D2:69:9D:B2:FD:38:11:BA
Certificate issuer: /CN=f5150a23aac420feecabfc9b5baf9f024056333a
Certificate serial: 018CC72769E0C42409FAF9CB2C71A00FF98A
Authority key identifier: F5:15:0A:23:AA:C4:20:FE:EC:AB:FC:9B:5B:AF:9F:02:40:56:33:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RUKI6rEIP7sq_ybW6-fAkBWMzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/jqQUF3b860-rLpHN0mmdsv04Ebo.roa
Signing time: Mon 01 Jan 2024 22:31:38 +0000
ROA not before: Mon 01 Jan 2024 22:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201366
IP address blocks: 185.77.14.0/23 maxlen: 23
185.77.14.0/24 maxlen: 24
185.77.13.0/24 maxlen: 24
185.77.12.0/24 maxlen: 24
2a05:5f41::/32 maxlen: 32
2a05:5f40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:69:e0:c4:24:09:fa:f9:cb:2c:71:a0:0f:f9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5150a23aac420feecabfc9b5baf9f024056333a
Validity
Not Before: Jan 1 22:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ea4141776fceb4fab2e91cdd2699db2fd3811ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d3:54:81:20:0d:d8:bb:4e:cd:6f:72:2c:58:
fd:06:7b:5d:0d:b3:93:6b:82:24:91:77:4e:f7:09:
96:13:ae:9a:45:d9:2c:eb:90:b3:df:02:f7:fc:fb:
04:0e:ce:e5:16:21:b0:b8:17:83:d5:b7:d4:bf:2c:
8b:b4:8f:31:55:00:81:ee:ee:6a:ca:60:b5:a3:89:
02:f0:85:4f:23:24:83:11:8d:f9:19:0e:85:9f:1a:
b9:fc:c5:7c:c9:05:5d:cc:71:ae:6d:9f:65:51:0c:
14:ba:de:89:c5:3e:56:f6:66:bb:1f:da:63:ce:92:
06:cb:51:ea:25:82:dd:9c:a3:a4:32:3b:73:05:f6:
69:78:7e:74:5b:6c:82:5f:99:09:e8:8d:4e:42:69:
e2:fe:21:7f:45:d9:e2:f0:e4:4d:e7:7c:08:97:ad:
7f:40:53:6e:2f:7e:09:21:f5:89:54:34:04:63:c6:
52:f4:e9:13:aa:c7:c7:3a:d7:89:1e:9f:f3:a9:65:
b9:3c:1c:db:fa:c0:bf:19:e0:22:f4:a7:9e:c7:99:
59:07:dd:f6:9e:b6:9f:a1:27:55:05:18:50:08:4c:
14:df:d1:ae:60:a7:9d:ba:ff:43:76:1d:23:71:10:
1d:33:20:eb:83:bc:d2:88:8e:76:4f:b9:1e:8f:3f:
5d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A4:14:17:76:FC:EB:4F:AB:2E:91:CD:D2:69:9D:B2:FD:38:11:BA
X509v3 Authority Key Identifier:
keyid:F5:15:0A:23:AA:C4:20:FE:EC:AB:FC:9B:5B:AF:9F:02:40:56:33:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RUKI6rEIP7sq_ybW6-fAkBWMzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/jqQUF3b860-rLpHN0mmdsv04Ebo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/9RUKI6rEIP7sq_ybW6-fAkBWMzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.12.0/22
IPv6:
2a05:5f40::/31
Signature Algorithm: sha256WithRSAEncryption
13:5a:04:d4:13:32:47:18:9c:5b:c2:5f:2b:ce:e7:be:71:bd:
a1:eb:af:0c:6c:24:88:f3:27:a1:36:1a:14:bc:67:ef:d2:b7:
8e:18:f3:86:10:78:88:34:ee:28:71:67:39:12:84:d2:eb:4e:
cf:fc:c3:a5:70:29:63:92:26:b0:8c:c2:7b:15:7c:0e:f6:43:
ee:33:ba:5f:76:80:3d:2a:65:78:5f:31:88:e0:21:7e:be:00:
66:5f:34:72:66:c7:06:90:ed:67:d3:33:95:bc:77:6b:6f:e6:
0e:7e:08:cf:9b:71:07:6f:39:60:3e:00:e8:09:54:aa:1a:3e:
80:f7:46:61:38:fd:eb:02:a1:11:f9:3c:01:74:97:c1:1d:86:
f4:1b:80:2e:49:04:21:4e:73:1c:04:b7:15:7b:ed:47:ac:4c:
26:4d:54:d9:11:62:64:22:90:8d:7b:f3:96:72:f5:17:af:78:
4d:e6:55:83:f8:16:d2:55:a7:c5:67:9f:06:b3:05:53:10:d1:
a8:7a:52:29:8a:c4:cb:e9:14:c9:c5:7b:8b:fa:ad:f3:79:99:
e4:a9:c6:8d:5b:a9:5d:7b:76:02:43:5c:0d:8d:0b:d1:3f:49:
28:06:a8:5c:e0:65:98:b0:f5:ea:f5:dc:02:58:49:d3:c2:1f:
a8:97:7f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:55 2024 by rpki-client on console-ams.rpki-client.org