Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/5bFilFClwml298AJm3bievZet9E.roa
File: 5bFilFClwml298AJm3bievZet9E.roa (raw, json)
Hash identifier: maeVjU79BdsBmLJcxjT0l/X7YEgO80oMBYprqTCjEL8=
Subject key identifier: E5:B1:62:94:50:A5:C2:69:76:F7:C0:09:9B:76:E2:7A:F6:5E:B7:D1
Certificate issuer: /CN=71a50dd78f03c71104d5d1a26058a920724e859e
Certificate serial: 018C0C09DAB94E9B8F6CB1D313D9E0535DF6
Authority key identifier: 71:A5:0D:D7:8F:03:C7:11:04:D5:D1:A2:60:58:A9:20:72:4E:85:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caUN148DxxEE1dGiYFipIHJOhZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/5bFilFClwml298AJm3bievZet9E.roa
Signing time: Sun 26 Nov 2023 14:30:21 +0000
ROA not before: Sun 26 Nov 2023 14:30:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6843
IP address blocks: 185.120.37.0/24 maxlen: 24
185.120.38.0/24 maxlen: 24
185.120.36.0/24 maxlen: 24
185.120.39.0/24 maxlen: 24
2a06:8f00::/30 maxlen: 30
2a06:8f04::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0c:09:da:b9:4e:9b:8f:6c:b1:d3:13:d9:e0:53:5d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a50dd78f03c71104d5d1a26058a920724e859e
Validity
Not Before: Nov 26 14:30:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5b1629450a5c26976f7c0099b76e27af65eb7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:38:43:9b:db:b7:43:d7:80:fc:d4:99:6c:4a:
e4:c8:14:a1:15:68:93:b7:1f:60:ea:0c:58:51:0d:
1e:4b:3f:15:f1:45:17:2a:02:48:f5:1d:6f:87:2c:
13:0b:ee:47:a5:eb:fb:e3:e0:d4:db:61:dc:6c:6d:
e7:0c:82:58:c3:ad:a1:65:fc:ea:19:6c:44:b6:4d:
21:43:54:7d:e6:b6:99:e7:05:16:30:4a:f6:90:9c:
d2:57:9d:b4:9a:27:b1:45:72:c5:3e:9f:7c:ea:38:
a0:99:a7:51:3a:89:a4:32:a1:93:90:f9:d0:6b:3a:
ce:ce:5e:1c:10:83:36:bb:93:19:87:45:e2:91:9d:
f1:30:f6:ad:4c:7e:c7:fd:ca:a7:4a:64:f9:11:05:
49:2c:35:15:63:93:d1:07:67:60:0a:86:af:9b:6d:
6b:d4:ab:7c:c6:a4:b6:14:ba:5f:f0:9e:46:52:0d:
81:3e:fd:d5:56:30:58:c0:45:82:d6:f2:19:1c:4e:
9b:6e:d6:52:4c:b1:7b:74:51:f9:b6:bf:9f:b9:fe:
00:cc:2a:d6:a3:21:ba:af:03:c1:72:48:31:72:fa:
6c:db:5d:af:3c:45:07:08:90:ba:58:ab:8b:c9:98:
e2:fa:c1:a4:58:13:0b:3b:71:e3:9c:13:56:25:f1:
18:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B1:62:94:50:A5:C2:69:76:F7:C0:09:9B:76:E2:7A:F6:5E:B7:D1
X509v3 Authority Key Identifier:
keyid:71:A5:0D:D7:8F:03:C7:11:04:D5:D1:A2:60:58:A9:20:72:4E:85:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caUN148DxxEE1dGiYFipIHJOhZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/5bFilFClwml298AJm3bievZet9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/caUN148DxxEE1dGiYFipIHJOhZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.36.0/22
IPv6:
2a06:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
8c:3d:f7:2d:fd:bd:77:b7:b6:5a:ac:b1:22:ab:67:ac:9a:d9:
d0:e0:ac:4b:83:ab:f0:32:a3:6d:e8:39:2b:05:56:5b:e7:8b:
c5:8a:dd:83:1e:5b:64:e7:1f:85:78:df:52:fd:ed:e5:5d:98:
d6:dd:1c:4a:54:d7:9f:50:73:ad:3f:0c:cb:1d:1f:c1:74:a5:
14:34:ac:a4:3e:23:6c:61:b3:40:97:13:85:92:8c:f5:b3:23:
61:f3:c8:98:b1:12:5f:58:96:b9:51:70:b2:1e:04:9d:62:6a:
a4:17:68:b1:9a:cb:80:98:fe:0b:78:2e:79:90:e3:0c:89:7f:
e6:06:5d:f1:7b:9a:35:f8:e3:8b:e5:90:8e:25:82:35:74:fa:
ff:4d:e5:bd:7b:f2:8a:c2:63:69:26:a3:05:f3:1d:57:1b:b1:
35:9e:a6:4c:b3:a9:94:57:a2:46:b2:ca:ae:ca:cb:5c:24:1d:
41:d5:ce:95:35:bd:85:6d:d9:11:fa:d2:d9:48:e9:91:7f:47:
71:82:78:d1:18:98:55:0c:af:39:5e:9c:95:f0:fd:8a:39:6e:
1d:12:c7:64:cc:34:87:c4:ea:9a:73:93:95:33:14:eb:46:a0:
87:8a:a2:6b:eb:fb:3f:8c:00:c7:fd:d6:31:88:03:2b:99:7a:
7b:18:f5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:12 2024 by rpki-client on console-ams.rpki-client.org