Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/BQXOcxCoUbv_Lx6idYHNBRctuq8.roa
File: BQXOcxCoUbv_Lx6idYHNBRctuq8.roa (raw, json)
Hash identifier: nQFYNtExZ6eU4DI/+wbKQm8rzfK/iOhovAnLhD0LBWI=
Subject key identifier: 05:05:CE:73:10:A8:51:BB:FF:2F:1E:A2:75:81:CD:05:17:2D:BA:AF
Certificate issuer: /CN=71a50dd78f03c71104d5d1a26058a920724e859e
Certificate serial: 018D477B4DEA4048CE9E6FA039C7A2A923E9
Authority key identifier: 71:A5:0D:D7:8F:03:C7:11:04:D5:D1:A2:60:58:A9:20:72:4E:85:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caUN148DxxEE1dGiYFipIHJOhZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/BQXOcxCoUbv_Lx6idYHNBRctuq8.roa
Signing time: Fri 26 Jan 2024 20:34:39 +0000
ROA not before: Fri 26 Jan 2024 20:34:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215946
IP address blocks: 185.120.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:47:7b:4d:ea:40:48:ce:9e:6f:a0:39:c7:a2:a9:23:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a50dd78f03c71104d5d1a26058a920724e859e
Validity
Not Before: Jan 26 20:34:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0505ce7310a851bbff2f1ea27581cd05172dbaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:66:b8:c0:69:41:40:41:63:79:a7:09:af:28:
e1:a1:9c:f5:91:75:ce:24:49:e5:cf:4d:ef:47:e6:
67:07:c1:b3:8e:d1:1e:5b:e4:90:f5:96:6f:af:6b:
39:90:2e:51:c2:3e:70:96:d3:17:5e:ad:cf:07:66:
de:6e:d0:c3:03:c3:5f:94:20:06:7f:2b:ad:db:1c:
b5:fd:0a:d6:06:73:e5:1c:e5:21:14:50:f8:51:3c:
65:3b:fd:ea:03:1a:5d:7c:e1:94:2e:94:90:84:2f:
c9:b7:e4:33:72:e4:56:d9:36:6b:fd:38:05:5e:8f:
94:d0:d7:85:5d:54:5d:a7:51:b2:70:20:95:42:57:
df:0c:6a:8d:b9:05:23:61:51:18:0c:f7:c4:20:b2:
7c:12:9f:e4:b7:b9:82:93:29:a2:d0:85:c6:c7:7d:
5f:2c:b0:5e:58:a8:00:54:b5:69:07:e7:6b:b6:2a:
17:7b:98:39:88:e4:52:77:6b:95:e8:90:10:05:2b:
a4:8a:54:0e:6f:65:51:d3:28:34:6f:48:96:90:47:
4f:00:3e:2e:76:9e:f2:a8:4a:0b:0c:fc:42:1d:77:
1f:0d:a8:59:67:31:bd:75:86:5e:e2:e4:24:39:01:
ab:1a:2b:13:46:ec:bd:23:e2:9c:7b:35:9c:73:f1:
35:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:05:CE:73:10:A8:51:BB:FF:2F:1E:A2:75:81:CD:05:17:2D:BA:AF
X509v3 Authority Key Identifier:
keyid:71:A5:0D:D7:8F:03:C7:11:04:D5:D1:A2:60:58:A9:20:72:4E:85:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caUN148DxxEE1dGiYFipIHJOhZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/BQXOcxCoUbv_Lx6idYHNBRctuq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/caUN148DxxEE1dGiYFipIHJOhZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.39.0/24
Signature Algorithm: sha256WithRSAEncryption
af:d8:53:a7:d0:b6:0a:bd:58:c9:f7:87:31:f7:fa:0a:57:01:
f8:23:38:ce:6c:db:a4:7f:d8:1e:a5:5d:53:80:62:9a:7b:63:
08:2f:1a:a4:27:6b:ca:1c:97:3a:39:00:55:41:d8:4e:9f:b6:
f4:6a:b0:03:5c:52:d5:ca:00:ba:35:ae:59:00:4a:fd:fd:7e:
75:61:ac:52:21:e7:49:1d:30:6d:22:50:ed:c4:27:d5:ce:97:
b4:5a:67:d9:67:f2:b0:cb:bf:64:ec:fc:c1:94:46:92:48:68:
cf:56:41:7d:09:ec:3d:c3:c6:95:43:4a:30:95:d2:15:6c:01:
c6:9d:1d:b2:3b:9f:1c:98:61:f0:0b:c1:1b:32:52:8b:7f:18:
27:e9:37:d6:53:24:7e:15:5b:66:67:f9:d7:77:6a:8f:4c:d5:
3c:de:23:ff:0f:4f:53:ed:68:53:ba:4e:f6:d5:92:f4:f7:1d:
0d:ac:0a:9b:49:a6:fd:cf:ce:39:9b:a0:3a:0d:ef:81:dd:f4:
6c:7e:c0:48:6f:a5:b4:9d:d7:f0:6b:a0:25:8a:c1:2c:50:da:
21:35:36:00:e3:97:93:64:da:76:ee:2d:1b:8a:fc:77:e1:ac:
81:ce:82:61:e0:4a:1d:1e:30:92:60:2e:fd:ee:25:d0:77:2f:
61:fd:56:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:42 2024 by rpki-client on console-fra.rpki-client.org