Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/C4GGK0riV20Csi0diM53JJj4bH0.roa
File: C4GGK0riV20Csi0diM53JJj4bH0.roa (raw, json)
Hash identifier: GbYXqQ3Ysb4aOWywUK6yJuJwkDdXMPpdw9UR8aK2+cM=
Subject key identifier: 0B:81:86:2B:4A:E2:57:6D:02:B2:2D:1D:88:CE:77:24:98:F8:6C:7D
Certificate issuer: /CN=71a50dd78f03c71104d5d1a26058a920724e859e
Certificate serial: 018CC6B782467F9B4D77F0455BB3056EBAD9
Authority key identifier: 71:A5:0D:D7:8F:03:C7:11:04:D5:D1:A2:60:58:A9:20:72:4E:85:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caUN148DxxEE1dGiYFipIHJOhZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/C4GGK0riV20Csi0diM53JJj4bH0.roa
Signing time: Mon 01 Jan 2024 20:29:24 +0000
ROA not before: Mon 01 Jan 2024 20:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6843
IP address blocks: 185.120.37.0/24 maxlen: 24
185.120.38.0/24 maxlen: 24
185.120.36.0/24 maxlen: 24
185.120.39.0/24 maxlen: 24
2a06:8f00::/30 maxlen: 30
2a06:8f04::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:82:46:7f:9b:4d:77:f0:45:5b:b3:05:6e:ba:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a50dd78f03c71104d5d1a26058a920724e859e
Validity
Not Before: Jan 1 20:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b81862b4ae2576d02b22d1d88ce772498f86c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:eb:88:de:2e:6e:9f:32:8f:0f:a1:44:5c:
64:97:0e:07:e8:3b:db:a0:e9:da:06:61:7f:8f:13:
e9:37:89:26:49:59:ae:9b:77:ca:67:ca:06:0c:17:
ad:91:de:41:f0:92:e2:a4:5b:04:7c:d0:fc:d4:11:
ae:30:48:c7:73:4a:e2:d6:8d:c7:24:23:23:e1:6d:
a6:d3:39:f1:b7:e0:e1:9d:2f:11:70:5c:75:dc:58:
0b:35:5a:28:08:b6:d3:32:1b:91:bf:bc:c9:43:4e:
a2:f4:3f:a7:64:73:0c:3c:b7:85:40:ee:e7:37:39:
ee:7f:e0:7f:1d:ea:98:59:e9:f5:4e:65:61:f1:29:
d3:3b:b8:01:d1:d1:45:33:44:8f:db:a7:1a:62:bc:
70:ec:28:3e:5e:fa:b3:6a:22:2f:f2:1d:b2:2f:ad:
41:df:e3:9a:80:ff:d3:99:a6:ff:f9:47:51:ef:08:
74:fc:bd:a5:88:60:12:5b:0e:02:15:b6:bd:18:84:
db:0c:b7:8e:c0:c5:8e:22:da:d5:5a:e0:7a:d3:71:
a6:14:e5:4c:d7:87:bc:c2:db:98:c2:38:73:cf:3e:
c4:1d:dc:50:e6:16:27:c9:23:19:a5:da:e1:a8:53:
8d:28:2e:b9:14:0b:ec:32:ba:4d:80:6d:2d:72:ab:
20:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:81:86:2B:4A:E2:57:6D:02:B2:2D:1D:88:CE:77:24:98:F8:6C:7D
X509v3 Authority Key Identifier:
keyid:71:A5:0D:D7:8F:03:C7:11:04:D5:D1:A2:60:58:A9:20:72:4E:85:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caUN148DxxEE1dGiYFipIHJOhZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/C4GGK0riV20Csi0diM53JJj4bH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/caUN148DxxEE1dGiYFipIHJOhZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.36.0/22
IPv6:
2a06:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
0f:fb:f7:86:5e:9b:27:3c:a7:ff:cb:ed:18:d2:8d:4e:a8:03:
fa:2e:6e:22:80:92:ef:d2:a9:a6:19:a2:28:08:11:ce:c2:e5:
b0:1d:61:19:0e:f1:f5:e2:53:b5:60:9d:ce:8e:d1:e3:ad:99:
83:9c:b1:c4:c1:2f:6c:da:12:47:e8:8d:f9:45:0f:50:77:5b:
fb:9f:9a:ff:c6:fa:6d:ba:e3:69:ca:4e:a0:18:28:69:94:be:
3e:ac:bb:a5:16:48:cc:9c:07:eb:fd:53:c7:0d:be:bf:fc:8b:
dc:8b:7f:0f:db:2c:31:29:29:a9:23:2f:87:30:68:04:6b:f4:
14:80:bb:7e:c0:74:14:ce:8d:cd:f0:7d:8d:68:f6:b2:f3:54:
31:cc:82:6f:9b:4d:fb:9d:a4:c4:a3:4b:f0:56:46:1e:88:f0:
ce:26:e9:4f:2a:d0:1e:9b:d6:4b:84:85:12:7b:3b:d8:04:22:
db:f1:ae:cc:7a:ec:d0:bc:18:d1:64:d9:3f:2d:da:c2:5b:2e:
8d:56:e9:8b:0c:b5:d4:c7:3d:be:9d:3e:90:71:b4:e6:f4:f2:
94:0b:c7:05:8a:8d:3f:d6:70:a7:d3:eb:b6:3d:e0:e4:ae:bf:
01:75:81:3e:38:73:f9:41:6d:53:78:0b:02:c2:44:14:9a:33:
a5:a2:0a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:12 2024 by rpki-client on console-ams.rpki-client.org