Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/n_Azwchsc0pyA-Ik7J3jy852VXQ.roa
File: n_Azwchsc0pyA-Ik7J3jy852VXQ.roa (raw, json)
Hash identifier: f0ZuBgiBeLbcVL1qYNcPOx3hqQcvzelFmn51FwRBh90=
Subject key identifier: 9F:F0:33:C1:C8:6C:73:4A:72:03:E2:24:EC:9D:E3:CB:CE:76:55:74
Certificate issuer: /CN=71a50dd78f03c71104d5d1a26058a920724e859e
Certificate serial: 0185720316BB2ABB78AB8A5232A508A1FE3E
Authority key identifier: 71:A5:0D:D7:8F:03:C7:11:04:D5:D1:A2:60:58:A9:20:72:4E:85:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caUN148DxxEE1dGiYFipIHJOhZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/n_Azwchsc0pyA-Ik7J3jy852VXQ.roa
Signing time: Mon 02 Jan 2023 10:24:43 +0000
ROA not before: Mon 02 Jan 2023 10:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6843
IP address blocks: 185.120.37.0/24 maxlen: 24
185.120.38.0/24 maxlen: 24
185.120.36.0/24 maxlen: 24
185.120.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:16:bb:2a:bb:78:ab:8a:52:32:a5:08:a1:fe:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a50dd78f03c71104d5d1a26058a920724e859e
Validity
Not Before: Jan 2 10:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ff033c1c86c734a7203e224ec9de3cbce765574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f1:82:61:ca:60:79:7f:52:84:05:75:fe:1e:
f4:e8:22:c9:86:e3:ed:07:e4:e8:9d:48:39:a7:99:
7b:e6:cc:90:de:7b:38:71:ee:15:9a:dd:7c:83:ec:
3b:f9:79:4c:11:e5:15:41:c7:70:db:3c:1e:58:0a:
ff:35:f6:90:d2:63:2f:4c:12:07:58:7e:f8:8c:97:
34:ce:17:86:d4:32:b8:fe:68:00:ff:02:b5:c6:86:
9c:48:6c:d2:e7:81:10:f0:2f:8b:9c:f4:ec:b7:d4:
fa:80:f3:56:9c:3b:e8:cf:12:bc:29:de:3f:f4:00:
75:8d:92:99:76:4e:b4:39:83:e5:d9:88:c6:56:48:
45:b9:a8:32:8b:e4:e0:38:d5:6b:c8:fa:d5:d7:b3:
c1:6a:4b:78:3d:e2:18:21:3f:58:1f:af:84:31:ab:
69:84:42:a3:b0:4b:02:0b:77:66:40:20:88:8c:a1:
70:a8:59:d5:90:d9:de:95:ac:ef:3c:1a:d8:46:88:
45:e1:cd:58:3f:6c:9d:89:cf:5b:fe:53:17:c4:6a:
04:c1:d8:a7:d5:98:36:4d:32:69:76:23:c4:90:c0:
8e:00:e6:20:0f:d5:0d:fd:46:36:d8:a3:92:8a:33:
71:8c:c0:d9:ac:fe:f7:be:12:a3:0e:07:8a:78:36:
19:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F0:33:C1:C8:6C:73:4A:72:03:E2:24:EC:9D:E3:CB:CE:76:55:74
X509v3 Authority Key Identifier:
keyid:71:A5:0D:D7:8F:03:C7:11:04:D5:D1:A2:60:58:A9:20:72:4E:85:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caUN148DxxEE1dGiYFipIHJOhZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/n_Azwchsc0pyA-Ik7J3jy852VXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/caUN148DxxEE1dGiYFipIHJOhZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.36.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:99:d3:0f:1b:78:82:69:cd:0d:61:3d:a3:6d:c5:32:da:8a:
b5:cd:3e:0d:70:c4:15:08:bb:5d:e6:ed:8f:1a:4d:15:ea:3a:
d7:b5:69:50:7d:84:7b:03:b3:0d:36:ab:9b:12:01:f0:d1:83:
36:c8:7e:41:22:d7:62:c0:db:d0:72:44:61:be:24:6c:d9:0b:
2b:1d:32:b0:27:a1:63:4a:7b:64:85:64:de:14:ec:dd:af:bb:
81:24:65:fc:57:64:73:7a:38:b1:05:07:fc:9a:d2:28:db:da:
30:4e:d4:b4:24:d0:cf:a3:e4:83:a5:bc:0f:e6:4a:7c:a0:cf:
6a:9e:e2:82:41:33:8b:f5:85:9e:73:2a:3a:e2:6d:f7:7e:5a:
f3:43:cd:dc:71:fa:bc:d4:f7:b5:ce:b6:f5:95:dd:b2:d1:b8:
e5:48:f9:7b:db:ce:dd:60:91:8a:ff:06:49:ac:5b:bc:33:db:
03:2a:02:2c:a2:43:81:46:29:56:ec:6b:8f:32:40:ff:38:c9:
f8:a1:4a:8a:c9:3e:5d:3e:66:79:8b:4a:b4:a3:e6:fe:ce:6c:
18:b3:7a:9e:26:0b:32:65:19:b4:73:6a:be:64:1a:c9:8d:8f:
a2:6a:04:68:87:6e:91:71:9c:83:a4:6c:0e:70:39:fb:84:1d:
01:0b:69:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:30 2025 by rpki-client