Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/1-2QT139Ag04NHDU1sCd8FqfolUc.roa
File: 1-2QT139Ag04NHDU1sCd8FqfolUc.roa (raw, json)
Hash identifier: Yv+YCda+gdoJmWR21qlpHZiMztpKsj/T56uDsIOatgk=
Subject key identifier: FB:64:13:D7:7F:40:83:4E:0D:1C:35:35:B0:27:7C:16:A7:E8:95:47
Certificate issuer: /CN=73588934a0b0d648daf94dd9e629d3dd22ed5abf
Certificate serial: 018CC7274A57817FA26C1E41A901CEC09BA5
Authority key identifier: 73:58:89:34:A0:B0:D6:48:DA:F9:4D:D9:E6:29:D3:DD:22:ED:5A:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1iJNKCw1kja-U3Z5inT3SLtWr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/1-2QT139Ag04NHDU1sCd8FqfolUc.roa
Signing time: Mon 01 Jan 2024 22:31:30 +0000
ROA not before: Mon 01 Jan 2024 22:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47516
IP address blocks: 185.136.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:4a:57:81:7f:a2:6c:1e:41:a9:01:ce:c0:9b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73588934a0b0d648daf94dd9e629d3dd22ed5abf
Validity
Not Before: Jan 1 22:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb6413d77f40834e0d1c3535b0277c16a7e89547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:e1:93:8b:38:98:53:89:ee:f1:51:50:ff:
6e:f0:43:2a:c9:fc:4d:8d:44:e1:a4:5c:73:7b:90:
45:02:42:bb:bb:0b:c3:8a:72:99:63:67:6a:05:27:
db:03:df:8e:bc:a0:da:8f:0d:43:c4:46:b6:25:5e:
99:e6:82:89:8d:80:44:21:23:fd:b2:9a:cc:d4:6c:
95:02:d0:f3:85:7a:a2:f8:ec:ec:cc:74:be:40:c7:
e7:b2:88:4f:7b:f4:65:27:e0:44:6c:3e:7f:c1:43:
5d:77:da:4d:50:6f:f3:0a:63:32:39:df:bb:f5:3d:
22:ba:49:12:6c:ad:de:2e:3e:31:a7:33:6c:f0:ef:
68:6a:1a:3a:50:ea:25:6b:85:3b:c0:23:80:3b:1c:
95:2b:9c:50:1f:79:f6:88:22:7d:9b:5c:58:2f:14:
37:15:e6:de:5a:83:52:a6:69:ae:6e:9c:b0:58:14:
46:80:b6:c1:ff:e7:a1:17:97:a8:df:12:46:76:32:
47:b3:af:cb:f0:ff:49:af:97:42:79:7c:8a:12:58:
17:39:97:7d:ac:09:6c:f3:da:f1:fd:79:b5:f4:c1:
52:63:45:ad:bd:cb:35:98:c7:39:17:8c:28:a3:cb:
ed:b1:9d:ac:f5:0e:be:47:2f:71:12:b8:40:1e:2a:
e3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:64:13:D7:7F:40:83:4E:0D:1C:35:35:B0:27:7C:16:A7:E8:95:47
X509v3 Authority Key Identifier:
keyid:73:58:89:34:A0:B0:D6:48:DA:F9:4D:D9:E6:29:D3:DD:22:ED:5A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1iJNKCw1kja-U3Z5inT3SLtWr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/1-2QT139Ag04NHDU1sCd8FqfolUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/c1iJNKCw1kja-U3Z5inT3SLtWr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.206.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:2d:1d:3b:49:94:51:0a:24:08:1d:d2:1a:ca:13:c5:d8:0a:
04:66:cb:f0:e4:67:4f:38:09:15:1c:18:a1:99:a5:5b:99:57:
07:cd:d3:0c:9b:e0:45:54:8a:4d:f6:f2:9e:b6:3d:df:ba:20:
0b:3a:df:41:bc:d6:bd:37:1c:05:1e:d0:f5:ed:19:7c:a3:d8:
2c:36:bf:42:7d:b2:df:52:87:f0:1d:66:d9:b5:6e:d8:04:ae:
5c:f9:4a:4d:75:25:7e:99:57:1d:9a:27:56:cd:ea:2a:06:1e:
d8:0d:78:ab:81:50:65:fd:90:92:f2:5f:50:83:85:3f:04:d0:
af:94:d4:9a:3a:12:42:4a:35:f7:b5:4d:b6:d1:8a:14:9c:ac:
06:7c:b7:42:8a:76:ec:ee:50:bb:00:bc:43:fa:f6:f0:1d:69:
b2:75:81:08:20:63:de:ae:50:9a:2c:94:b5:4f:b0:0b:12:24:
d9:36:76:9e:1f:57:fd:22:a8:c5:fe:ed:cc:4e:e0:2d:e4:22:
cf:ea:1a:2f:eb:b0:ce:ba:e3:75:c4:58:51:79:e2:0d:cb:6d:
8f:04:36:24:35:2d:9c:84:1d:c0:36:71:b3:2f:f4:3f:87:56:
89:01:92:9b:dc:f0:2d:8d:48:e9:ad:24:0c:a3:25:3b:04:7c:
e2:cb:a2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:19 2024 by rpki-client on console-fra.rpki-client.org