Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/7YjR_Ry6h5UdJTyHXPG_kj105OY.roa
File: 7YjR_Ry6h5UdJTyHXPG_kj105OY.roa (raw, json)
Hash identifier: /jtIZVQYD5UcPUiwG2L7MXB34Rx42Tkjc5ETQbnl6eI=
Subject key identifier: ED:88:D1:FD:1C:BA:87:95:1D:25:3C:87:5C:F1:BF:92:3D:74:E4:E6
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 01856F6FFB138287E5BC634DF44CFFA788A3
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/7YjR_Ry6h5UdJTyHXPG_kj105OY.roa
Signing time: Sun 01 Jan 2023 22:24:47 +0000
ROA not before: Sun 01 Jan 2023 22:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60631
IP address blocks: 185.105.239.0/24 maxlen: 24
185.231.115.0/24 maxlen: 24
45.139.11.0/24 maxlen: 24
45.139.10.0/24 maxlen: 24
194.147.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:fb:13:82:87:e5:bc:63:4d:f4:4c:ff:a7:88:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Jan 1 22:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed88d1fd1cba87951d253c875cf1bf923d74e4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a8:f8:42:51:c3:55:3f:7d:9a:ae:c8:78:c7:
3e:56:f0:fe:c3:5b:d8:9e:74:fd:cc:81:11:09:c0:
45:fb:3d:b8:26:47:e2:92:db:f4:d1:a8:db:6c:f7:
9b:d3:f2:b4:a7:5f:02:b9:3c:50:03:39:a1:e9:4c:
4f:1a:d6:24:52:04:2b:46:4d:9f:96:d3:35:a7:3b:
0c:62:c1:f6:b3:2d:65:0b:d2:21:f7:ba:89:40:74:
81:97:b9:8c:11:ed:9c:81:66:87:2c:dc:0c:b3:b0:
5e:0c:78:79:fe:ad:52:28:47:74:3c:53:34:9e:b3:
5e:c0:cc:88:3b:d6:55:c7:8e:64:41:2f:c4:36:f5:
5a:7a:ac:80:a6:80:6d:c6:db:a5:a5:c0:fa:76:a2:
92:fa:e7:06:07:63:ec:93:2d:fc:84:93:cb:28:7d:
b2:74:73:53:1b:84:4b:55:3e:f7:81:53:3e:0d:87:
05:02:91:ba:ef:32:68:d0:94:aa:de:d7:5c:e9:43:
40:c1:52:9e:b9:34:db:ea:05:3d:a6:bb:65:65:ba:
0b:a3:40:d8:65:f3:3d:6d:0d:6f:39:50:9f:27:ac:
9a:8d:1d:b0:b9:ca:00:05:04:d5:61:76:73:78:df:
c1:d6:b3:e7:bb:23:05:aa:d3:5f:63:ec:fd:79:eb:
98:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:88:D1:FD:1C:BA:87:95:1D:25:3C:87:5C:F1:BF:92:3D:74:E4:E6
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/7YjR_Ry6h5UdJTyHXPG_kj105OY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.10.0/23
185.105.239.0/24
185.231.115.0/24
194.147.142.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f5:b2:fb:39:63:22:eb:6c:65:52:b5:bf:2a:4e:26:b0:29:
40:34:6a:ee:7f:e4:52:96:7b:4d:bb:f1:9f:15:5d:43:9e:87:
57:75:9e:2a:07:d9:41:ae:d3:72:10:f4:33:06:31:bd:6a:47:
5f:d5:2b:4f:ff:e5:c9:f1:07:42:34:53:bb:d2:d4:d0:a8:47:
2a:6e:64:8f:35:db:cc:1a:34:8c:d9:df:5c:df:71:7b:40:35:
9c:ee:b7:21:c9:28:6f:56:55:d0:ee:bf:89:56:6a:87:5f:4d:
10:4a:9d:9a:67:23:ce:f2:7f:e1:92:6d:cf:64:30:05:3a:47:
50:f5:e5:b6:e1:ed:20:95:2d:5e:07:44:99:74:42:a6:9b:f5:
83:30:15:da:6f:e4:71:a6:54:26:67:17:28:0f:ec:76:11:f4:
73:1f:92:72:67:09:88:fd:cb:cf:4a:9b:14:52:73:8e:87:90:
56:4f:d5:82:17:3f:8d:b1:33:5d:cc:a2:d4:c4:61:a5:93:cd:
ec:31:e1:17:13:ab:37:ac:79:2d:39:ad:11:d2:1f:69:f4:d8:
22:ad:61:ba:ae:5a:11:88:87:62:c9:33:9a:69:86:30:47:58:
b1:c5:10:6b:33:da:b0:72:e5:26:22:f1:af:88:04:c1:c8:00:
00:f1:c9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 12:36:28 2023 by rpki-client on console-ams.rpki-client.org