Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/07ade3-be80-4a87-9617-a16aebb8c9ef/1/p8qS_oodmksqVdd_ZwecyVfKjpA.roa
File: p8qS_oodmksqVdd_ZwecyVfKjpA.roa (raw, json)
Hash identifier: TXKeBdWiOxBf8NWGaXcUPZ5K4/QyvWiKOTcGQtcqmt4=
Subject key identifier: A7:CA:92:FE:8A:1D:9A:4B:2A:55:D7:7F:67:07:9C:C9:57:CA:8E:90
Certificate issuer: /CN=cac8e29f35583b5b2a9673dd76a25903b35ec593
Certificate serial: 01905901A85CAD0AD4C2C6D61EE12FFD7662
Authority key identifier: CA:C8:E2:9F:35:58:3B:5B:2A:96:73:DD:76:A2:59:03:B3:5E:C5:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysjinzVYO1sqlnPddqJZA7NexZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/07ade3-be80-4a87-9617-a16aebb8c9ef/1/p8qS_oodmksqVdd_ZwecyVfKjpA.roa
Signing time: Thu 27 Jun 2024 09:23:19 +0000
ROA not before: Thu 27 Jun 2024 09:23:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203623
IP address blocks: 185.127.108.0/22 maxlen: 22
185.127.108.0/24 maxlen: 24
185.127.109.0/24 maxlen: 24
185.127.110.0/24 maxlen: 24
185.127.111.0/24 maxlen: 24
2a06:c8c0::/30 maxlen: 30
2a06:c8c4::/30 maxlen: 30
2a06:c8c4:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:59:01:a8:5c:ad:0a:d4:c2:c6:d6:1e:e1:2f:fd:76:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac8e29f35583b5b2a9673dd76a25903b35ec593
Validity
Not Before: Jun 27 09:23:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7ca92fe8a1d9a4b2a55d77f67079cc957ca8e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:7b:e7:60:0b:c8:21:5e:39:48:41:74:33:
f5:2f:62:ed:4a:0a:bf:aa:58:64:e0:a6:a8:5f:c4:
05:7a:15:38:43:e7:d7:d0:76:f3:e4:df:bd:9f:ac:
11:a9:33:ce:f0:6a:63:2d:a0:fe:4c:3a:11:c6:7a:
c6:f3:8e:90:bc:2c:2b:2a:d3:fb:05:90:8f:73:f5:
8e:99:54:95:2b:0b:73:38:ff:2b:9d:cf:9b:0d:f6:
5c:dd:fb:01:46:99:35:66:12:80:97:0f:cd:8f:df:
e2:ec:51:e2:b0:91:8c:ec:28:e8:00:90:99:bc:fb:
83:b5:88:97:38:d8:08:6d:95:04:80:3b:22:79:1c:
1a:d8:aa:aa:49:3e:d7:9d:33:88:2f:b8:ff:f3:a3:
47:52:8a:9d:2d:11:4b:72:99:da:eb:4f:8b:0c:9e:
e7:ec:6a:52:98:d7:ef:ab:6f:87:83:37:b8:17:2f:
09:08:00:6d:ae:7a:d4:b3:4c:40:13:06:b3:01:ac:
62:68:50:4a:07:c0:d5:67:15:76:a4:33:8d:2e:02:
93:8f:25:71:6e:d6:89:d9:a1:49:63:59:1a:4c:65:
0c:0e:93:00:96:28:86:d6:0f:be:53:8b:e0:f9:86:
73:23:73:57:73:04:20:05:c6:f0:42:3b:11:41:2c:
c1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CA:92:FE:8A:1D:9A:4B:2A:55:D7:7F:67:07:9C:C9:57:CA:8E:90
X509v3 Authority Key Identifier:
keyid:CA:C8:E2:9F:35:58:3B:5B:2A:96:73:DD:76:A2:59:03:B3:5E:C5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysjinzVYO1sqlnPddqJZA7NexZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/07ade3-be80-4a87-9617-a16aebb8c9ef/1/p8qS_oodmksqVdd_ZwecyVfKjpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/07ade3-be80-4a87-9617-a16aebb8c9ef/1/ysjinzVYO1sqlnPddqJZA7NexZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.108.0/22
IPv6:
2a06:c8c0::/29
Signature Algorithm: sha256WithRSAEncryption
71:84:6a:73:7f:ac:75:40:e6:3a:b8:b4:37:24:a5:b8:44:b3:
45:a3:8f:03:53:5f:49:70:07:1a:b9:24:af:27:6f:a5:66:92:
d7:f6:08:6a:45:03:05:d9:ca:1c:06:13:3a:ef:57:80:ec:23:
3b:ca:7c:42:c2:89:05:fd:b4:e6:bd:12:9b:3c:c4:d6:e3:ba:
d7:a8:b1:ca:87:82:e7:9d:b4:96:77:39:0d:ef:b5:68:eb:82:
8a:d8:a9:27:a6:f6:10:08:18:5c:19:7c:be:4f:c8:10:29:9a:
de:25:e1:1f:1d:14:95:e3:88:c4:8b:40:a1:11:77:c8:70:0b:
16:f8:e9:59:bc:3c:ac:24:38:f4:b7:2a:e0:b0:30:f2:51:f7:
9e:f2:f1:cf:cf:c2:73:e8:78:94:4f:ad:a5:82:e6:53:d8:80:
c1:2d:0c:38:e4:ad:63:d3:ec:d6:00:68:15:e5:a2:53:da:da:
43:c6:9c:b9:bf:3c:c7:1e:96:f3:7b:5d:15:05:ef:55:c0:f8:
85:04:a7:e9:ed:10:12:37:0a:49:68:c8:62:7b:9f:23:ff:fb:
10:ba:e7:75:70:74:aa:3d:95:09:cf:55:88:2e:b4:76:62:1c:
8a:0a:9e:73:a2:81:c3:3f:62:fe:29:d8:4d:02:41:b4:8b:11:
de:94:70:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 13:32:11 2024 by rpki-client on console-ams.rpki-client.org