Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c73c-327f-4da5-b14d-c77f64ab302b/1/1-DXUpJBrgQ9Z8R0YglwzQt1ui84.roa
File: 1-DXUpJBrgQ9Z8R0YglwzQt1ui84.roa (raw, json)
Hash identifier: h2+cXtvQXI/jQs33Iti7J/zhplDW++bWJfbPVrFWeFI=
Subject key identifier: F8:35:D4:A4:90:6B:81:0F:59:F1:1D:18:82:5C:33:42:DD:6E:8B:CE
Certificate issuer: /CN=671ef78adc0c4fbc70babd3d36b63ce130b90935
Certificate serial: 018CC649A19CBA569AD4938A3B2C42A0E74F
Authority key identifier: 67:1E:F7:8A:DC:0C:4F:BC:70:BA:BD:3D:36:B6:3C:E1:30:B9:09:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zx73itwMT7xwur09NrY84TC5CTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c73c-327f-4da5-b14d-c77f64ab302b/1/1-DXUpJBrgQ9Z8R0YglwzQt1ui84.roa
Signing time: Mon 01 Jan 2024 18:29:23 +0000
ROA not before: Mon 01 Jan 2024 18:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 185.9.37.0/24 maxlen: 24
185.9.38.0/24 maxlen: 24
185.9.36.0/24 maxlen: 24
185.9.39.0/24 maxlen: 24
185.244.145.0/24 maxlen: 24
185.244.144.0/24 maxlen: 24
185.244.146.0/24 maxlen: 24
185.244.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:a1:9c:ba:56:9a:d4:93:8a:3b:2c:42:a0:e7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=671ef78adc0c4fbc70babd3d36b63ce130b90935
Validity
Not Before: Jan 1 18:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f835d4a4906b810f59f11d18825c3342dd6e8bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c3:51:4a:dc:a3:c2:48:2a:97:75:1e:55:d5:
8d:d8:10:68:4c:15:28:af:7d:7b:98:2e:78:53:e7:
05:ec:12:fd:49:32:4e:19:0e:39:33:1b:1d:29:2c:
27:55:b7:6c:dc:7b:f2:e6:8a:50:a7:74:a8:fa:1f:
e7:a0:d5:21:98:3a:a3:21:f1:ab:07:c5:af:3f:a2:
bc:96:e6:ba:c1:32:77:f1:b5:89:79:e6:15:db:bf:
ae:c2:a7:c3:8c:fe:f7:47:f1:09:49:a7:ce:a9:77:
3c:44:89:d3:37:83:bf:b3:92:7a:5d:bf:9c:71:e7:
7b:3c:9a:d7:60:39:ea:69:36:de:90:f2:0e:3a:1d:
4c:c4:a7:1f:dc:7a:70:7b:fc:73:c9:a3:4e:66:fc:
cd:94:1a:e3:84:25:b7:fe:5a:71:d4:73:5b:ff:c2:
29:35:8c:42:3e:a6:fe:49:cf:9b:c9:c8:59:8e:6b:
7a:01:2e:e7:2f:e7:c6:00:b4:f8:ae:37:f3:14:14:
81:2b:9e:f3:0e:6a:dd:99:c5:9d:3e:94:28:03:74:
0f:00:e6:8f:e6:85:27:61:e3:09:6f:46:71:9e:72:
29:11:5e:2d:5d:b8:ac:90:c1:18:2a:8d:0f:f0:fe:
62:f1:47:6c:5a:75:49:62:bc:29:bd:55:de:9d:db:
3a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:35:D4:A4:90:6B:81:0F:59:F1:1D:18:82:5C:33:42:DD:6E:8B:CE
X509v3 Authority Key Identifier:
keyid:67:1E:F7:8A:DC:0C:4F:BC:70:BA:BD:3D:36:B6:3C:E1:30:B9:09:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zx73itwMT7xwur09NrY84TC5CTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c73c-327f-4da5-b14d-c77f64ab302b/1/1-DXUpJBrgQ9Z8R0YglwzQt1ui84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c73c-327f-4da5-b14d-c77f64ab302b/1/Zx73itwMT7xwur09NrY84TC5CTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.36.0/22
185.244.144.0/22
Signature Algorithm: sha256WithRSAEncryption
44:16:41:84:77:b3:8e:0f:86:9e:f5:bd:00:9e:a4:82:b6:3b:
07:c5:22:48:69:a2:aa:a3:3b:97:b2:6a:4b:cf:1e:0f:cc:ee:
8c:ad:36:c3:77:f1:b5:5c:8d:4e:0d:05:1b:fe:68:d3:89:2b:
d3:43:d4:10:80:95:56:41:a3:79:e5:31:39:61:10:d7:f8:a2:
b2:50:d7:18:08:98:f0:38:0d:97:65:76:13:91:73:49:0f:82:
c4:21:70:c9:b8:7f:fc:03:97:78:c3:d9:12:48:7f:b5:b4:d6:
db:db:12:57:2f:55:3e:75:ba:4c:b2:65:bd:b5:c4:50:54:53:
7e:42:1b:1a:ba:4b:52:f4:97:0f:cd:21:c3:7d:7c:ed:6f:52:
36:d3:97:78:0a:7e:2e:c8:2f:99:de:b7:6a:01:39:3a:35:94:
01:cc:cb:88:da:ad:c9:55:ad:d3:39:15:c1:c6:bc:a8:8d:55:
76:36:35:e3:2e:64:6f:85:7c:45:b2:52:2c:3b:f3:d8:20:16:
20:c6:a2:ea:a7:9b:9c:dd:df:75:3d:5f:22:ee:30:cd:4c:05:
2e:0f:fd:e7:e9:ab:0a:d1:9b:bb:09:09:29:2c:c5:db:b1:99:
3f:22:06:7f:09:57:8f:f7:fb:1c:4f:7e:7b:1d:0f:98:7a:8e:
8f:2e:c1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:52 2024 by rpki-client on console-fra.rpki-client.org