Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c73c-327f-4da5-b14d-c77f64ab302b/1/RUc0kog7l56Z_B5KQArOVP4_Rsw.roa
File: RUc0kog7l56Z_B5KQArOVP4_Rsw.roa (raw, json)
Hash identifier: uopE+dCNqLEXdKpjtAeVF/XMwcLGDzgsM8KTe6Rf65I=
Subject key identifier: 45:47:34:92:88:3B:97:9E:99:FC:1E:4A:40:0A:CE:54:FE:3F:46:CC
Certificate issuer: /CN=671ef78adc0c4fbc70babd3d36b63ce130b90935
Certificate serial: 018CC649A1C8AEB97EBF0225FEA1535C210E
Authority key identifier: 67:1E:F7:8A:DC:0C:4F:BC:70:BA:BD:3D:36:B6:3C:E1:30:B9:09:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zx73itwMT7xwur09NrY84TC5CTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c73c-327f-4da5-b14d-c77f64ab302b/1/RUc0kog7l56Z_B5KQArOVP4_Rsw.roa
Signing time: Mon 01 Jan 2024 18:29:23 +0000
ROA not before: Mon 01 Jan 2024 18:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199608
IP address blocks: 185.9.37.0/24 maxlen: 24
185.9.36.0/24 maxlen: 24
185.9.38.0/24 maxlen: 24
185.9.39.0/24 maxlen: 24
185.244.145.0/24 maxlen: 24
185.244.144.0/24 maxlen: 24
185.244.147.0/24 maxlen: 24
185.244.146.0/24 maxlen: 24
2a03:48c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:a1:c8:ae:b9:7e:bf:02:25:fe:a1:53:5c:21:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=671ef78adc0c4fbc70babd3d36b63ce130b90935
Validity
Not Before: Jan 1 18:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45473492883b979e99fc1e4a400ace54fe3f46cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f6:d3:f6:5f:7c:55:f2:7b:9c:1d:e3:0d:49:
96:b0:39:42:d0:a7:7e:94:28:98:60:04:ca:c4:43:
e7:af:3d:f4:47:f5:35:5d:f8:7a:1b:9f:0f:70:7b:
d6:0a:1b:47:24:58:73:8b:7d:f9:0e:91:af:4a:7a:
cc:b5:02:a9:f3:d6:80:e7:69:79:c9:38:6e:d2:d1:
0b:f5:39:80:bf:65:15:9e:7b:9b:79:54:54:90:0e:
49:d4:df:8f:5a:0c:fd:d0:c9:85:5a:44:0c:57:de:
14:55:6f:b4:40:bf:df:44:c9:0c:05:f3:03:95:09:
a4:4c:a4:71:20:0b:33:1d:f5:e8:98:49:96:d0:c4:
de:b0:c5:eb:8a:9c:f5:b0:a6:29:3d:d8:db:b3:60:
23:40:d0:dd:b3:6a:9a:4c:f5:df:73:23:58:c6:57:
87:87:9e:b1:d0:5c:f6:4f:ec:c3:c4:95:ff:d3:d1:
36:1c:bc:9f:38:0e:4c:17:a4:e7:5f:2e:93:29:39:
42:4f:85:99:bf:c7:c9:49:5c:a8:62:52:d2:64:5a:
38:ff:19:48:c5:9a:02:52:76:9d:c9:de:a9:5b:30:
52:1e:c2:f2:68:c1:f4:82:fc:27:de:06:b2:c1:11:
ca:69:3f:99:a2:a1:ab:56:c5:74:c4:e2:cb:5b:1a:
06:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:47:34:92:88:3B:97:9E:99:FC:1E:4A:40:0A:CE:54:FE:3F:46:CC
X509v3 Authority Key Identifier:
keyid:67:1E:F7:8A:DC:0C:4F:BC:70:BA:BD:3D:36:B6:3C:E1:30:B9:09:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zx73itwMT7xwur09NrY84TC5CTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c73c-327f-4da5-b14d-c77f64ab302b/1/RUc0kog7l56Z_B5KQArOVP4_Rsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c73c-327f-4da5-b14d-c77f64ab302b/1/Zx73itwMT7xwur09NrY84TC5CTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.36.0/22
185.244.144.0/22
IPv6:
2a03:48c0::/32
Signature Algorithm: sha256WithRSAEncryption
7c:1b:01:ae:d6:08:61:32:4c:64:ba:ca:24:20:dc:52:1c:53:
07:a5:5a:d1:3a:f5:78:ea:0c:18:b6:e4:13:35:0a:bc:98:e6:
62:35:8d:43:ec:ef:14:85:57:96:44:34:b1:15:53:1e:fc:03:
be:2d:f8:4b:62:5e:c0:b9:cb:61:4d:06:12:6c:d8:26:e1:0d:
78:e2:3d:72:88:30:14:cb:aa:bd:9a:10:a5:8b:a1:b5:41:5f:
58:3b:33:a9:57:b6:9a:15:c2:9a:46:b0:4e:be:a1:a6:09:6f:
02:a7:b4:ae:c9:60:00:5c:a8:86:77:26:2f:72:48:b4:7e:0d:
c8:76:16:87:81:2b:01:a5:7c:ac:a2:8d:b4:41:a0:f6:64:0d:
60:db:48:41:bf:b7:4a:cd:c1:ab:ab:fb:2c:d6:9a:f0:9d:c7:
ce:a9:48:b6:63:e0:48:8c:bf:62:fe:da:26:81:0c:55:0a:37:
90:2e:8b:c5:e7:29:57:ab:83:92:e6:dd:ae:8f:e9:4d:d2:6f:
d7:2a:db:de:25:5c:29:b4:d3:b8:dd:dd:60:a6:21:3e:c9:85:
aa:4d:90:ef:74:71:66:e4:5e:62:77:4f:9b:d6:8a:d2:f0:d8:
d9:9a:4d:38:93:0b:1f:6d:9b:0e:b6:22:71:1c:9c:6a:82:cb:
65:10:48:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:20 2024 by rpki-client on console-ams.rpki-client.org