Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/19715a-631f-4149-89ca-f951642d61c8/1/OydkA1-_5juaCwhO4O1sSyVWJiA.roa
File: OydkA1-_5juaCwhO4O1sSyVWJiA.roa (raw, json)
Hash identifier: h2Vs/IL8NUnYo1Nxn0dSSEHxg0/tAEN+FscGr8NK3N8=
Subject key identifier: 3B:27:64:03:5F:BF:E6:3B:9A:0B:08:4E:E0:ED:6C:4B:25:56:26:20
Certificate issuer: /CN=eeb9ba19b9eccc4aee0f81115af2439a7979f31b
Certificate serial: 018CC424715B6FC1EF6949EC387C6A720DAB
Authority key identifier: EE:B9:BA:19:B9:EC:CC:4A:EE:0F:81:11:5A:F2:43:9A:79:79:F3:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rm6GbnszEruD4ERWvJDmnl58xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/19715a-631f-4149-89ca-f951642d61c8/1/OydkA1-_5juaCwhO4O1sSyVWJiA.roa
Signing time: Mon 01 Jan 2024 08:29:31 +0000
ROA not before: Mon 01 Jan 2024 08:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57878
IP address blocks: 185.207.212.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:71:5b:6f:c1:ef:69:49:ec:38:7c:6a:72:0d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb9ba19b9eccc4aee0f81115af2439a7979f31b
Validity
Not Before: Jan 1 08:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b2764035fbfe63b9a0b084ee0ed6c4b25562620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:16:60:41:3b:ba:38:52:9c:c1:66:ac:09:54:
b9:dd:67:b4:5a:9b:ab:0e:cb:6a:e8:5e:46:3e:0d:
ab:93:3d:a5:4b:6b:b9:8c:bb:61:19:a9:fe:73:50:
67:ea:17:46:ac:3c:be:79:16:46:0a:99:0b:86:c3:
30:01:d1:e2:ac:27:3c:f7:2a:1c:b9:82:54:5a:26:
e7:8a:09:56:dd:6c:03:d7:04:b5:8b:44:36:eb:d5:
2c:da:16:7a:6e:9a:e2:2b:d7:f7:7c:db:49:e7:38:
95:0a:91:58:bd:2c:2d:b8:0d:71:d4:e9:65:b4:50:
30:96:f7:af:63:00:61:9e:26:7d:c3:1a:ff:91:3c:
31:56:71:ba:8d:7a:c3:42:10:8a:97:26:af:08:06:
b5:f2:bb:c0:4b:ae:c9:8f:e9:48:e3:2a:d0:6d:13:
10:ef:83:e8:85:74:46:ad:d3:87:0c:eb:80:95:e1:
83:4a:f7:43:9f:fc:76:63:0d:b1:66:3e:c1:18:38:
f3:72:59:81:1f:26:04:aa:a1:58:4e:b7:f0:34:2e:
5f:9c:c4:39:5d:2f:b6:b5:9b:99:4a:c6:43:c0:08:
33:e4:da:5a:65:4d:8d:cb:f0:f7:ff:57:08:27:28:
7b:9b:38:3a:49:a8:66:d2:54:a9:3d:d9:09:d5:a9:
f4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:27:64:03:5F:BF:E6:3B:9A:0B:08:4E:E0:ED:6C:4B:25:56:26:20
X509v3 Authority Key Identifier:
keyid:EE:B9:BA:19:B9:EC:CC:4A:EE:0F:81:11:5A:F2:43:9A:79:79:F3:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rm6GbnszEruD4ERWvJDmnl58xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/19715a-631f-4149-89ca-f951642d61c8/1/OydkA1-_5juaCwhO4O1sSyVWJiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/19715a-631f-4149-89ca-f951642d61c8/1/7rm6GbnszEruD4ERWvJDmnl58xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.212.0/24
Signature Algorithm: sha256WithRSAEncryption
78:5e:a0:ed:37:30:57:da:22:95:97:c0:2b:a2:a8:38:06:ea:
bb:b3:12:6d:f0:a9:0a:8b:85:c7:f3:6b:78:ad:b8:9b:da:61:
d2:b1:cb:a7:3c:a4:ae:9c:b0:db:40:8c:be:24:a2:a2:d8:1f:
5a:fb:81:a0:51:b1:74:d5:ed:1c:ba:82:28:72:a3:f7:b3:0e:
ef:3c:ed:3d:36:4c:50:3f:12:7d:f2:84:e7:75:a3:fc:ac:f5:
20:ad:3e:28:3b:64:35:11:ad:9e:42:8b:8e:cd:f0:6b:7d:59:
96:d2:55:c1:34:36:b8:32:e3:24:44:6d:72:11:33:80:d5:31:
1e:20:e8:6f:c7:14:b0:19:55:6c:06:bb:ba:65:7c:d8:00:a1:
d4:e3:ac:a7:69:13:61:e7:4d:12:45:07:55:b7:68:44:30:7d:
9c:93:e9:bd:94:33:28:ed:c1:f5:e3:5b:20:ca:ec:42:6e:27:
a6:cb:15:cd:2a:e4:f1:ba:51:b8:9e:d2:b4:e9:c9:41:bc:da:
60:db:79:5b:05:81:c3:34:b9:ae:9d:99:62:22:dd:a1:56:75:
56:07:ed:a6:5c:c4:7c:27:a9:7e:e1:86:46:2c:40:9d:14:51:
f4:cb:4c:ae:e5:3f:1f:88:ab:0a:f2:4a:6b:c2:48:a7:d9:c0:
e4:d5:81:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 13:29:03 2024 by rpki-client on console-fra.rpki-client.org