Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/efeccb-d35c-49a2-811a-c0b38212a65b/1/S7eqvQ9W1U1W5pqkMYas1z1y550.roa
File: S7eqvQ9W1U1W5pqkMYas1z1y550.roa (raw, json)
Hash identifier: 7Fhf3dhXU0CkfyiL0y+Cl1peIrT5kYPt3VQfw0uQGqk=
Subject key identifier: 4B:B7:AA:BD:0F:56:D5:4D:56:E6:9A:A4:31:86:AC:D7:3D:72:E7:9D
Certificate issuer: /CN=7dd653d9d32c295da5b736a4aabe304e9fe1394f
Certificate serial: 1CA9AB
Authority key identifier: 7D:D6:53:D9:D3:2C:29:5D:A5:B7:36:A4:AA:BE:30:4E:9F:E1:39:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdZT2dMsKV2ltzakqr4wTp_hOU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/efeccb-d35c-49a2-811a-c0b38212a65b/1/S7eqvQ9W1U1W5pqkMYas1z1y550.roa
Signing time: Sat 01 Jan 2022 01:53:20 +0000
ROA not before: Sat 01 Jan 2022 01:53:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200407
IP address blocks: 185.249.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1878443 (0x1ca9ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dd653d9d32c295da5b736a4aabe304e9fe1394f
Validity
Not Before: Jan 1 01:53:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bb7aabd0f56d54d56e69aa43186acd73d72e79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:25:1b:43:11:54:dd:65:c3:66:43:65:e0:
f4:a9:35:b4:dd:ec:fa:49:30:2e:fd:86:76:e8:9a:
8f:2e:57:40:b2:d7:13:ed:58:dd:f8:f2:cc:5d:fa:
fc:f7:b4:9b:3a:c4:cf:64:d3:13:70:a5:a2:f6:e3:
cc:42:0d:f1:88:68:be:f5:04:a8:22:15:23:47:fd:
a0:bc:08:f3:f5:e6:52:f0:db:96:1d:89:2e:c8:44:
e7:7a:56:9b:98:c8:fc:a2:43:0e:03:84:d7:07:9e:
08:d8:87:6c:74:ed:e5:18:00:0e:be:d6:bb:49:1a:
51:84:3f:c5:0d:04:88:21:7b:5f:cd:d3:88:5a:28:
84:50:5c:fa:5b:1b:8c:f6:80:fc:01:81:93:91:82:
c8:81:9a:90:bc:06:4a:bc:12:a6:6d:8c:37:5e:a8:
80:da:07:e1:18:11:ee:58:88:53:bf:a6:0b:23:b0:
a9:e8:3f:93:dd:d3:36:59:05:85:de:64:95:c1:56:
65:31:8e:ca:d0:47:ea:0c:af:fb:cf:e9:f1:aa:aa:
7d:4f:06:bc:b5:4b:e4:e9:3c:d3:59:40:2e:e4:03:
69:ab:93:0d:da:dd:f5:6f:ed:69:70:c5:b9:a8:89:
92:e7:46:7e:95:6c:a4:42:bb:ef:8f:ed:ec:98:ad:
90:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B7:AA:BD:0F:56:D5:4D:56:E6:9A:A4:31:86:AC:D7:3D:72:E7:9D
X509v3 Authority Key Identifier:
keyid:7D:D6:53:D9:D3:2C:29:5D:A5:B7:36:A4:AA:BE:30:4E:9F:E1:39:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdZT2dMsKV2ltzakqr4wTp_hOU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efeccb-d35c-49a2-811a-c0b38212a65b/1/S7eqvQ9W1U1W5pqkMYas1z1y550.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efeccb-d35c-49a2-811a-c0b38212a65b/1/fdZT2dMsKV2ltzakqr4wTp_hOU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.208.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:87:8c:89:c6:49:16:dd:3f:41:2d:c6:69:63:a2:97:d7:8e:
37:44:c2:af:f9:ff:13:af:ca:c0:ea:c7:72:e1:fe:0f:c2:ef:
b7:90:93:7b:6d:b0:51:54:f5:c5:26:f9:86:59:a1:24:07:21:
7d:0c:84:29:9e:02:88:85:2f:a9:5c:55:ea:f3:4e:5b:41:cd:
4b:eb:d2:42:be:49:3d:33:3b:1a:cb:05:91:c8:b8:ea:ab:f4:
87:d7:77:5f:bd:c0:dd:5c:15:9d:75:fd:9a:91:09:29:fb:d4:
11:84:1b:84:4d:5e:0e:da:62:ee:ea:06:9d:f3:cf:b3:f1:ee:
79:12:75:fe:30:01:01:a9:bc:cc:4a:57:61:03:ca:d6:c3:22:
d9:26:68:1b:19:9e:db:0e:96:f7:d0:1a:b3:09:6e:7d:f6:62:
61:ae:18:21:e6:fc:52:84:5b:e7:cd:25:cb:23:37:96:ba:fa:
63:6c:ec:25:f3:d4:47:b9:72:7b:13:ce:42:33:40:df:eb:11:
dd:df:55:a6:6e:aa:23:0e:ae:83:7a:a8:b6:2c:b1:82:92:55:
f3:60:83:31:43:36:70:bc:ce:15:4d:89:54:09:4e:70:8e:f8:
b8:96:0b:3d:9e:3a:a2:df:74:4e:40:97:6b:7e:a0:a3:7c:cb:
61:b8:40:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:12 2024 by rpki-client on console-fra.rpki-client.org