Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9f7ac0-81c0-43ab-8b80-bde3101cbdae/1/PR1P_v-w7luKSX4QW6m-8O29h6g.roa
File: PR1P_v-w7luKSX4QW6m-8O29h6g.roa (raw, json)
Hash identifier: 5tmROfMOl6Nnf5UzSst7qGQKrzZBBJAwRwKcYPHlPdg=
Subject key identifier: 3D:1D:4F:FE:FF:B0:EE:5B:8A:49:7E:10:5B:A9:BE:F0:ED:BD:87:A8
Certificate issuer: /CN=cd1ce5d72daccabcf7974b272ec27aefc51ab620
Certificate serial: 018964C06235CA7D2E303038E554B90B0D33
Authority key identifier: CD:1C:E5:D7:2D:AC:CA:BC:F7:97:4B:27:2E:C2:7A:EF:C5:1A:B6:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRzl1y2syrz3l0snLsJ678UatiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9f7ac0-81c0-43ab-8b80-bde3101cbdae/1/PR1P_v-w7luKSX4QW6m-8O29h6g.roa
Signing time: Mon 17 Jul 2023 16:47:56 +0000
ROA not before: Mon 17 Jul 2023 16:47:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 185.214.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:62:35:ca:7d:2e:30:30:38:e5:54:b9:0b:0d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1ce5d72daccabcf7974b272ec27aefc51ab620
Validity
Not Before: Jul 17 16:47:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d1d4ffeffb0ee5b8a497e105ba9bef0edbd87a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:71:ae:eb:f0:ef:54:26:b7:b6:85:bf:1a:
11:56:5b:f5:1a:ee:b4:01:0c:04:86:31:9e:bc:d9:
b3:f4:cc:68:bb:8f:27:8a:9f:1a:6d:03:4d:db:eb:
91:ea:20:fa:ea:fb:19:b2:85:9a:51:3d:5d:c4:ce:
f6:dd:ad:50:0f:b7:56:30:d4:6d:ce:24:d8:e4:55:
58:ba:ef:a4:d1:a0:5b:ec:ee:d1:bd:2f:b0:75:a7:
f0:89:06:54:31:40:11:f9:9e:b1:42:bb:00:15:a0:
2a:ce:25:9b:53:3d:d3:8d:37:36:5c:fe:61:13:e8:
5a:19:b2:11:36:19:0a:f2:6b:42:0d:d7:5d:7f:37:
a2:14:6b:f5:f5:a3:05:dc:13:d4:45:3a:31:10:33:
f6:8d:8e:de:87:96:8e:a3:dc:03:15:2c:89:84:c3:
f3:4b:e7:3b:63:65:70:ef:39:7f:89:75:0b:2c:60:
e9:bd:64:6a:78:5d:5e:35:cf:f0:41:2e:10:69:11:
71:e4:90:d8:3f:c4:c7:b2:41:d3:99:6b:ce:cb:11:
71:b7:6e:10:f6:93:9c:d7:cf:54:55:64:8a:3a:8a:
9a:80:3b:f1:6c:94:63:2f:c1:0a:70:96:f2:51:5a:
bd:f4:25:10:6e:ae:54:f0:82:70:7a:12:f4:26:c8:
35:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1D:4F:FE:FF:B0:EE:5B:8A:49:7E:10:5B:A9:BE:F0:ED:BD:87:A8
X509v3 Authority Key Identifier:
keyid:CD:1C:E5:D7:2D:AC:CA:BC:F7:97:4B:27:2E:C2:7A:EF:C5:1A:B6:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRzl1y2syrz3l0snLsJ678UatiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9f7ac0-81c0-43ab-8b80-bde3101cbdae/1/PR1P_v-w7luKSX4QW6m-8O29h6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9f7ac0-81c0-43ab-8b80-bde3101cbdae/1/zRzl1y2syrz3l0snLsJ678UatiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.165.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e0:7c:94:be:97:bc:f0:88:f4:d8:bf:f7:58:5a:cb:ef:f4:
2b:21:55:44:d4:e3:71:ee:fd:82:6e:ff:f5:6e:0a:22:25:f8:
62:a6:a0:ad:bb:8c:3f:3e:d8:0b:24:3d:2e:40:a3:07:e9:3e:
55:bf:ab:77:c1:76:cd:65:cf:ed:8d:13:89:15:f9:b9:04:0c:
bf:6d:0b:8a:43:60:6f:8c:65:02:e9:e7:ba:fa:3e:66:41:6e:
9d:ba:d3:68:f5:ca:84:b2:99:95:46:9f:36:d6:93:83:e6:00:
76:3f:63:ff:33:8c:bb:de:25:31:d2:90:a0:bf:9b:1d:4d:1e:
1d:c7:3b:af:23:cf:3d:5c:4d:33:1e:4b:62:dc:b9:c9:d5:10:
a6:28:9c:9c:02:9c:fe:b2:15:f0:68:a2:0a:79:ea:37:d7:be:
4e:6b:bb:be:8c:94:19:b0:58:ac:6a:e8:ba:f3:eb:a9:e7:b7:
ce:d1:f9:0c:92:67:b4:86:68:58:1e:09:ab:9c:6f:60:1b:66:
49:c6:8f:b3:bb:84:c7:a2:1f:33:cd:85:36:54:ba:bd:08:ad:
7b:12:9b:0b:00:e3:d5:95:c1:1c:ee:e0:57:9e:4d:57:46:6b:
03:8b:80:a5:8a:04:6c:90:f9:04:95:94:81:53:6d:36:09:5b:
37:02:2b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:57 2025 by rpki-client