Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/I7VXtJaWTilExsK86MQzkGBTcrc.roa
File: I7VXtJaWTilExsK86MQzkGBTcrc.roa (raw, json)
Hash identifier: +ip6wlaGASnDJRxWtNNs/YG/TaTITNi0IQNBKoIoMW0=
Subject key identifier: 23:B5:57:B4:96:96:4E:29:44:C6:C2:BC:E8:C4:33:90:60:53:72:B7
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 0183F4D03DF82658CF815A9C761587BFF911
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/I7VXtJaWTilExsK86MQzkGBTcrc.roa
Signing time: Thu 20 Oct 2022 09:53:51 +0000
ROA not before: Thu 20 Oct 2022 09:53:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212335
IP address blocks: 185.244.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f4:d0:3d:f8:26:58:cf:81:5a:9c:76:15:87:bf:f9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Oct 20 09:53:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23b557b496964e2944c6c2bce8c43390605372b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9a:b6:bd:eb:cd:5f:5e:b5:70:64:f0:65:7d:
61:48:e7:67:f8:96:44:be:95:e3:d9:9c:8b:c3:ba:
dc:85:ce:b5:fe:49:7c:dd:65:97:4c:8d:ab:e8:b9:
7c:a3:03:e5:51:8e:37:94:36:30:0f:21:3a:c1:23:
ef:5f:42:ee:34:78:7c:1a:7f:3d:68:3a:1f:40:ad:
21:47:eb:d8:b2:0d:d8:40:8a:78:95:92:42:bc:d0:
b8:29:1d:b8:e4:77:99:6d:43:41:4d:a7:1c:8b:a3:
32:c3:f4:9f:b8:38:8d:84:a5:c9:48:5c:4d:e6:47:
54:b5:7d:ee:ab:c1:82:c5:8c:4b:8c:be:77:6d:9f:
64:fb:dc:a1:79:f6:48:97:4a:49:5d:bc:3c:b7:24:
80:de:b2:27:be:7f:51:74:ee:90:24:55:11:38:81:
21:6c:81:65:31:74:dc:b2:2e:8c:cc:b7:78:5b:b7:
90:c3:8a:fc:37:fe:34:b8:97:fd:83:8c:8c:47:78:
0e:67:fd:26:36:d7:47:cb:1a:60:2e:75:34:6d:6c:
f0:84:31:2d:df:1c:dc:f7:f3:f0:bb:0c:53:17:27:
7c:60:61:cd:a0:bb:73:7d:83:fa:5e:d5:d8:3c:ea:
10:97:b6:5d:af:b1:46:80:c1:46:c3:be:84:eb:a4:
a2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B5:57:B4:96:96:4E:29:44:C6:C2:BC:E8:C4:33:90:60:53:72:B7
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/I7VXtJaWTilExsK86MQzkGBTcrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.107.0/24
Signature Algorithm: sha256WithRSAEncryption
06:2c:62:1f:27:7d:9a:72:86:35:15:46:2c:13:af:7c:8d:37:
56:d7:d2:9c:4b:c7:6c:61:23:53:b0:e8:6a:2b:f5:24:9a:d9:
86:e9:5a:7f:5d:f0:70:8d:53:ad:dd:f7:27:3e:73:11:06:46:
b0:dd:f9:d0:b6:4c:da:49:ce:d7:51:1e:33:eb:19:5b:43:88:
ec:e2:79:48:4b:3c:5f:27:43:a6:cf:42:b7:33:d2:48:c9:14:
77:e8:31:6c:97:e7:f6:7d:92:e4:71:d1:39:3d:19:3c:a0:5c:
b5:e3:3b:ff:00:c7:f9:e4:91:0f:8b:ef:0b:89:35:95:f3:3f:
9e:41:8e:2c:2e:fa:ba:27:e1:e5:05:44:85:93:15:4d:05:48:
ba:66:bc:1a:26:3c:f3:11:8c:8e:ac:4a:ef:25:5c:d4:3e:c3:
06:ea:75:3c:5b:d9:4a:b0:68:3d:a9:46:9c:e7:d0:f1:30:c2:
be:56:41:5c:d9:cd:fe:9a:7d:86:2a:1e:6d:49:7c:73:53:52:
59:f5:b2:2a:40:a4:15:0f:af:0c:fd:03:8d:e8:f2:ce:1d:a2:
e0:9c:7a:3b:d9:84:0c:28:77:ca:d3:d7:c5:28:e3:56:75:88:
16:a1:d0:e3:a6:e0:0c:38:8d:82:dc:44:57:f5:ae:90:1e:c2:
7c:b5:7f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:47 2024 by rpki-client on console-ams.rpki-client.org