Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/680922-ec15-4435-8b2f-b22130cccc8a/1/fW-sRQxkfhJQCPoMSEWMRhcUllg.roa
File: fW-sRQxkfhJQCPoMSEWMRhcUllg.roa (raw, json)
Hash identifier: +NSfkedtyC5tGC7Y+PnMvSP20uaFTiTZFghPKhyKwRk=
Subject key identifier: 7D:6F:AC:45:0C:64:7E:12:50:08:FA:0C:48:45:8C:46:17:14:96:58
Certificate issuer: /CN=52f2b1b3a98e83c06162550f791f4bcaa313903a
Certificate serial: 018CC2DB5FBA80A388ECEEFD400C1699F919
Authority key identifier: 52:F2:B1:B3:A9:8E:83:C0:61:62:55:0F:79:1F:4B:CA:A3:13:90:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvKxs6mOg8BhYlUPeR9LyqMTkDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/680922-ec15-4435-8b2f-b22130cccc8a/1/fW-sRQxkfhJQCPoMSEWMRhcUllg.roa
Signing time: Mon 01 Jan 2024 02:30:05 +0000
ROA not before: Mon 01 Jan 2024 02:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43278
IP address blocks: 185.207.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:5f:ba:80:a3:88:ec:ee:fd:40:0c:16:99:f9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f2b1b3a98e83c06162550f791f4bcaa313903a
Validity
Not Before: Jan 1 02:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d6fac450c647e125008fa0c48458c4617149658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0d:ed:f7:72:27:87:f7:c2:c0:8a:87:f1:3b:
40:a3:8b:30:1b:53:5a:35:12:61:a9:0b:5e:8b:e5:
f8:8d:cb:0d:8e:ac:89:7b:04:1c:32:3b:ae:00:fb:
d1:ff:d1:07:8b:c4:7f:cd:ad:3c:22:7f:8c:d0:1a:
7c:91:61:42:f2:50:0f:96:1a:7e:ff:61:bd:b5:ad:
ca:6c:91:0c:f4:ac:10:ff:58:29:e7:a4:4e:d7:f2:
f0:77:be:53:56:0c:46:6e:a1:52:90:73:c5:45:59:
a5:81:23:95:19:41:51:ca:cc:9c:7b:54:43:f8:28:
3c:9b:f5:98:c4:8a:75:5b:ce:cc:07:9b:d4:51:76:
ca:2a:f8:af:93:f5:ef:68:3f:5b:ca:90:3a:94:20:
6b:ba:89:4e:47:09:e6:a3:f0:c5:e7:3e:13:df:fe:
d7:56:bb:08:c9:e2:47:3e:2f:be:10:14:ed:3c:7c:
43:bc:02:e4:c9:e1:8b:6a:fa:95:b7:db:fc:2c:50:
7a:91:05:92:1d:2f:1a:9c:77:8e:0d:44:94:ed:06:
c3:91:68:79:4a:b1:ef:69:6a:88:aa:43:4e:6f:4e:
a4:94:ee:da:d8:8d:ce:fa:05:9f:38:9a:f7:26:3e:
f2:74:f5:0a:37:2d:ed:01:8e:ec:01:38:90:73:80:
82:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6F:AC:45:0C:64:7E:12:50:08:FA:0C:48:45:8C:46:17:14:96:58
X509v3 Authority Key Identifier:
keyid:52:F2:B1:B3:A9:8E:83:C0:61:62:55:0F:79:1F:4B:CA:A3:13:90:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvKxs6mOg8BhYlUPeR9LyqMTkDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/680922-ec15-4435-8b2f-b22130cccc8a/1/fW-sRQxkfhJQCPoMSEWMRhcUllg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/680922-ec15-4435-8b2f-b22130cccc8a/1/UvKxs6mOg8BhYlUPeR9LyqMTkDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.214.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:db:a0:d7:2b:e9:30:3a:5c:68:0f:53:46:93:16:af:4a:d0:
56:86:63:52:93:94:73:03:06:d8:cc:a4:fd:47:bb:d3:76:57:
da:12:14:f6:22:e3:f2:45:64:4a:6f:34:3c:b3:c6:84:d8:af:
37:39:c8:17:a3:d4:c1:5a:ae:92:4f:cc:f0:76:9e:f9:6e:48:
94:65:f6:21:0a:4e:2d:eb:5e:f1:a2:8d:fc:de:73:61:b1:0c:
ac:8a:a3:f0:06:42:d8:7d:57:ca:99:d0:8f:1a:68:ad:ef:c7:
a9:11:3b:10:b6:41:ce:96:ba:d1:7d:05:f8:df:8d:5a:c5:75:
2a:81:e2:5a:af:55:22:dd:b1:83:f8:ce:4e:f6:a6:a5:a2:e4:
70:d6:87:25:32:ee:f7:0c:f1:80:a7:40:48:4d:fc:8d:66:3f:
89:5a:1b:21:c9:42:e4:31:64:80:9e:ec:03:78:47:e0:f0:b9:
f1:20:a5:28:62:2c:54:06:2c:c9:15:04:af:56:e2:bd:0e:35:
1a:46:e9:28:46:d5:19:48:5d:e1:04:ad:71:86:37:1d:1d:28:
22:2a:63:e1:e4:f0:f8:73:9b:a3:f2:a7:aa:38:21:16:af:93:
72:e1:f5:f7:a4:16:25:48:3d:3f:0e:71:ef:55:0d:ed:91:3e:
c3:c0:d8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:21 2024 by rpki-client on console-fra.rpki-client.org