Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/680922-ec15-4435-8b2f-b22130cccc8a/1/ftP0M_Stig0v44cPm9v7P36N3g4.roa
File: ftP0M_Stig0v44cPm9v7P36N3g4.roa (raw, json)
Hash identifier: eIH2kePRV96t4x3bTE9s8PGRjBZ6SS6yWTuOuUZ9e74=
Subject key identifier: 7E:D3:F4:33:F4:AD:8A:0D:2F:E3:87:0F:9B:DB:FB:3F:7E:8D:DE:0E
Certificate issuer: /CN=52f2b1b3a98e83c06162550f791f4bcaa313903a
Certificate serial: 01839E9C47B7981E064BC5389FB5714D6295
Authority key identifier: 52:F2:B1:B3:A9:8E:83:C0:61:62:55:0F:79:1F:4B:CA:A3:13:90:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvKxs6mOg8BhYlUPeR9LyqMTkDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/680922-ec15-4435-8b2f-b22130cccc8a/1/ftP0M_Stig0v44cPm9v7P36N3g4.roa
Signing time: Mon 03 Oct 2022 16:09:45 +0000
ROA not before: Mon 03 Oct 2022 16:09:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35608
IP address blocks: 185.207.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9e:9c:47:b7:98:1e:06:4b:c5:38:9f:b5:71:4d:62:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f2b1b3a98e83c06162550f791f4bcaa313903a
Validity
Not Before: Oct 3 16:09:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ed3f433f4ad8a0d2fe3870f9bdbfb3f7e8dde0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:61:cb:82:de:1a:6b:2d:d5:0f:6b:3a:ff:
17:62:7d:7a:fd:e5:70:ca:3d:63:2e:cd:4c:72:66:
42:27:be:31:f3:ac:b9:9d:54:d5:5a:b3:21:5f:78:
6b:90:b7:0e:e2:24:ae:1b:79:c1:fa:8b:fc:a6:49:
5b:d3:82:12:63:09:fb:a1:ba:54:c7:0f:f3:9e:7c:
3a:08:80:a0:7a:c6:84:f1:2e:0e:8c:5c:8a:dd:da:
01:90:c9:f4:fc:26:98:02:e8:0e:23:90:aa:a1:98:
50:b7:bd:98:ce:26:d9:5c:7f:85:33:d1:f9:9e:b7:
ac:38:4f:cc:da:ba:e3:12:cd:a0:ab:86:01:3e:bb:
24:ac:70:02:dd:32:c2:57:fe:2b:de:7e:03:21:cf:
31:33:99:3e:fa:ec:d6:12:92:fa:d2:c2:16:92:1f:
f7:ab:94:ca:09:b9:17:e8:26:69:db:8c:a1:3c:c7:
97:06:12:5d:4a:f1:61:cb:f2:f9:a7:43:dc:d6:70:
9d:46:56:b8:72:bc:2b:12:7f:cc:e4:9a:86:60:6e:
87:0c:b1:b3:62:96:0a:c9:ed:6d:30:47:da:10:15:
16:4d:a0:59:c9:46:e6:d2:43:45:cd:ba:31:7b:8f:
10:18:89:9e:bd:a8:ad:d4:b8:f2:b7:38:16:88:98:
4c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D3:F4:33:F4:AD:8A:0D:2F:E3:87:0F:9B:DB:FB:3F:7E:8D:DE:0E
X509v3 Authority Key Identifier:
keyid:52:F2:B1:B3:A9:8E:83:C0:61:62:55:0F:79:1F:4B:CA:A3:13:90:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvKxs6mOg8BhYlUPeR9LyqMTkDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/680922-ec15-4435-8b2f-b22130cccc8a/1/ftP0M_Stig0v44cPm9v7P36N3g4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/680922-ec15-4435-8b2f-b22130cccc8a/1/UvKxs6mOg8BhYlUPeR9LyqMTkDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.214.0/24
Signature Algorithm: sha256WithRSAEncryption
28:4b:fc:d7:c9:7b:59:6c:3f:61:b4:b2:e1:d2:76:0e:8f:7f:
e3:d4:8e:8b:b4:5e:6b:58:f4:83:53:39:e0:b3:8c:3c:bd:ce:
f8:17:ec:76:1e:03:dc:8c:e6:83:0a:a6:cc:27:99:8b:5a:ee:
53:a2:c0:dc:da:9d:13:6d:01:71:32:9a:5e:a6:8f:c6:26:5e:
47:67:89:49:c7:2b:fa:94:af:6f:5b:f5:ba:24:ed:f9:2e:70:
5a:01:e1:f4:82:81:e2:21:50:ea:0f:f3:47:c3:3e:ab:96:e2:
38:c5:93:c1:00:ec:5c:68:8e:f8:bc:c2:90:23:a1:e4:30:67:
98:06:ab:0e:d2:54:36:81:77:3e:a1:eb:40:3c:32:65:4b:6c:
46:76:8a:3d:50:5b:fe:b3:22:34:93:9f:ac:7c:28:13:94:5f:
4f:d4:53:91:24:01:e4:38:1a:b2:80:4a:0e:2f:dd:35:bf:2b:
f3:a6:ac:c6:6a:16:3f:5a:21:fe:9f:52:c9:2d:e3:43:e2:b7:
92:f3:54:c8:b3:ee:7b:fc:bb:8e:95:f2:9f:5d:d5:ff:d0:79:
e8:53:d2:2e:f4:a2:6e:55:e7:79:f1:6b:f6:13:82:65:14:7a:
34:ba:4e:9f:96:4f:08:81:4d:0a:7a:0f:14:0f:4b:49:d3:c3:
fc:f4:34:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:46 2024 by rpki-client on console-ams.rpki-client.org