Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7dee10-9313-4825-a1dd-8cb741aa8710/1/PIOFmOx4Bj1QJj8vkVutocRd9R8.roa
File: PIOFmOx4Bj1QJj8vkVutocRd9R8.roa (raw, json)
Hash identifier: Xf1KQHe07bqb954eXJxw1g5L4JoxbeUnTXok5URagbs=
Subject key identifier: 3C:83:85:98:EC:78:06:3D:50:26:3F:2F:91:5B:AD:A1:C4:5D:F5:1F
Certificate issuer: /CN=233db899154a9825d1b31dd05a5838d270aaf4f4
Certificate serial: 013036BD
Authority key identifier: 23:3D:B8:99:15:4A:98:25:D1:B3:1D:D0:5A:58:38:D2:70:AA:F4:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iz24mRVKmCXRsx3QWlg40nCq9PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7dee10-9313-4825-a1dd-8cb741aa8710/1/PIOFmOx4Bj1QJj8vkVutocRd9R8.roa
Signing time: Sat 01 Jan 2022 11:04:39 +0000
ROA not before: Sat 01 Jan 2022 11:04:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.25.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19936957 (0x13036bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233db899154a9825d1b31dd05a5838d270aaf4f4
Validity
Not Before: Jan 1 11:04:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c838598ec78063d50263f2f915bada1c45df51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a7:b4:e0:51:6f:67:1c:b2:ba:8f:9c:83:9e:
f0:70:71:15:86:d7:c1:89:f2:3f:a9:1d:da:fc:24:
6b:37:dc:d6:f9:0a:04:63:8c:bf:7c:45:c1:a2:95:
03:56:c5:46:4f:da:95:d7:06:de:9d:ec:33:6c:f9:
19:96:c6:2a:cc:6f:32:58:90:2f:cc:36:ee:24:d1:
6c:29:da:69:ee:20:1b:dd:23:4d:3a:89:9f:03:60:
66:f8:e0:db:bc:81:4f:d4:7b:66:41:05:9b:38:6d:
c6:50:58:8a:f6:1a:f1:2d:2d:0e:44:19:70:51:05:
43:86:61:bb:53:a5:10:c7:30:a0:86:ae:dc:65:1a:
e3:b9:7c:df:57:87:59:3f:79:cb:85:ee:35:9d:e9:
ed:3c:5a:10:8b:32:7f:fe:2a:c9:79:d8:6e:0f:55:
53:6d:cb:0d:1d:bc:b1:75:1d:d6:9c:9e:75:c9:69:
03:21:f7:9a:28:1f:65:c6:ac:52:9d:ae:a4:f7:66:
3a:41:b5:40:c8:74:07:65:64:df:eb:9c:44:62:5f:
be:26:1a:33:77:90:92:6a:7a:11:c6:fe:7e:c1:ff:
69:aa:30:06:3f:ba:53:73:b8:85:4d:4f:e0:25:7d:
be:23:9e:db:c3:f9:2c:57:f4:11:6c:1e:57:a8:a6:
e3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:83:85:98:EC:78:06:3D:50:26:3F:2F:91:5B:AD:A1:C4:5D:F5:1F
X509v3 Authority Key Identifier:
keyid:23:3D:B8:99:15:4A:98:25:D1:B3:1D:D0:5A:58:38:D2:70:AA:F4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz24mRVKmCXRsx3QWlg40nCq9PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7dee10-9313-4825-a1dd-8cb741aa8710/1/PIOFmOx4Bj1QJj8vkVutocRd9R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7dee10-9313-4825-a1dd-8cb741aa8710/1/Iz24mRVKmCXRsx3QWlg40nCq9PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.104.0/24
Signature Algorithm: sha256WithRSAEncryption
11:9c:1b:44:e7:0b:8b:40:c7:6c:0a:fe:6b:c6:56:42:d5:b6:
6d:50:c3:b4:4c:c5:94:59:1e:e8:d5:ff:2d:1a:a6:b9:6d:a8:
5a:6f:a8:75:3d:9c:0f:9e:1a:fb:3a:dc:b2:86:53:ca:b8:45:
92:bb:8f:90:29:95:b8:e0:d6:cd:d0:c1:f9:c2:c7:87:0d:2d:
e2:ff:65:f5:13:79:24:71:ef:22:8f:13:6c:e0:80:09:be:37:
5e:4d:2c:21:02:41:c2:86:43:0f:e8:47:ae:07:c1:a4:71:9f:
2c:1a:1d:a8:b5:4c:d4:7e:bc:c3:1a:fb:13:f8:56:97:c8:43:
2b:82:9b:76:ad:84:19:e1:df:66:5f:2c:d0:71:63:2f:ea:bf:
2d:69:eb:a7:4e:5f:83:66:44:6f:cb:49:09:db:41:9a:53:76:
21:8e:d2:24:d6:aa:5e:0a:c0:1d:7f:b6:7f:2d:22:01:9b:fe:
84:05:a8:63:c5:00:09:e0:45:f5:cc:5d:52:e2:6c:5d:42:d5:
62:40:be:a7:30:16:42:09:fd:50:ba:e9:be:ad:06:6f:0b:eb:
04:08:d5:78:ae:2e:96:9b:a1:d7:7c:fb:c0:bb:6a:1b:94:34:
8e:ae:ea:72:74:a1:c8:91:fb:5b:b6:a7:fa:c8:da:e0:72:78:
89:33:fc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org