Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b56b5f-3229-4b32-9c03-e38079bba49a/1/iyJ1pecBJcGt7LMUcmAkQSJtgVk.roa
File: iyJ1pecBJcGt7LMUcmAkQSJtgVk.roa (raw, json)
Hash identifier: ZNGbDHZAtTBU5U8ejej4HZ2Um6VybLAJPu7QtNKS+1w=
Subject key identifier: 8B:22:75:A5:E7:01:25:C1:AD:EC:B3:14:72:60:24:41:22:6D:81:59
Certificate issuer: /CN=c73bde1f8adb2317cdbf4c0c18ccfbda310906fa
Certificate serial: 018572B3F2B1613961AFF04E93760D1789AA
Authority key identifier: C7:3B:DE:1F:8A:DB:23:17:CD:BF:4C:0C:18:CC:FB:DA:31:09:06:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzveH4rbIxfNv0wMGMz72jEJBvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b56b5f-3229-4b32-9c03-e38079bba49a/1/iyJ1pecBJcGt7LMUcmAkQSJtgVk.roa
Signing time: Mon 02 Jan 2023 13:37:53 +0000
ROA not before: Mon 02 Jan 2023 13:37:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206097
IP address blocks: 185.44.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b3:f2:b1:61:39:61:af:f0:4e:93:76:0d:17:89:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c73bde1f8adb2317cdbf4c0c18ccfbda310906fa
Validity
Not Before: Jan 2 13:37:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b2275a5e70125c1adecb31472602441226d8159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:12:36:a2:ae:e5:67:82:cb:c7:4a:aa:e7:00:
9b:68:08:6c:e9:3e:01:74:80:f9:3c:d2:43:d2:6e:
a5:67:f5:b9:97:a2:71:f7:27:24:a2:23:1e:50:08:
0d:94:be:d8:5c:78:78:27:aa:eb:64:26:d3:0f:8c:
5d:2b:15:65:fc:b2:7d:f2:02:4b:ca:38:c8:6d:70:
19:04:51:b9:96:1b:81:79:cb:fb:d4:5c:f7:9f:49:
8e:7d:d2:d8:2e:71:bf:fd:07:72:df:b0:0b:49:d9:
eb:eb:08:17:c3:b6:78:75:b1:1b:d8:c3:33:0e:f1:
cb:fc:cd:24:b9:ab:f9:c5:37:bb:43:19:13:c8:f7:
c5:0d:63:65:d7:a6:88:28:5e:32:2e:96:22:2c:e6:
cb:ea:0c:78:99:53:65:1e:95:92:4e:1e:3a:e0:c3:
b7:7e:4e:f4:3e:e7:d3:52:9d:bb:d2:12:0c:2f:b0:
3f:26:ea:50:f4:c7:69:b6:ca:df:ca:f2:8d:74:97:
b2:ec:92:d9:4e:c7:90:ad:5b:cc:7b:5b:78:02:49:
2e:25:52:9c:d2:40:de:35:e2:b5:48:54:f4:c4:3f:
b7:6f:bf:a3:2f:6d:b0:28:94:26:71:02:d5:ce:39:
96:b8:35:26:24:e0:cc:64:b1:99:a0:04:72:93:5f:
b4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:22:75:A5:E7:01:25:C1:AD:EC:B3:14:72:60:24:41:22:6D:81:59
X509v3 Authority Key Identifier:
keyid:C7:3B:DE:1F:8A:DB:23:17:CD:BF:4C:0C:18:CC:FB:DA:31:09:06:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzveH4rbIxfNv0wMGMz72jEJBvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b56b5f-3229-4b32-9c03-e38079bba49a/1/iyJ1pecBJcGt7LMUcmAkQSJtgVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b56b5f-3229-4b32-9c03-e38079bba49a/1/xzveH4rbIxfNv0wMGMz72jEJBvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.207.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:f1:77:63:81:66:64:75:1c:38:31:1d:37:c2:4d:f0:b5:26:
6e:05:2a:b1:95:3d:1c:34:88:6a:77:21:bb:f7:0a:e3:c9:ff:
51:0c:82:2a:3d:81:9e:88:5d:48:db:a5:31:d9:96:23:0e:63:
34:ee:05:11:07:92:13:c3:b1:87:24:84:9b:ab:b0:a4:9a:67:
db:2c:9c:6b:0a:f2:cd:aa:bb:d4:57:09:ce:e5:d7:c9:f6:54:
1b:5b:66:d1:65:79:f0:06:27:43:4c:ea:cb:9d:b7:2e:8e:bd:
c6:c6:f6:75:7d:7d:26:e6:3e:9b:9b:78:b1:1a:d8:b1:1a:0f:
9d:0b:6b:b7:9b:11:87:21:3d:bd:12:35:90:c3:c3:da:57:9a:
ec:98:56:ec:c3:fa:7c:d4:03:f4:ce:60:85:ae:01:cc:0a:53:
a5:93:92:f4:53:f1:e9:ea:7f:0c:59:06:63:63:c3:16:01:71:
06:70:90:7c:38:df:b0:d1:c6:80:ef:d3:7a:06:a9:70:b8:a3:
8c:1f:e5:a3:38:00:f0:e9:a2:bd:45:28:c2:00:75:da:51:32:
44:61:19:3b:4b:d4:cf:21:54:e7:5b:a0:89:03:0c:9e:0b:2a:
11:2b:6e:c4:6a:6f:03:29:d4:ab:dc:7a:7d:54:ab:9a:0e:b1:
78:1e:78:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:04 2024 by rpki-client on console-fra.rpki-client.org