Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9ef8a0-2618-4699-b952-a400f76a6084/1/4k3PPsxY6Jpo1WizMOWkZI61Gbk.roa
File: 4k3PPsxY6Jpo1WizMOWkZI61Gbk.roa (raw, json)
Hash identifier: nnezV5mervC7nFu6ptAs4OGi8Ntyy/sONSo2rEGWZJI=
Subject key identifier: E2:4D:CF:3E:CC:58:E8:9A:68:D5:68:B3:30:E5:A4:64:8E:B5:19:B9
Certificate issuer: /CN=3fefca05a3212ead586e09722375dbd8ded968a4
Certificate serial: 020F27AC
Authority key identifier: 3F:EF:CA:05:A3:21:2E:AD:58:6E:09:72:23:75:DB:D8:DE:D9:68:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-_KBaMhLq1YbglyI3Xb2N7ZaKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9ef8a0-2618-4699-b952-a400f76a6084/1/4k3PPsxY6Jpo1WizMOWkZI61Gbk.roa
Signing time: Sat 01 Jan 2022 00:56:01 +0000
ROA not before: Sat 01 Jan 2022 00:56:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43969
IP address blocks: 185.223.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34547628 (0x20f27ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fefca05a3212ead586e09722375dbd8ded968a4
Validity
Not Before: Jan 1 00:56:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e24dcf3ecc58e89a68d568b330e5a4648eb519b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f1:16:73:ec:36:2e:4d:29:0d:9d:1f:ca:f1:
2f:17:0b:fe:60:53:1d:21:d6:88:ec:f8:50:fd:06:
60:bf:37:51:f3:c0:82:e5:b9:11:72:61:d1:0a:03:
16:aa:aa:aa:9f:e8:e5:3d:1f:fa:c9:e1:fd:55:e4:
a7:b4:db:89:55:0f:17:df:5b:f0:84:8e:d0:53:50:
2b:af:5c:14:7d:29:2e:e8:01:b0:8b:ff:aa:a9:59:
c6:86:b3:96:8b:27:73:86:d7:47:1c:7a:31:0b:cc:
3c:e6:f6:28:4b:9c:42:2c:ca:a1:42:17:2c:32:8b:
d2:d2:67:27:b0:bd:6f:d6:e4:1b:d9:cc:e1:eb:64:
11:bd:15:dc:e6:4d:06:7e:76:07:14:f5:d3:02:10:
d4:79:7e:5b:66:5d:64:b0:ba:a1:b3:51:bb:a9:66:
c2:71:1f:f5:85:81:fd:7a:d2:0b:94:2e:5f:2a:c0:
06:dc:57:39:a4:3d:db:c0:7f:42:c9:4f:eb:cf:5d:
64:33:30:2e:6d:1c:ba:cf:27:2c:8c:48:27:c6:5e:
09:a7:ae:07:8e:89:64:2b:49:6a:e0:d6:78:24:0a:
6b:3b:8d:80:f8:ce:e6:9f:60:32:07:14:95:8c:90:
81:d1:c6:e8:57:5b:ff:05:12:c7:f3:1e:e3:1d:0c:
21:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4D:CF:3E:CC:58:E8:9A:68:D5:68:B3:30:E5:A4:64:8E:B5:19:B9
X509v3 Authority Key Identifier:
keyid:3F:EF:CA:05:A3:21:2E:AD:58:6E:09:72:23:75:DB:D8:DE:D9:68:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-_KBaMhLq1YbglyI3Xb2N7ZaKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ef8a0-2618-4699-b952-a400f76a6084/1/4k3PPsxY6Jpo1WizMOWkZI61Gbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ef8a0-2618-4699-b952-a400f76a6084/1/P-_KBaMhLq1YbglyI3Xb2N7ZaKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.207.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:a1:7c:ac:4a:d4:cc:84:24:e5:49:b0:e3:de:12:73:68:53:
0f:47:a4:51:b1:3f:86:32:33:4b:ee:e7:e0:ac:08:b8:97:02:
87:1f:d0:09:64:d8:b0:32:54:2a:84:61:24:49:cd:11:a6:a5:
c7:98:fe:9a:c7:c1:44:f6:34:af:5c:7a:92:c1:f0:dd:d5:96:
f3:cf:f1:b2:78:5f:55:97:5d:63:3e:e5:05:08:66:8d:60:65:
5d:7c:85:14:e1:4a:d1:e2:a9:b3:17:e6:fd:c7:cf:f9:d2:59:
7e:54:a9:96:7c:3f:22:85:77:11:c7:8a:a2:9d:95:45:62:8b:
fb:13:85:a6:5b:da:4f:c8:e9:e4:aa:42:3d:d6:f2:d1:e9:7b:
05:ad:66:c1:87:2a:f1:a2:58:8b:5d:19:e1:f4:13:1b:39:67:
32:d3:28:bc:6c:78:7d:14:6d:9a:f6:b9:98:6d:86:50:ba:7f:
7d:1e:e7:1c:49:08:79:3a:f8:41:22:5c:f7:90:67:6e:4b:1f:
bc:8d:b0:f9:2c:1f:ac:0c:54:11:a3:d2:d3:0f:13:a7:9d:66:
18:3d:ca:ef:9b:78:6e:7a:73:0b:a2:c9:2e:64:5a:56:c0:4f:
61:87:99:a0:1d:86:b9:48:63:e6:8f:bf:6d:f5:1e:21:c9:76:
26:ad:d6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:37 2025 by rpki-client