Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9ef8a0-2618-4699-b952-a400f76a6084/1/HhYzM4IF7z1qcdcyUJqTdr5PYgw.roa
File: HhYzM4IF7z1qcdcyUJqTdr5PYgw.roa (raw, json)
Hash identifier: RQGXfaSvqo94hydC6W/U6p86XpACEl47wY1IqgJcWww=
Subject key identifier: 1E:16:33:33:82:05:EF:3D:6A:71:D7:32:50:9A:93:76:BE:4F:62:0C
Certificate issuer: /CN=3fefca05a3212ead586e09722375dbd8ded968a4
Certificate serial: 0182E5AA73B6F374B7B4522F149B7B7E6E61
Authority key identifier: 3F:EF:CA:05:A3:21:2E:AD:58:6E:09:72:23:75:DB:D8:DE:D9:68:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-_KBaMhLq1YbglyI3Xb2N7ZaKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9ef8a0-2618-4699-b952-a400f76a6084/1/HhYzM4IF7z1qcdcyUJqTdr5PYgw.roa
Signing time: Sun 28 Aug 2022 18:15:29 +0000
ROA not before: Sun 28 Aug 2022 18:15:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63473
IP address blocks: 185.223.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e5:aa:73:b6:f3:74:b7:b4:52:2f:14:9b:7b:7e:6e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fefca05a3212ead586e09722375dbd8ded968a4
Validity
Not Before: Aug 28 18:15:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e1633338205ef3d6a71d732509a9376be4f620c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9a:23:3f:28:e8:13:57:f0:89:30:62:a5:ab:
6f:3e:c0:70:a3:5b:4d:7b:41:32:e7:ae:4a:7d:4c:
da:1a:09:f6:ee:ea:f1:fa:2d:30:69:95:de:ac:6c:
18:3b:28:d6:bf:52:9b:f6:13:04:6a:a2:bb:4d:72:
51:65:c5:db:ba:f0:5c:49:8a:31:17:8e:77:fd:d9:
3a:bd:39:59:ff:36:d3:89:d9:75:4e:3d:0b:7e:5b:
15:a4:7b:1e:c7:b7:a4:79:4d:d4:37:97:aa:b7:87:
0b:80:29:93:5f:2d:85:76:65:fa:f5:32:5c:ed:55:
18:10:30:4f:94:cc:44:94:4e:f0:88:0a:9a:e7:c8:
d6:a5:36:8b:0a:6b:72:74:86:d8:15:d3:86:ab:00:
38:31:6b:2e:01:d4:77:23:66:9d:55:28:16:98:f5:
76:e6:a9:45:31:18:5e:dc:67:51:5b:05:2e:38:98:
14:d8:b6:b2:dc:8a:7c:fb:65:bf:6b:e8:b4:09:6c:
96:e3:8f:1b:aa:a7:8a:72:73:70:a6:da:23:53:63:
bf:19:8c:71:03:45:de:86:6e:89:2e:d5:71:a8:36:
44:17:02:ab:24:20:f7:4e:77:8f:b1:9c:2e:f3:b5:
ee:48:66:45:4c:74:49:3b:53:43:eb:1a:5c:d2:5c:
af:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:16:33:33:82:05:EF:3D:6A:71:D7:32:50:9A:93:76:BE:4F:62:0C
X509v3 Authority Key Identifier:
keyid:3F:EF:CA:05:A3:21:2E:AD:58:6E:09:72:23:75:DB:D8:DE:D9:68:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-_KBaMhLq1YbglyI3Xb2N7ZaKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ef8a0-2618-4699-b952-a400f76a6084/1/HhYzM4IF7z1qcdcyUJqTdr5PYgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ef8a0-2618-4699-b952-a400f76a6084/1/P-_KBaMhLq1YbglyI3Xb2N7ZaKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.207.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:16:fc:33:b1:c4:a9:e7:63:36:8e:dc:cd:1b:87:9d:4b:11:
9a:c8:c4:f0:c8:a9:e4:84:8e:05:9a:fe:aa:8f:af:03:64:5b:
75:40:25:ba:a4:78:69:0a:c8:46:64:6e:8f:6f:29:c8:8f:b3:
21:c2:e0:85:35:31:30:77:a9:73:e4:d0:d6:5e:c4:fc:8c:ac:
f4:11:bc:72:b6:d0:6d:78:1c:dc:7e:6b:6b:86:16:a8:d0:22:
6a:07:1c:0a:e8:c5:a9:f7:bd:65:fc:b6:09:b2:d1:ae:91:b7:
4a:00:75:cb:cd:07:83:a3:46:e2:5d:40:24:d6:3c:d4:6e:f9:
95:42:1f:a6:92:6a:07:8c:2a:1b:99:81:c0:aa:8d:62:42:dc:
c8:b0:5b:50:4d:44:c4:f1:10:ac:e3:37:46:00:63:74:6a:4e:
3f:a2:f0:8b:a3:99:9c:7c:3f:ec:68:5c:d4:d8:6c:d2:e8:78:
11:3f:a6:5b:32:71:15:a6:93:77:99:9e:fb:87:91:37:a6:dc:
9d:53:99:f9:a2:ae:f1:7d:b3:ee:a3:b1:39:cf:1c:55:6c:89:
48:80:d7:5c:20:2e:6b:65:0f:47:41:d0:0a:da:d7:27:f0:9c:
30:0f:ab:70:20:f1:29:6a:23:91:fd:06:6f:77:82:f7:4d:c9:
fe:86:f2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:18 2024 by rpki-client on console-fra.rpki-client.org