Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/KLx7H-k5P12yTDYBtptqcSG1k9c.roa
File: KLx7H-k5P12yTDYBtptqcSG1k9c.roa (raw, json)
Hash identifier: +OiNLUhfcKw3CY2TyZARJ7VWGdEwy1O1a0aQcM3aSLc=
Subject key identifier: 28:BC:7B:1F:E9:39:3F:5D:B2:4C:36:01:B6:9B:6A:71:21:B5:93:D7
Certificate issuer: /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial: 01854E68FE221F2C0474D2528EC3B2CE55C0
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/KLx7H-k5P12yTDYBtptqcSG1k9c.roa
Signing time: Mon 26 Dec 2022 12:29:41 +0000
ROA not before: Mon 26 Dec 2022 12:29:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197882
IP address blocks: 185.212.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4e:68:fe:22:1f:2c:04:74:d2:52:8e:c3:b2:ce:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
Validity
Not Before: Dec 26 12:29:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28bc7b1fe9393f5db24c3601b69b6a7121b593d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b0:fb:b7:87:52:11:32:01:ef:13:5f:dc:bd:
29:9d:16:3f:9b:ff:0c:0d:21:3c:f6:ec:96:ee:74:
c3:fa:f0:db:9d:36:8d:f5:a8:0f:d8:4e:fc:0d:55:
4a:e5:d3:41:4d:f2:7f:c8:b1:7e:08:1b:01:9b:b3:
c8:df:0f:83:d4:57:14:d4:ef:64:7d:2f:a9:f9:4c:
71:03:f2:c7:35:49:35:2f:f4:56:6c:6b:a7:75:a7:
55:89:bc:20:6e:7b:93:86:11:03:ee:8a:df:80:1f:
3d:90:fe:d3:65:2b:c7:6c:5e:ae:39:3d:0b:db:5a:
fc:26:f6:3d:bd:63:f8:5d:9e:ae:02:09:09:6e:2f:
c0:fb:6f:50:50:26:a9:ac:77:2a:fc:dd:ef:db:0a:
76:97:88:fa:d4:f1:cd:25:83:47:b9:a3:10:18:13:
50:94:ae:68:58:54:82:39:ed:45:64:c5:36:ec:a9:
ca:43:41:5b:c8:d1:f3:1b:51:34:15:c0:65:7c:64:
99:89:78:6f:c9:39:11:f7:e8:3c:8f:df:cc:0b:44:
59:bd:f2:75:e1:ea:2a:14:1a:1f:13:3a:19:4b:a5:
b5:3f:0d:76:bd:8b:e3:77:89:db:8d:b1:98:fa:55:
f1:30:1f:a5:44:c7:61:c5:15:14:05:a1:fa:c5:c1:
4c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BC:7B:1F:E9:39:3F:5D:B2:4C:36:01:B6:9B:6A:71:21:B5:93:D7
X509v3 Authority Key Identifier:
keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/KLx7H-k5P12yTDYBtptqcSG1k9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.33.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:89:2a:2a:7d:07:c8:83:e9:5e:ff:b6:7a:07:a0:8f:62:ba:
fc:6f:53:0e:7f:0f:49:32:ac:fb:cc:52:dd:01:b1:f1:b1:3f:
6e:4f:ab:54:d7:82:d4:d9:36:8a:48:7b:1f:72:40:d2:77:e2:
64:7d:21:aa:ca:4b:67:c0:5e:d8:bb:8d:af:08:57:54:53:60:
ac:36:6f:33:dc:8f:5b:7d:94:4e:2e:0f:72:f5:bb:b5:a0:8e:
0a:ac:a8:3d:0c:59:d6:a2:f4:f8:f9:ca:57:61:32:ec:fb:f9:
82:ee:c8:00:58:16:9f:ce:be:56:84:cf:f6:76:57:f5:2d:5a:
62:5d:4e:ff:2c:6e:0a:d4:06:a1:62:af:8c:04:38:df:c9:5c:
c2:d4:6f:1e:9d:15:71:63:0c:6b:89:e4:f7:fd:e0:ff:de:39:
14:4d:8f:67:9b:04:6a:aa:f9:3d:66:c4:ed:d6:39:6f:64:84:
cd:13:18:6b:49:f1:ba:25:29:eb:8e:77:5c:92:52:a8:da:ae:
a6:6f:e0:cb:5c:2a:48:53:69:f4:07:23:9e:31:3e:16:7f:28:
bc:62:38:35:30:f6:f5:3a:93:76:9b:9f:7b:0c:a5:22:f4:89:
b1:e5:cd:7f:15:24:c1:e4:0e:e8:c0:47:69:21:a4:ff:2f:37:
ac:44:89:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:37 2024 by rpki-client on console-ams.rpki-client.org