Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8a5f47-f1d0-45ea-ab49-2fef21e88807/1/7rPz1Pg9whcUpZsPCz0fZiyo3E0.roa
File: 7rPz1Pg9whcUpZsPCz0fZiyo3E0.roa (raw, json)
Hash identifier: 4NrPaI3rUfULYYIRADicpsZeBNYKA9GkEvgWjmxnAoo=
Subject key identifier: EE:B3:F3:D4:F8:3D:C2:17:14:A5:9B:0F:0B:3D:1F:66:2C:A8:DC:4D
Certificate issuer: /CN=1563492884a21a9b3cc2e3a9a0966669e1daac8f
Certificate serial: 01825C477527CA173B8AE0414AA1B5609BE4
Authority key identifier: 15:63:49:28:84:A2:1A:9B:3C:C2:E3:A9:A0:96:66:69:E1:DA:AC:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWNJKISiGps8wuOpoJZmaeHarI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8a5f47-f1d0-45ea-ab49-2fef21e88807/1/7rPz1Pg9whcUpZsPCz0fZiyo3E0.roa
Signing time: Tue 02 Aug 2022 01:59:23 +0000
ROA not before: Tue 02 Aug 2022 01:59:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3292
IP address blocks: 185.203.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5c:47:75:27:ca:17:3b:8a:e0:41:4a:a1:b5:60:9b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1563492884a21a9b3cc2e3a9a0966669e1daac8f
Validity
Not Before: Aug 2 01:59:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eeb3f3d4f83dc21714a59b0f0b3d1f662ca8dc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:20:46:42:11:72:6b:00:a5:f5:26:4e:d8:2c:
d4:4f:81:06:8b:7e:60:6c:7a:57:a4:41:d4:ec:cc:
04:94:bd:28:48:76:9c:d5:a5:7b:c8:ec:8e:43:e2:
0a:19:d9:e6:aa:6f:30:23:c6:c7:ab:f9:0d:4a:c5:
f0:7c:8a:a2:df:a5:11:5e:d8:e5:f7:45:e8:1d:52:
d4:f9:86:59:d7:ec:a6:d3:e2:d9:09:2f:86:45:6d:
73:88:e7:ba:86:35:34:28:c7:85:b8:0d:0c:35:21:
4f:6e:72:9d:89:16:b8:53:d6:6c:30:98:f6:35:57:
2e:f3:7a:3d:73:92:21:37:3a:0e:f1:98:75:aa:c2:
3e:39:bb:aa:fc:df:80:0f:31:4c:94:4e:ba:80:25:
fa:c8:00:dc:49:b5:57:02:84:bb:9d:84:44:76:21:
a3:a1:a4:76:62:94:69:26:5a:d9:a4:47:1d:5c:e7:
09:cb:19:27:91:9f:01:38:a7:a5:1b:fc:e8:0d:a1:
b8:fc:11:1e:63:5f:31:24:ba:65:a6:6c:2c:6f:88:
33:79:d3:13:4c:3c:a2:e3:ab:e1:5d:d1:a3:c5:7f:
f5:6b:56:89:4f:91:84:62:45:84:30:6b:8e:46:10:
2f:02:3e:22:48:68:f4:ed:1c:33:96:2d:27:a2:74:
d0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B3:F3:D4:F8:3D:C2:17:14:A5:9B:0F:0B:3D:1F:66:2C:A8:DC:4D
X509v3 Authority Key Identifier:
keyid:15:63:49:28:84:A2:1A:9B:3C:C2:E3:A9:A0:96:66:69:E1:DA:AC:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWNJKISiGps8wuOpoJZmaeHarI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8a5f47-f1d0-45ea-ab49-2fef21e88807/1/7rPz1Pg9whcUpZsPCz0fZiyo3E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8a5f47-f1d0-45ea-ab49-2fef21e88807/1/FWNJKISiGps8wuOpoJZmaeHarI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.232.0/24
Signature Algorithm: sha256WithRSAEncryption
67:54:3e:7f:d2:3c:b6:eb:4d:7f:cf:e4:ac:92:2d:5c:f8:c8:
c2:dc:0d:cc:82:91:bd:c2:ce:c7:08:48:f3:53:e7:8c:97:2a:
bf:c7:ec:63:09:bc:72:d2:8d:5f:3f:94:bc:40:52:5b:3d:aa:
d7:e3:2d:9f:16:a4:bb:31:5a:c1:af:db:e7:63:48:b5:70:11:
18:e6:71:2f:ce:35:90:7c:61:af:03:19:31:66:ad:31:b4:a0:
3e:7c:b4:a2:c0:91:8f:c8:a2:05:88:a0:2e:e1:cb:03:36:19:
07:e2:88:13:34:61:e0:bc:07:52:d4:c8:32:56:e5:dd:8c:f8:
7c:47:b7:e0:eb:60:6a:62:83:c1:1f:67:7a:f5:7a:f1:68:e8:
86:21:f1:76:b3:18:83:16:1e:3b:0c:19:93:68:76:b8:1f:a2:
75:ea:54:56:1a:f1:13:33:76:0c:4d:bf:8b:b1:bc:2f:97:c7:
4f:c4:ca:1d:2c:bd:d7:99:4d:cb:ca:8d:d4:78:f6:e8:2e:d8:
9e:ee:a0:25:6f:21:83:cd:21:47:8f:b7:ac:16:81:e2:a7:ea:
44:81:09:52:b1:94:30:6e:12:86:94:09:83:f3:c9:f1:e0:a5:
52:8c:4a:62:9b:31:66:98:87:3d:eb:df:90:74:0f:ae:0f:a6:
dd:b8:5e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:24 2025 by rpki-client