Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/Z96PH7e9m01UUdOPX5et9Wk2Dv4.roa
File: Z96PH7e9m01UUdOPX5et9Wk2Dv4.roa (raw, json)
Hash identifier: 8ECqGiYBMOituqEkKOHcCo3K52G+2KSKrTKuDtRIzf4=
Subject key identifier: 67:DE:8F:1F:B7:BD:9B:4D:54:51:D3:8F:5F:97:AD:F5:69:36:0E:FE
Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Certificate serial: 01856C1C81C7821385B63DCD2BF2CAB8A7B9
Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/Z96PH7e9m01UUdOPX5et9Wk2Dv4.roa
Signing time: Sun 01 Jan 2023 06:54:45 +0000
ROA not before: Sun 01 Jan 2023 06:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3223
IP address blocks: 185.247.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:81:c7:82:13:85:b6:3d:cd:2b:f2:ca:b8:a7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Validity
Not Before: Jan 1 06:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67de8f1fb7bd9b4d5451d38f5f97adf569360efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:63:3f:be:85:6b:b9:fb:0d:70:81:ec:0e:
d5:52:d5:3e:dd:a3:5b:bb:08:bd:e4:1e:a5:3e:4e:
16:fb:4c:47:46:d2:3f:56:bd:53:18:80:70:f3:bb:
f7:9f:43:5d:2c:a1:cb:40:42:f9:e5:0d:9a:59:58:
b1:63:80:fd:4e:ee:c8:0d:e4:e3:a2:86:1f:17:1f:
94:6d:f5:a4:43:1a:c3:88:47:e5:b9:e5:20:dc:38:
97:6f:db:61:f3:52:b8:58:d7:fd:b3:ee:b8:dd:84:
89:06:0e:14:b9:0c:fb:77:21:f6:4b:8f:c9:39:9b:
95:0c:03:68:f4:16:f9:8e:1a:6c:c7:dc:76:1d:89:
14:34:62:47:18:24:23:f7:4a:89:1a:66:55:db:be:
af:65:49:7c:df:7e:0a:da:87:2e:f7:e7:32:5d:6d:
0f:6c:80:52:76:dd:99:80:f6:35:ff:bb:38:e1:01:
84:1a:4c:d6:ac:9f:8d:e0:9e:06:42:0d:57:39:b3:
f3:f8:0d:02:4a:3c:bb:f6:90:21:0f:11:fa:29:42:
0d:8f:f5:aa:33:8e:c9:82:7f:1e:50:c7:64:d2:1c:
97:00:b4:6e:73:1a:20:9e:ca:5e:41:b5:71:bb:84:
45:84:6c:e9:98:5a:32:42:ce:34:b1:b4:82:13:7d:
1c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DE:8F:1F:B7:BD:9B:4D:54:51:D3:8F:5F:97:AD:F5:69:36:0E:FE
X509v3 Authority Key Identifier:
keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/Z96PH7e9m01UUdOPX5et9Wk2Dv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.61.0/24
Signature Algorithm: sha256WithRSAEncryption
56:b5:1b:07:ec:97:c7:81:45:2b:a0:8d:f5:1f:27:2c:bf:1e:
0d:06:a5:9e:64:e0:62:f8:04:de:48:7b:9f:8e:a2:1e:7b:57:
dc:d8:14:97:26:05:5e:e8:53:27:d7:76:19:47:de:51:1b:ad:
4d:4f:51:03:35:7d:2e:65:83:0d:67:50:54:c1:7e:57:90:7a:
3c:00:8e:78:b8:a2:b5:14:09:68:1f:2c:c0:93:c6:98:c6:d3:
5a:79:93:99:19:15:5d:1f:72:01:87:3e:f5:e2:9f:1f:1c:d8:
3f:18:ff:da:3f:08:c4:42:f5:c7:ac:95:d3:49:47:22:f6:18:
f7:bc:0c:aa:3e:d2:90:00:2d:e6:68:86:18:38:0f:d2:6e:13:
1f:51:a7:cb:41:a2:06:6f:00:80:79:0f:f5:37:bd:31:93:13:
45:43:b8:90:88:86:7f:e5:00:09:97:e3:08:a4:fb:07:bb:f6:
a0:f5:70:b9:72:2f:c4:01:2d:c9:60:d0:dc:00:b0:e0:cb:1a:
50:77:a6:57:eb:3c:5b:37:5d:f3:48:4c:66:20:9c:55:7b:76:
80:89:d6:57:db:85:7d:e1:ef:da:6b:4b:77:b8:10:d1:dd:a4:
be:bc:0b:a1:41:93:17:c3:74:00:de:d7:0c:5c:86:f5:ce:cd:
74:87:a2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:15 2025 by rpki-client