Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cf1fa5-a0ae-40e6-b54e-2b6f9dbb7144/1/vB9jYd7OpBg1WH9Hi6Ovz4k39yg.roa
File: vB9jYd7OpBg1WH9Hi6Ovz4k39yg.roa (raw, json)
Hash identifier: N0lbIuUijAN/RGJfb9w74pS3/OTwSsgvJtiWQPrVOF4=
Subject key identifier: BC:1F:63:61:DE:CE:A4:18:35:58:7F:47:8B:A3:AF:CF:89:37:F7:28
Certificate issuer: /CN=dd4ea3fc8b485501f7220e61382abd73211ee2a8
Certificate serial: 018570026FA98FCB744B23AD3214C3550C9C
Authority key identifier: DD:4E:A3:FC:8B:48:55:01:F7:22:0E:61:38:2A:BD:73:21:1E:E2:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U6j_ItIVQH3Ig5hOCq9cyEe4qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cf1fa5-a0ae-40e6-b54e-2b6f9dbb7144/1/vB9jYd7OpBg1WH9Hi6Ovz4k39yg.roa
Signing time: Mon 02 Jan 2023 01:04:45 +0000
ROA not before: Mon 02 Jan 2023 01:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203061
IP address blocks: 185.25.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:6f:a9:8f:cb:74:4b:23:ad:32:14:c3:55:0c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4ea3fc8b485501f7220e61382abd73211ee2a8
Validity
Not Before: Jan 2 01:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc1f6361decea41835587f478ba3afcf8937f728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:06:83:0f:cf:71:ec:be:24:6c:e9:fb:ec:49:
cb:1c:91:12:00:28:c9:1a:d9:04:c5:72:11:f7:1a:
60:60:6d:ea:0f:af:dd:9a:f2:eb:83:c0:af:e4:a4:
28:d9:d4:94:55:35:64:92:7c:8d:c1:de:fa:63:3f:
ac:06:22:c1:35:4f:7c:e8:ed:f2:d8:3e:92:55:ae:
f1:5e:9f:86:f7:7f:2a:84:0f:18:14:55:7a:bb:93:
4d:d8:32:f1:2e:25:fa:fb:18:50:7e:a7:66:05:e3:
56:79:53:b3:c8:44:a8:de:54:56:47:15:d4:f6:8d:
aa:bf:dd:02:af:f6:4e:cc:09:04:95:3b:8c:95:4c:
7a:60:f1:1b:55:f0:48:91:a8:e7:ba:5a:db:46:c8:
da:31:cb:37:63:5d:31:3c:ef:28:c1:21:94:ce:46:
1f:91:cb:cf:04:99:a4:0e:54:6c:6b:80:6c:a3:a0:
cb:80:b2:89:84:30:da:bc:e3:38:ba:96:bc:05:fe:
37:6e:62:bf:af:98:ec:4c:39:67:f8:ff:8a:20:40:
c6:ce:be:2b:c9:09:30:29:56:f8:55:57:6a:62:de:
49:07:65:0e:ea:82:38:e4:a4:0b:fa:36:9e:b9:55:
52:d6:3b:0e:6c:6a:b1:94:a1:dd:3a:a3:ee:51:76:
74:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1F:63:61:DE:CE:A4:18:35:58:7F:47:8B:A3:AF:CF:89:37:F7:28
X509v3 Authority Key Identifier:
keyid:DD:4E:A3:FC:8B:48:55:01:F7:22:0E:61:38:2A:BD:73:21:1E:E2:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U6j_ItIVQH3Ig5hOCq9cyEe4qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cf1fa5-a0ae-40e6-b54e-2b6f9dbb7144/1/vB9jYd7OpBg1WH9Hi6Ovz4k39yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cf1fa5-a0ae-40e6-b54e-2b6f9dbb7144/1/3U6j_ItIVQH3Ig5hOCq9cyEe4qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.107.0/24
Signature Algorithm: sha256WithRSAEncryption
67:98:55:01:13:cd:14:6f:ae:88:87:4a:03:8a:81:8b:62:75:
57:27:d0:be:c1:1a:a9:39:7e:a9:d3:6b:b8:ef:65:df:4d:66:
ce:13:79:27:5f:d6:5c:52:61:69:af:34:80:bd:09:f1:b5:8e:
23:ea:61:3a:df:55:67:e3:ba:bf:26:38:b7:f9:fc:62:df:08:
22:96:c2:7d:f2:09:fa:05:07:60:0d:be:6e:34:b6:48:d0:ef:
64:74:dc:40:e2:f4:f4:71:f4:d5:62:a5:23:4d:4a:2a:a3:42:
de:45:74:3e:27:16:a0:ad:38:d3:4c:5c:38:0f:6a:77:fa:61:
65:3e:6c:83:51:17:85:a1:d1:e8:f2:2c:0e:2a:33:f0:c6:ef:
84:f9:55:17:4e:80:6a:dc:d2:c2:e3:8d:7c:92:de:e7:23:73:
cb:f7:e4:9f:7c:1c:e4:0c:fd:2a:87:d3:87:47:86:76:bd:97:
33:23:2b:ca:9c:33:67:42:f6:07:9f:9c:f9:ba:75:b1:ea:00:
d8:6f:da:b6:f4:63:8b:c1:ed:19:a3:05:b7:e0:a9:8f:de:54:
80:f4:98:c8:84:54:b2:d0:9e:0c:99:bd:4d:2f:7d:49:4b:0c:
c3:9f:24:8a:0a:98:69:7e:a0:e5:04:3f:75:e8:9c:e5:98:da:
e0:58:83:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:14 2024 by rpki-client on console-ams.rpki-client.org