Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d79948-7849-4aba-87c1-521cfc535785/1/kLFicb7vEWEm-aOPuX99N0HQqsM.roa
File: kLFicb7vEWEm-aOPuX99N0HQqsM.roa (raw, json)
Hash identifier: hzVrISQ4TbXqilm3DmVHFDDsHkmbVxp2EMzPiwgPffk=
Subject key identifier: 90:B1:62:71:BE:EF:11:61:26:F9:A3:8F:B9:7F:7D:37:41:D0:AA:C3
Certificate issuer: /CN=14294576f0d914ae42a215420afcbdbcd7b4aced
Certificate serial: 01C1BE
Authority key identifier: 14:29:45:76:F0:D9:14:AE:42:A2:15:42:0A:FC:BD:BC:D7:B4:AC:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FClFdvDZFK5CohVCCvy9vNe0rO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d79948-7849-4aba-87c1-521cfc535785/1/kLFicb7vEWEm-aOPuX99N0HQqsM.roa
Signing time: Tue 24 May 2022 15:48:13 +0000
ROA not before: Tue 24 May 2022 15:48:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25288
IP address blocks: 185.163.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115134 (0x1c1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14294576f0d914ae42a215420afcbdbcd7b4aced
Validity
Not Before: May 24 15:48:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90b16271beef116126f9a38fb97f7d3741d0aac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:31:e0:e7:ba:14:93:dc:2f:7f:6e:72:d1:49:
de:85:94:68:c7:ff:ba:cf:ba:fc:f2:96:b6:76:7f:
fb:b3:1f:ae:02:c7:c8:46:1b:ad:d1:16:a6:04:e8:
d3:92:18:63:34:5e:c6:78:98:8a:44:f5:81:ed:21:
e9:67:07:dc:32:a9:29:10:4b:9d:29:14:f1:cb:f6:
9c:4e:3f:89:92:37:1a:7d:a4:6b:68:4c:df:a1:6c:
fc:46:a8:11:f8:b8:4d:aa:db:94:c0:e9:72:fb:84:
98:eb:03:02:0c:e1:46:e6:42:b2:7a:31:d5:12:0e:
d6:e3:fc:bb:ff:63:39:f6:f5:61:59:0e:d4:a1:4f:
f2:2d:fa:f7:3e:a5:99:a5:f4:ec:81:c7:d7:9c:99:
35:e9:5d:9a:4b:29:98:f1:41:f9:3f:e8:22:24:50:
c1:c2:a0:d7:30:6b:ad:e2:13:d9:20:34:33:35:3f:
95:b8:ef:6e:ae:d4:39:51:5b:db:41:91:bc:9c:c1:
ac:da:43:26:d6:a8:8f:65:aa:ff:88:cb:c5:a3:1c:
ce:28:06:fa:8e:ab:a2:88:04:1d:fe:d3:b9:37:d8:
e3:7c:a2:e5:d6:83:78:15:d2:0b:00:24:ed:a9:99:
9a:cb:52:32:b5:0f:77:a9:84:d6:61:b2:d4:c8:0b:
d2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B1:62:71:BE:EF:11:61:26:F9:A3:8F:B9:7F:7D:37:41:D0:AA:C3
X509v3 Authority Key Identifier:
keyid:14:29:45:76:F0:D9:14:AE:42:A2:15:42:0A:FC:BD:BC:D7:B4:AC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FClFdvDZFK5CohVCCvy9vNe0rO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d79948-7849-4aba-87c1-521cfc535785/1/kLFicb7vEWEm-aOPuX99N0HQqsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d79948-7849-4aba-87c1-521cfc535785/1/FClFdvDZFK5CohVCCvy9vNe0rO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.207.0/24
Signature Algorithm: sha256WithRSAEncryption
45:f2:8d:0e:fa:6f:f8:9a:68:95:ed:9e:f9:2b:aa:b1:06:48:
0e:0c:3f:4e:ce:63:a5:b5:03:59:17:72:c6:2e:2e:6b:12:e2:
df:17:8f:f6:1d:7a:09:21:22:8a:ee:d6:b9:92:18:e1:e0:4f:
07:9d:56:f7:00:e6:d9:43:d4:39:84:7b:b9:cf:04:c3:2c:c6:
48:d0:52:f6:a0:f4:8e:7d:0e:ab:df:2c:b3:38:3a:cf:93:e8:
64:c0:fa:f6:71:4f:8c:3f:e6:19:77:a5:99:b4:a7:cd:58:c9:
a5:44:3f:c6:06:78:eb:06:3b:91:4d:0f:f2:d3:c9:0b:24:1c:
9c:83:33:11:49:63:de:bc:ee:96:b8:96:97:a9:57:a5:d6:2c:
29:74:44:7e:45:89:14:11:73:c9:12:2c:6d:6e:83:fb:f5:e7:
9c:30:68:58:b0:4c:ef:14:d6:2b:19:90:99:65:de:2d:3e:da:
c8:c0:7e:f6:af:4f:ee:5c:8c:ae:0b:ff:5d:52:1b:db:a1:58:
a3:cd:62:4e:30:1f:00:1c:f8:85:89:d7:06:91:5e:38:1a:0e:
6c:6a:1b:39:2c:0e:b6:97:b9:ef:13:fe:aa:d8:fd:e0:57:cc:
86:1e:2d:8d:1d:20:78:6a:a2:ec:75:73:fc:11:ce:73:d6:f6:
76:2f:9a:7d
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAcG+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE0
Mjk0NTc2ZjBkOTE0YWU0MmEyMTU0MjBhZmNiZGJjZDdiNGFjZWQwHhcNMjIwNTI0
MTU0ODEzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5MGIxNjI3MWJlZWYx
MTYxMjZmOWEzOGZiOTdmN2QzNzQxZDBhYWMzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArDHg57oUk9wvf25y0UnehZRox/+6z7r88pa2dn/7sx+uAsfI
Rhut0RamBOjTkhhjNF7GeJiKRPWB7SHpZwfcMqkpEEudKRTxy/acTj+JkjcafaRr
aEzfoWz8RqgR+LhNqtuUwOly+4SY6wMCDOFG5kKyejHVEg7W4/y7/2M59vVhWQ7U
oU/yLfr3PqWZpfTsgcfXnJk16V2aSymY8UH5P+giJFDBwqDXMGut4hPZIDQzNT+V
uO9urtQ5UVvbQZG8nMGs2kMm1qiPZar/iMvFoxzOKAb6jquiiAQd/tO5N9jjfKLl
1oN4FdILACTtqZmay1IytQ93qYTWYbLUyAvS6wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFJCxYnG+7xFhJvmjj7l/fTdB0KrDMB8GA1UdIwQYMBaAFBQpRXbw2RSuQqIV
Qgr8vbzXtKztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
RkNsRmR2RFpGSzVDb2hWQ0N2eTl2TmUwck8wLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jNS9kNzk5NDgtNzg0OS00YWJhLTg3YzEtNTIxY2ZjNTM1Nzg1LzEv
a0xGaWNiN3ZFV0VtLWFPUHVYOTlOMEhRcXNNLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9k
Nzk5NDgtNzg0OS00YWJhLTg3YzEtNTIxY2ZjNTM1Nzg1LzEvRkNsRmR2RFpGSzVD
b2hWQ0N2eTl2TmUwck8wLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaPPMA0GCSqGSIb3DQEBCwUAA4IB
AQBF8o0O+m/4mmiV7Z75K6qxBkgODD9OzmOltQNZF3LGLi5rEuLfF4/2HXoJISKK
7ta5khjh4E8HnVb3AObZQ9Q5hHu5zwTDLMZI0FL2oPSOfQ6r3yyzODrPk+hkwPr2
cU+MP+YZd6WZtKfNWMmlRD/GBnjrBjuRTQ/y08kLJBycgzMRSWPevO6WuJaXqVel
1iwpdER+RYkUEXPJEixtboP79eecMGhYsEzvFNYrGZCZZd4tPtrIwH72r0/uXIyu
C/9dUhvboVijzWJOMB8AHPiFidcGkV44Gg5sahs5LA62l7nvE/6q2P3gV8yGHi2N
HSB4aqLsdXP8Ec5z1vZ2L5p9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:10 2024 by rpki-client on console-fra.rpki-client.org