Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e1f2f2-3ad7-4cd2-b76a-e856eff9ab0d/1/e51f_3sx0pk7dCKMz5rhKQCZYPk.roa
File: e51f_3sx0pk7dCKMz5rhKQCZYPk.roa (raw, json)
Hash identifier: QB659VTrPncAPq1FOZVJR1p+SQJJ/TrCVwP4WhOjO1s=
Subject key identifier: 7B:9D:5F:FF:7B:31:D2:99:3B:74:22:8C:CF:9A:E1:29:00:99:60:F9
Certificate issuer: /CN=8a9ab0a6dc5de7baecaad66dac1d943bd8fd91ef
Certificate serial: 01856BDCB4DFF7546766DD1B884D6451BE20
Authority key identifier: 8A:9A:B0:A6:DC:5D:E7:BA:EC:AA:D6:6D:AC:1D:94:3B:D8:FD:91:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ipqwptxd57rsqtZtrB2UO9j9ke8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/e1f2f2-3ad7-4cd2-b76a-e856eff9ab0d/1/e51f_3sx0pk7dCKMz5rhKQCZYPk.roa
Signing time: Sun 01 Jan 2023 05:45:04 +0000
ROA not before: Sun 01 Jan 2023 05:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44285
IP address blocks: 185.213.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:b4:df:f7:54:67:66:dd:1b:88:4d:64:51:be:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9ab0a6dc5de7baecaad66dac1d943bd8fd91ef
Validity
Not Before: Jan 1 05:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b9d5fff7b31d2993b74228ccf9ae129009960f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b4:bd:37:77:9a:a9:f1:87:68:de:e6:fb:2c:
94:2b:ac:31:ce:f2:29:18:6c:98:d3:7b:31:bd:11:
95:2f:69:ed:1f:9c:65:50:ed:14:3c:1c:1a:38:f8:
34:6e:52:5a:39:26:4c:22:55:58:08:79:07:b8:b9:
16:0d:a3:c7:25:c8:b5:50:fc:d3:61:a0:75:4c:a2:
cc:90:46:f8:b1:d4:6f:18:b8:14:75:93:e7:94:bf:
fd:20:3d:12:d4:d7:81:3a:a3:19:80:7e:fb:46:52:
77:e2:2c:7f:31:0f:a2:0b:17:de:be:b1:24:76:f5:
cb:00:50:a4:50:5a:b8:b6:70:d2:10:75:92:6c:bc:
fe:00:ff:1f:4d:d4:14:f8:16:17:00:5b:81:ff:01:
8b:17:ff:5a:9b:40:87:33:13:39:c4:32:b0:f1:e0:
c0:67:df:87:4a:3d:c0:43:8b:a1:a2:78:6d:8b:79:
f0:35:d6:b6:85:6b:59:25:e7:9e:1d:bd:ef:c1:47:
6a:b9:68:79:c7:de:c1:7d:da:92:4d:a1:55:6e:6e:
73:e3:f6:ed:0d:f7:e7:10:38:89:13:c0:57:15:9a:
42:d2:b8:56:24:c8:6c:88:81:cb:0e:c9:4f:12:0c:
b5:62:3c:69:64:c2:a2:20:d1:14:8c:d8:ed:11:d7:
42:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9D:5F:FF:7B:31:D2:99:3B:74:22:8C:CF:9A:E1:29:00:99:60:F9
X509v3 Authority Key Identifier:
keyid:8A:9A:B0:A6:DC:5D:E7:BA:EC:AA:D6:6D:AC:1D:94:3B:D8:FD:91:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ipqwptxd57rsqtZtrB2UO9j9ke8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e1f2f2-3ad7-4cd2-b76a-e856eff9ab0d/1/e51f_3sx0pk7dCKMz5rhKQCZYPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e1f2f2-3ad7-4cd2-b76a-e856eff9ab0d/1/ipqwptxd57rsqtZtrB2UO9j9ke8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.195.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:0b:50:87:07:94:f3:29:64:a9:9f:00:33:24:2c:32:b5:86:
da:40:3a:d4:02:0d:5d:40:c7:97:66:35:9f:9a:d9:e4:95:4f:
e5:eb:72:74:4f:1f:a2:09:f5:6f:5d:22:3a:d7:a8:c5:ca:ec:
4e:20:49:3b:eb:3a:c9:e3:9a:ad:09:f1:69:03:53:73:a0:c2:
69:dd:3a:e6:ab:91:8a:a0:fd:dd:46:86:21:0d:93:c2:48:fd:
99:f0:ef:95:75:e4:47:00:76:1c:3b:18:20:92:7a:0f:37:89:
16:49:26:cd:f3:d7:d6:31:16:67:47:78:39:e1:6b:a7:f9:11:
35:c3:b1:29:72:72:1e:d5:a8:bc:3d:6a:c8:b9:e8:e6:49:19:
10:ca:aa:a5:a1:4f:e4:29:1b:33:d3:34:3f:0b:58:45:47:60:
c1:f6:b7:99:de:79:cd:0f:86:3a:98:7c:e1:78:ed:2c:90:a0:
ac:5a:58:14:56:10:47:91:87:a1:4d:df:45:13:7c:46:df:5e:
42:02:90:55:39:3b:24:59:f5:0d:15:17:b4:21:e9:e3:6c:d9:
70:cd:19:aa:68:0e:02:30:58:eb:9a:b4:56:56:ec:8c:1e:93:
69:3f:41:1d:00:90:21:46:d7:1d:f8:a0:dd:db:3d:6c:7a:98:
5f:d4:df:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:22 2024 by rpki-client on console-fra.rpki-client.org