Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/1bH-0-iBy8fdYyMcMlI2chtq25s.roa
File: 1bH-0-iBy8fdYyMcMlI2chtq25s.roa (raw, json)
Hash identifier: pnB6igUkpaiNOsVpUYAS3Xh/HEBHfKWCURoGs9Z5O1M=
Subject key identifier: D5:B1:FE:D3:E8:81:CB:C7:DD:63:23:1C:32:52:36:72:1B:6A:DB:9B
Certificate issuer: /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial: 03BF393E
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/1bH-0-iBy8fdYyMcMlI2chtq25s.roa
Signing time: Sat 01 Jan 2022 03:01:27 +0000
ROA not before: Sat 01 Jan 2022 03:01:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204685
IP address blocks: 185.212.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62863678 (0x3bf393e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Validity
Not Before: Jan 1 03:01:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5b1fed3e881cbc7dd63231c325236721b6adb9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6d:fd:ed:40:3c:bb:1b:43:e6:cc:5e:98:e2:
9d:9e:62:c3:9a:5b:81:6f:0f:ac:87:f6:3e:38:37:
86:47:e1:93:e4:da:e7:de:87:f9:30:19:46:3d:23:
dc:27:2d:87:e3:72:76:32:6e:1d:07:b6:88:52:1e:
52:d7:14:21:0f:bc:1d:15:e2:fe:55:11:0c:f1:d4:
91:1a:78:40:8c:4d:8e:3f:52:68:45:d8:c3:23:11:
26:56:87:b6:20:50:66:40:95:9b:f1:2d:b7:16:98:
f8:39:71:41:03:c0:3b:42:60:20:78:3b:b2:88:99:
cf:41:a0:20:22:27:ba:ea:46:68:b9:34:89:40:3a:
30:fe:7f:35:a6:d6:cf:48:a0:e0:1d:dc:a7:48:68:
46:ab:a3:36:cd:33:5c:d7:77:26:9a:d4:c2:4e:b2:
7f:cc:cd:2f:05:4a:65:82:09:d3:0c:f4:66:c1:ee:
a6:25:6b:eb:ed:f5:4c:82:e9:ef:90:58:8c:ca:5c:
d8:ad:23:96:6c:19:b6:cc:ae:c3:31:f8:a0:f0:7c:
6e:a7:64:ec:a5:9e:f0:63:83:49:09:70:f5:7e:00:
8c:0a:ca:c6:15:b6:27:8a:92:1c:b2:7f:c7:48:11:
7b:ce:a0:50:44:af:9f:c7:69:2f:2b:ba:55:93:53:
01:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B1:FE:D3:E8:81:CB:C7:DD:63:23:1C:32:52:36:72:1B:6A:DB:9B
X509v3 Authority Key Identifier:
keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/1bH-0-iBy8fdYyMcMlI2chtq25s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.251.0/24
Signature Algorithm: sha256WithRSAEncryption
42:92:9c:17:fb:5b:af:89:4b:12:a0:71:fe:37:60:69:40:e0:
cd:fa:04:33:47:d4:51:fc:67:d6:fa:71:f5:30:34:f8:2c:25:
09:29:dd:d3:16:7c:0c:ec:b4:ca:16:35:bd:e6:d1:0c:95:e0:
81:d6:d9:ef:57:03:76:f6:d4:74:43:63:15:66:bd:e5:8b:9e:
5c:48:f0:5c:e0:c6:6b:d6:c9:64:2b:cc:96:e1:f9:67:18:3b:
e2:54:24:45:16:28:45:45:44:58:18:3b:02:31:b1:44:47:6a:
b2:b3:fa:1b:52:70:63:e3:d7:53:e9:03:63:12:76:8a:0f:87:
21:7d:71:4c:e8:b0:95:95:97:f4:30:e5:f9:68:90:69:81:7e:
e1:3b:2d:21:91:7d:bb:3e:1c:6b:26:46:48:2f:0b:8b:07:0d:
7d:2f:bf:f7:a0:c7:2f:d7:19:80:16:e2:ce:8e:49:a3:e4:c7:
98:61:0c:f8:95:73:1d:6e:66:12:b9:ff:15:b2:f9:7b:57:b8:
ad:fc:a2:16:72:0d:39:76:86:6d:e9:86:a1:a1:cd:e6:29:78:
67:d5:5c:65:13:7b:09:a6:3f:f3:f9:02:26:b8:78:25:96:f8:
0d:10:92:e1:75:5d:2d:62:2e:1c:11:60:ea:25:6f:8c:c6:2b:
75:80:b3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:46 2024 by rpki-client on console-ams.rpki-client.org