Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d807d5-ce18-4be5-bd2a-844913f8bba3/1/lL7SL7zIkM5O8PsnYbxNbH9CIUg.roa
File: lL7SL7zIkM5O8PsnYbxNbH9CIUg.roa (raw, json)
Hash identifier: vMWsUklIOTBbWTlJH6+mhpYqGJXfnzrHr5Y/owaYZKo=
Subject key identifier: 94:BE:D2:2F:BC:C8:90:CE:4E:F0:FB:27:61:BC:4D:6C:7F:42:21:48
Certificate issuer: /CN=1df2710c06d0df0bef46d9b1cb58aff520f8c584
Certificate serial: 018571955D25ECFCAC0A690F3178894F1CFF
Authority key identifier: 1D:F2:71:0C:06:D0:DF:0B:EF:46:D9:B1:CB:58:AF:F5:20:F8:C5:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HfJxDAbQ3wvvRtmxy1iv9SD4xYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d807d5-ce18-4be5-bd2a-844913f8bba3/1/lL7SL7zIkM5O8PsnYbxNbH9CIUg.roa
Signing time: Mon 02 Jan 2023 08:24:52 +0000
ROA not before: Mon 02 Jan 2023 08:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211265
IP address blocks: 185.197.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:5d:25:ec:fc:ac:0a:69:0f:31:78:89:4f:1c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1df2710c06d0df0bef46d9b1cb58aff520f8c584
Validity
Not Before: Jan 2 08:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94bed22fbcc890ce4ef0fb2761bc4d6c7f422148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:af:a0:b3:27:6e:4c:79:f5:ad:ec:d0:45:ca:
ab:10:03:16:7a:a5:41:dd:de:95:ac:21:28:65:1b:
6d:0f:d8:ee:f8:08:31:18:c5:16:a8:6e:24:59:bd:
a0:e1:e8:7e:0f:11:ce:3b:e4:44:6f:47:90:b3:68:
67:7e:af:29:39:7d:2c:45:4b:da:45:da:46:dc:66:
28:ff:27:38:b0:ae:7f:a1:93:e5:01:b6:10:22:10:
a1:39:02:87:4a:07:c3:bc:9f:75:97:1a:13:3e:a9:
0f:2a:1e:e9:df:7b:4d:73:ca:71:cb:11:64:53:c6:
d9:ac:ef:d2:e9:d9:97:a5:0a:f2:9e:8f:47:5f:e1:
87:42:e0:bb:1b:68:23:04:0d:b1:c5:53:47:18:5d:
9c:bf:01:b0:2e:71:6d:bf:7c:a8:1e:01:46:25:bb:
7f:26:34:ad:d1:a2:05:3a:7c:ab:cc:18:f2:01:23:
75:0e:b3:18:4f:f1:74:7d:fa:ba:81:e6:c0:87:c5:
92:1d:6f:72:f9:04:94:c8:34:f4:0d:0c:19:67:a9:
a4:2f:cd:ef:18:af:6b:1c:a1:24:fd:b1:da:e6:50:
0b:fa:a5:4e:61:89:4b:1f:c4:49:3d:fc:ae:01:11:
b3:ae:97:6c:ae:ee:5b:2c:35:a3:00:cc:cd:b3:9a:
43:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BE:D2:2F:BC:C8:90:CE:4E:F0:FB:27:61:BC:4D:6C:7F:42:21:48
X509v3 Authority Key Identifier:
keyid:1D:F2:71:0C:06:D0:DF:0B:EF:46:D9:B1:CB:58:AF:F5:20:F8:C5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HfJxDAbQ3wvvRtmxy1iv9SD4xYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d807d5-ce18-4be5-bd2a-844913f8bba3/1/lL7SL7zIkM5O8PsnYbxNbH9CIUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d807d5-ce18-4be5-bd2a-844913f8bba3/1/HfJxDAbQ3wvvRtmxy1iv9SD4xYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.150.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:c8:01:b3:f3:a3:65:0d:4d:5d:7f:82:5e:df:6a:5a:c3:78:
7f:a8:ca:3e:13:2b:f2:c1:3d:81:92:0c:7f:09:19:3c:56:52:
e2:f6:0a:02:8a:93:20:d4:6c:e0:3d:95:10:ea:37:f9:48:de:
45:33:d3:63:24:7b:af:d4:c9:25:af:57:c1:09:f7:59:d9:f9:
25:4b:46:b6:6a:86:10:50:4d:08:31:00:8f:4b:87:0e:0e:05:
70:d4:cb:8e:20:ad:8c:e6:69:70:4e:8c:42:15:19:27:60:7c:
5c:09:58:7d:d5:82:53:ed:78:7c:fb:9a:16:ff:24:93:57:72:
5b:62:d8:e8:b4:1c:63:fb:d6:6c:19:ba:e7:20:4c:a5:8a:dc:
66:c2:b9:b9:7e:8a:9d:50:00:ca:f9:46:a8:33:c1:85:2a:9f:
0f:ff:87:0c:ac:6e:d3:9f:4e:bd:52:bd:dd:e8:25:b1:42:ce:
4d:7a:6e:e6:fd:0f:65:d1:67:67:48:93:ee:ff:45:ec:bf:1b:
29:f8:34:25:54:1a:0d:f9:40:88:94:6b:1b:b5:8e:95:c8:bc:
02:7c:7b:94:cd:d5:45:58:04:66:21:63:60:09:65:9a:ea:83:
17:f4:a6:8e:95:47:0e:a2:b7:1f:e2:6f:e0:bc:02:29:05:7b:
17:73:0c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:23 2023 by rpki-client on console-fra.rpki-client.org