Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/aa6cab-0083-4453-91b4-08015a568389/1/izjMEIkK1fXHZ-nelpGf7EqJMw0.roa
File: izjMEIkK1fXHZ-nelpGf7EqJMw0.roa (raw, json)
Hash identifier: ty3DAs6SB03yaNYZpLEsOfCCzC7uoofmvlxAf9vZs0I=
Subject key identifier: 8B:38:CC:10:89:0A:D5:F5:C7:67:E9:DE:96:91:9F:EC:4A:89:33:0D
Certificate issuer: /CN=344c27728554e8fb3780c1e83e8e6517c659cd1b
Certificate serial: 010587C0
Authority key identifier: 34:4C:27:72:85:54:E8:FB:37:80:C1:E8:3E:8E:65:17:C6:59:CD:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEwncoVU6Ps3gMHoPo5lF8ZZzRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/aa6cab-0083-4453-91b4-08015a568389/1/izjMEIkK1fXHZ-nelpGf7EqJMw0.roa
Signing time: Sat 01 Jan 2022 12:59:23 +0000
ROA not before: Sat 01 Jan 2022 12:59:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196682
IP address blocks: 185.202.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17139648 (0x10587c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344c27728554e8fb3780c1e83e8e6517c659cd1b
Validity
Not Before: Jan 1 12:59:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b38cc10890ad5f5c767e9de96919fec4a89330d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ee:14:38:d0:c5:63:78:da:7d:11:65:cd:5a:
14:35:02:24:21:a3:9e:43:1e:fc:bf:09:94:9c:6a:
eb:0c:87:4e:c8:7e:fd:52:d1:1c:a4:c3:71:f5:30:
bb:a0:9a:06:fe:b0:15:69:6a:0d:80:1e:4c:d7:f4:
0c:af:55:eb:7a:36:57:20:7e:ae:e1:9f:13:5c:60:
34:d2:94:78:fd:26:73:b5:b8:84:d6:22:e2:d2:e4:
47:c8:6f:19:bc:d1:e0:ed:46:db:5f:00:e5:2c:e4:
e4:d8:a2:2f:60:8d:f2:cd:b9:eb:28:05:43:3a:4f:
74:44:bf:19:14:11:4c:74:d6:3e:69:9b:26:cc:a4:
fc:6b:6c:fb:01:d5:ca:c0:7e:53:50:3e:ed:c8:c6:
83:37:6a:52:87:60:33:4e:62:71:31:12:e0:32:e9:
af:3d:cb:89:71:70:0f:f0:e6:b5:3e:fb:f2:65:fc:
42:f8:a2:a5:9c:27:a4:40:b0:59:df:de:47:1b:d8:
bc:a6:94:bb:ae:89:08:6f:3a:ef:0f:bc:7e:46:00:
b5:f1:eb:d8:cf:3f:a1:af:d6:d2:d6:48:e9:50:93:
ae:2c:e6:b8:39:ee:23:62:1b:fb:e2:e4:c9:69:07:
d6:e3:c3:1a:c9:1e:78:6f:7e:92:03:29:54:1e:08:
99:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:38:CC:10:89:0A:D5:F5:C7:67:E9:DE:96:91:9F:EC:4A:89:33:0D
X509v3 Authority Key Identifier:
keyid:34:4C:27:72:85:54:E8:FB:37:80:C1:E8:3E:8E:65:17:C6:59:CD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEwncoVU6Ps3gMHoPo5lF8ZZzRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aa6cab-0083-4453-91b4-08015a568389/1/izjMEIkK1fXHZ-nelpGf7EqJMw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aa6cab-0083-4453-91b4-08015a568389/1/NEwncoVU6Ps3gMHoPo5lF8ZZzRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.107.0/24
Signature Algorithm: sha256WithRSAEncryption
88:38:3c:d3:73:9c:4a:40:ff:af:c5:c7:bf:d5:dc:10:0e:e4:
ed:27:56:13:b1:76:98:b5:73:2f:01:d4:d8:97:dc:e5:1c:94:
0e:2c:4c:16:dc:cc:5f:b3:79:d8:7d:b1:91:aa:cb:ff:cd:41:
d5:b1:89:a1:e2:31:c3:14:c1:bc:30:d9:41:9f:3f:93:d2:eb:
13:a7:f2:b8:3a:ca:c6:da:0a:bb:b7:95:49:d5:e2:43:f1:ca:
8e:a7:eb:65:42:7c:67:d7:27:a8:b8:21:df:f8:c9:7e:30:d1:
d2:95:18:a7:a9:ef:86:58:6d:3d:03:a4:d7:97:ed:67:44:9e:
5f:f4:8b:a4:0f:e0:57:f1:43:22:cf:d5:dc:81:e7:02:9f:84:
88:3a:0e:cf:7b:25:10:f1:d5:84:de:ea:fd:41:6d:00:ee:9d:
4e:37:3d:f0:e8:6b:4a:ed:40:ca:3d:2a:13:a6:c3:d6:4e:9e:
e1:de:37:a9:04:50:fb:03:5e:45:1c:ae:d9:e0:e3:3e:05:02:
6f:5e:74:21:c8:db:ab:ce:4f:5c:2c:c6:af:ff:a0:92:b7:f5:
7e:0a:db:17:f5:39:dd:2a:ce:07:f7:34:1c:2c:ed:76:e0:32:
a1:49:32:8f:95:ea:2c:01:3d:fc:14:4f:fc:2b:26:e0:00:1a:
44:ac:b7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:47 2024 by rpki-client on console-ams.rpki-client.org