Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/Ch7IPCcDxRUdrmrXoOCA4PkfKRQ.roa
File: Ch7IPCcDxRUdrmrXoOCA4PkfKRQ.roa (raw, json)
Hash identifier: RElhKtYEXGaaaIxiM9OC+xunnpauYYIeRQvnaRdinzQ=
Subject key identifier: 0A:1E:C8:3C:27:03:C5:15:1D:AE:6A:D7:A0:E0:80:E0:F9:1F:29:14
Certificate issuer: /CN=b30bf5d9085fe5afe5e201d7c236cef9be9235af
Certificate serial: 01837A5BA002C4F8547C05C4973EA080D886
Authority key identifier: B3:0B:F5:D9:08:5F:E5:AF:E5:E2:01:D7:C2:36:CE:F9:BE:92:35:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swv12Qhf5a_l4gHXwjbO-b6SNa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/Ch7IPCcDxRUdrmrXoOCA4PkfKRQ.roa
Signing time: Mon 26 Sep 2022 15:12:48 +0000
ROA not before: Mon 26 Sep 2022 15:12:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 185.217.3.0/24 maxlen: 24
185.246.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7a:5b:a0:02:c4:f8:54:7c:05:c4:97:3e:a0:80:d8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30bf5d9085fe5afe5e201d7c236cef9be9235af
Validity
Not Before: Sep 26 15:12:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a1ec83c2703c5151dae6ad7a0e080e0f91f2914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a6:b3:46:01:9f:9c:07:fb:0b:9e:64:75:ce:
17:60:cb:5d:59:5b:0e:6a:b6:3a:b7:37:19:8c:3c:
d2:a6:12:a7:3a:bc:f9:8e:4a:e2:6b:ec:f0:f0:f0:
b4:9f:23:62:bb:1f:56:e4:8f:58:5d:4d:a7:1e:e0:
ef:8e:4b:bf:a5:cd:af:41:5f:c6:81:28:40:4d:e9:
e7:88:ca:63:78:85:43:b8:5d:1b:18:6c:d7:ee:52:
33:1e:d7:78:6c:23:98:ba:84:08:f9:db:40:0d:12:
73:52:7b:91:c4:cc:34:55:79:c1:97:f1:17:c1:9e:
c9:3a:56:14:2c:08:6f:8e:27:d2:8c:f2:6c:66:53:
86:6f:f1:5d:4a:00:e3:59:32:15:2b:68:c1:c7:44:
a0:dc:61:40:dc:d2:44:ed:fd:93:34:13:f1:75:03:
c3:99:8d:fb:d8:37:bb:cb:27:40:43:aa:fb:08:69:
ac:45:8e:4d:a1:74:4b:42:40:c5:00:7b:fa:52:b1:
a4:e9:4a:04:b2:d6:b2:e4:fc:05:e4:ff:cc:c3:cb:
9f:47:5d:b4:9b:37:83:67:c0:f7:35:56:d1:cc:b1:
ce:99:64:39:f0:f7:f3:1a:f5:bb:2d:89:16:35:a7:
7a:0f:45:9b:8a:45:3e:e3:3e:73:b0:7a:ec:03:86:
26:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1E:C8:3C:27:03:C5:15:1D:AE:6A:D7:A0:E0:80:E0:F9:1F:29:14
X509v3 Authority Key Identifier:
keyid:B3:0B:F5:D9:08:5F:E5:AF:E5:E2:01:D7:C2:36:CE:F9:BE:92:35:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swv12Qhf5a_l4gHXwjbO-b6SNa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/Ch7IPCcDxRUdrmrXoOCA4PkfKRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/swv12Qhf5a_l4gHXwjbO-b6SNa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.3.0/24
185.246.131.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:5a:85:cd:37:12:e3:16:e5:a5:47:1f:26:dd:c3:40:7d:7c:
a3:58:80:fc:5c:11:b0:25:9e:de:34:61:7f:0a:ab:8b:e4:0c:
4b:fc:32:a2:25:c6:3b:01:e2:fe:db:02:c7:b4:bd:16:8d:f2:
e2:0d:01:38:3e:94:7d:be:2a:d5:8d:59:10:a6:91:fe:46:09:
07:3b:ca:c7:33:33:05:33:96:34:58:0f:16:3d:f0:cc:53:81:
e2:78:37:7a:2f:90:6c:7b:7d:0b:56:15:d1:c5:fd:6d:8d:27:
0f:ac:d3:70:c9:cb:24:f5:cd:a6:d5:b5:7d:4f:b6:a5:74:99:
a7:f2:63:bc:cf:0b:91:64:5f:7a:04:e1:32:c8:b9:fa:27:93:
7a:8e:bc:5a:d0:42:6a:e5:10:39:3d:b3:89:60:a7:c1:b7:6a:
6e:d3:68:b0:9d:d3:80:09:e4:31:bc:eb:d5:f9:e6:bc:c2:f8:
b3:88:65:a8:19:63:72:53:ef:cd:cc:0d:89:00:25:71:8c:2c:
e3:4c:e4:e8:52:93:d2:18:de:bc:73:9a:23:61:86:c8:bc:15:
c6:18:af:9c:cc:33:83:12:0f:9c:cb:c4:4d:4b:7d:5d:3e:9a:
25:8b:b4:5c:4d:19:b4:86:be:d7:71:bc:95:f4:ed:ea:ed:29:
6b:b9:bf:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:55 2024 by rpki-client on console-fra.rpki-client.org