Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e894c0-e4bc-4b76-97fd-8ad49f2d7d33/1/1-Of7AVEkb02lJdbnSfQF3l1sAyM.roa
File: 1-Of7AVEkb02lJdbnSfQF3l1sAyM.roa (raw, json)
Hash identifier: MzQr5NLDCfbkzOtREZwF9ld31dY2A8QLAwn7f98BVzY=
Subject key identifier: F8:E7:FB:01:51:24:6F:4D:A5:25:D6:E7:49:F4:05:DE:5D:6C:03:23
Certificate issuer: /CN=617bc9238d33ab8fade7470325ce8293773a6b8d
Certificate serial: 01884E91D2FC5060F60F932F4EB7C3FC7F6F
Authority key identifier: 61:7B:C9:23:8D:33:AB:8F:AD:E7:47:03:25:CE:82:93:77:3A:6B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXvJI40zq4-t50cDJc6Ck3c6a40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/e894c0-e4bc-4b76-97fd-8ad49f2d7d33/1/1-Of7AVEkb02lJdbnSfQF3l1sAyM.roa
Signing time: Wed 24 May 2023 16:22:39 +0000
ROA not before: Wed 24 May 2023 16:22:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198193
IP address blocks: 185.212.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:91:d2:fc:50:60:f6:0f:93:2f:4e:b7:c3:fc:7f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617bc9238d33ab8fade7470325ce8293773a6b8d
Validity
Not Before: May 24 16:22:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8e7fb0151246f4da525d6e749f405de5d6c0323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:11:47:3a:ef:7b:5f:05:ac:89:bd:f2:19:ec:
1e:86:32:1a:e8:c1:98:c2:07:26:99:7f:e2:db:30:
43:09:c0:d2:30:c7:4b:25:68:ea:75:73:81:4a:b8:
ae:0c:2c:6a:44:1c:d4:53:4a:63:20:04:2b:9e:29:
cf:54:35:39:d4:9a:96:05:46:a4:22:ea:08:d0:51:
ab:02:38:08:4e:74:3a:88:dd:04:9f:21:02:9e:f0:
47:d8:c8:d9:93:24:af:98:1b:6e:7e:34:73:4c:5b:
b1:5a:01:c3:99:a2:bf:71:b5:88:bd:9e:4a:9d:24:
00:5e:8b:d3:87:d4:ed:86:95:2a:41:ad:4b:35:67:
ec:9d:dd:5e:c6:ad:26:4d:b2:02:4a:a9:46:4a:6b:
3d:7a:90:89:7c:fd:71:10:db:60:88:11:78:2e:54:
9f:02:ec:8a:8a:cf:77:66:57:f1:f3:c2:fa:d0:76:
b3:c4:ae:ec:a9:1d:96:52:13:67:dc:d6:e5:79:1a:
32:aa:9d:76:a4:09:19:e2:05:da:8d:7e:ab:18:59:
93:ed:17:a9:44:b5:09:05:22:8f:be:d4:dd:5d:3b:
ac:4d:5b:37:25:3c:bb:5f:ee:41:73:ac:69:c6:6b:
3d:e9:65:f8:c8:e9:76:3f:6d:39:2b:89:36:38:cc:
c0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E7:FB:01:51:24:6F:4D:A5:25:D6:E7:49:F4:05:DE:5D:6C:03:23
X509v3 Authority Key Identifier:
keyid:61:7B:C9:23:8D:33:AB:8F:AD:E7:47:03:25:CE:82:93:77:3A:6B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXvJI40zq4-t50cDJc6Ck3c6a40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e894c0-e4bc-4b76-97fd-8ad49f2d7d33/1/1-Of7AVEkb02lJdbnSfQF3l1sAyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e894c0-e4bc-4b76-97fd-8ad49f2d7d33/1/YXvJI40zq4-t50cDJc6Ck3c6a40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.114.0/24
Signature Algorithm: sha256WithRSAEncryption
29:06:0c:2f:75:3d:9a:72:50:ed:72:2b:75:0f:c8:f9:f7:f3:
9d:cb:36:ff:39:e0:a4:74:04:26:16:85:2f:4e:53:f5:24:38:
7c:29:7a:60:b4:5f:7a:e6:b3:ba:9e:16:37:19:d1:2c:57:21:
9c:a6:0b:0e:1d:2a:15:31:39:a8:0e:4f:e1:da:69:ce:77:eb:
eb:c2:24:c5:cf:74:7d:dd:08:86:15:8e:ef:d5:c8:a4:71:1e:
6d:83:11:0f:68:af:e9:22:a9:28:13:b5:c3:3b:bb:c6:b1:db:
bc:b6:75:24:a5:4d:32:02:bc:f7:4f:73:f6:bb:f9:5f:2e:d1:
da:57:43:7d:2c:e2:56:d8:b9:18:72:09:01:cd:42:69:14:c4:
57:76:33:98:b7:0d:b5:9a:c6:02:10:e4:c0:d1:79:0b:c5:0a:
43:48:3a:9c:46:c8:14:21:a6:5c:31:8c:01:c9:e8:c4:99:d9:
df:ca:d6:3a:7f:f1:13:3d:d9:e0:18:5e:c4:ae:a0:3c:66:e1:
41:8b:c0:f3:71:74:90:69:f1:d2:43:0d:c8:29:a3:bd:40:1f:
7c:6b:31:aa:49:e3:74:57:64:db:24:c6:3e:03:b9:6e:2d:eb:
f8:4c:3a:58:68:d1:d5:fa:f7:8d:13:52:99:f3:1c:03:df:d7:
70:59:a8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:55 2024 by rpki-client on console-fra.rpki-client.org