Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2b3515-7fe7-426c-892e-4f0431fc39ab/1/KuYIYIokehykOt4zzOQUUoPtXLo.roa
File: KuYIYIokehykOt4zzOQUUoPtXLo.roa (raw, json)
Hash identifier: Y5UOnixP7IxVLsgZ+sdTMJCGeJoreYn0LCkxMKs1Vk0=
Subject key identifier: 2A:E6:08:60:8A:24:7A:1C:A4:3A:DE:33:CC:E4:14:52:83:ED:5C:BA
Certificate issuer: /CN=d2c0ee2bba97c7720487d35a3836e4d78a8302a4
Certificate serial: 044A547F
Authority key identifier: D2:C0:EE:2B:BA:97:C7:72:04:87:D3:5A:38:36:E4:D7:8A:83:02:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sDuK7qXx3IEh9NaODbk14qDAqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2b3515-7fe7-426c-892e-4f0431fc39ab/1/KuYIYIokehykOt4zzOQUUoPtXLo.roa
Signing time: Sat 01 Jan 2022 08:57:56 +0000
ROA not before: Sat 01 Jan 2022 08:57:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213085
IP address blocks: 185.180.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71980159 (0x44a547f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c0ee2bba97c7720487d35a3836e4d78a8302a4
Validity
Not Before: Jan 1 08:57:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ae608608a247a1ca43ade33cce4145283ed5cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:44:51:d5:af:8a:10:27:4b:f2:ab:e1:7c:
ee:bc:3d:95:26:64:71:af:99:ea:dd:74:8b:14:8a:
bb:d4:9e:bb:06:b1:d6:3f:ec:87:1c:97:09:93:16:
89:9d:da:21:6c:57:d8:f6:33:9d:8f:f8:2c:55:02:
2a:eb:64:fa:66:bf:98:f2:24:70:fc:de:ed:e2:fb:
d5:7e:63:24:29:d2:f5:61:55:06:75:a4:e0:6c:6c:
b0:df:50:51:5e:38:c2:7c:b2:b6:93:b7:99:41:f5:
42:82:34:fe:6e:82:c6:29:15:6c:54:17:18:73:80:
91:18:86:34:01:b1:d4:4a:dc:e2:b7:71:dd:b1:a5:
41:17:a7:48:03:bb:c8:86:18:ac:0a:2f:45:06:37:
bb:5d:94:df:7a:37:b0:82:58:72:cd:05:03:36:d9:
51:fa:9d:d1:46:53:dd:f2:ff:59:b3:ef:a7:b6:bc:
cc:a6:4d:55:1d:bc:3d:93:1f:1d:92:52:89:39:db:
5c:a7:a0:f0:8b:fb:07:9c:bf:65:76:7a:76:95:28:
50:f1:fb:55:10:15:00:6b:65:b6:cc:88:10:9f:92:
cf:b4:b5:79:aa:0a:61:e3:96:0e:d0:01:14:b1:e9:
03:25:eb:85:99:88:31:04:dc:e1:e9:b2:15:2e:6f:
63:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E6:08:60:8A:24:7A:1C:A4:3A:DE:33:CC:E4:14:52:83:ED:5C:BA
X509v3 Authority Key Identifier:
keyid:D2:C0:EE:2B:BA:97:C7:72:04:87:D3:5A:38:36:E4:D7:8A:83:02:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sDuK7qXx3IEh9NaODbk14qDAqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2b3515-7fe7-426c-892e-4f0431fc39ab/1/KuYIYIokehykOt4zzOQUUoPtXLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2b3515-7fe7-426c-892e-4f0431fc39ab/1/0sDuK7qXx3IEh9NaODbk14qDAqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.147.0/24
Signature Algorithm: sha256WithRSAEncryption
81:62:c3:d7:5f:c9:72:a9:2b:62:85:35:4f:39:09:82:f7:3f:
0b:56:d9:6c:a2:f3:2a:e4:75:be:90:ef:87:96:bf:50:39:7f:
74:9e:d1:dc:2b:38:6a:c1:7e:08:55:41:37:28:98:e6:57:29:
4a:d3:ae:b7:f5:0a:c6:2e:d7:3d:98:69:f8:42:87:78:00:f2:
f5:b6:52:f2:b6:a2:b4:8a:c5:52:5e:6f:d9:5e:32:41:19:6f:
c6:d8:5c:5e:27:e7:23:9a:6c:12:78:89:4c:d1:2c:30:7a:ed:
4e:38:70:f9:75:3b:41:49:48:a0:5c:4f:91:d0:7c:ed:48:8b:
3a:4a:1b:dd:f7:3f:8a:a4:97:ce:58:eb:84:4c:9e:83:86:9e:
7c:6b:cd:06:be:78:cd:b7:45:d3:97:a2:05:4b:b8:d5:85:99:
9c:4d:f9:f4:75:a1:2c:2d:44:1c:fe:81:b4:ea:96:1f:63:6c:
6e:30:ff:a6:b6:0c:5e:34:ec:6a:53:b2:99:ce:15:06:dc:9c:
38:cd:ae:ba:e7:ad:b0:cf:42:36:90:ce:2f:99:88:5f:ff:1a:
6f:58:f4:4d:ea:de:4f:4b:10:ac:38:d2:eb:5d:bf:f4:72:b8:
e9:36:ac:5d:3a:e8:1e:50:fa:44:35:b3:10:05:dc:df:cb:99:
82:c6:95:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:08 2024 by rpki-client on console-ams.rpki-client.org