Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c4cdb0-d9f6-45d5-a524-f5d34f5e85d6/1/Ccm4uA4YCoPpTWCWFeEC8dRufuw.roa
File: Ccm4uA4YCoPpTWCWFeEC8dRufuw.roa (raw, json)
Hash identifier: xrf3hcrQ2HWi2zwVB+xVxtT9y4HkWRY1jkNTHk484iE=
Subject key identifier: 09:C9:B8:B8:0E:18:0A:83:E9:4D:60:96:15:E1:02:F1:D4:6E:7E:EC
Certificate issuer: /CN=2bf3746db04080c780a8bc6d95d70245818c0738
Certificate serial: FE06B8
Authority key identifier: 2B:F3:74:6D:B0:40:80:C7:80:A8:BC:6D:95:D7:02:45:81:8C:07:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_N0bbBAgMeAqLxtldcCRYGMBzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c4cdb0-d9f6-45d5-a524-f5d34f5e85d6/1/Ccm4uA4YCoPpTWCWFeEC8dRufuw.roa
Signing time: Sat 01 Jan 2022 10:04:40 +0000
ROA not before: Sat 01 Jan 2022 10:04:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208397
IP address blocks: 185.251.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16647864 (0xfe06b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf3746db04080c780a8bc6d95d70245818c0738
Validity
Not Before: Jan 1 10:04:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09c9b8b80e180a83e94d609615e102f1d46e7eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:53:d8:2f:b0:6e:3d:a0:e4:00:d9:9a:6e:c8:
4d:83:39:5f:79:a8:2b:a9:2e:2d:55:37:cb:1e:96:
9b:be:56:41:82:9b:cb:69:f6:ce:ab:9f:3e:01:f5:
d1:f4:8a:41:a9:28:07:5a:70:4c:a6:62:de:98:ce:
fb:f7:fd:b6:6c:ed:15:30:bb:74:18:95:03:08:74:
48:6a:92:af:ad:75:b6:77:59:70:79:39:25:39:0b:
40:88:64:9c:14:05:9c:77:da:9e:7d:40:3a:c7:dd:
f9:6a:10:ba:53:3d:d5:f3:b4:b5:47:eb:ed:d4:0f:
d7:78:c2:ed:4e:9d:b6:dc:f2:a2:1c:19:8b:13:d7:
87:08:16:7e:6f:78:92:44:08:3e:b4:bd:76:14:ae:
44:ed:c1:55:83:57:36:5d:fb:ae:2f:a6:10:bc:a4:
83:1c:1f:b9:0b:6b:76:b8:8d:fe:67:62:9f:a8:dc:
7a:db:8d:0a:11:56:fa:33:b1:c5:74:12:90:93:18:
fd:65:ce:0c:a5:ca:b1:56:24:8c:90:44:b0:08:c3:
c1:3e:06:e3:7c:ad:c4:60:e0:bb:a2:e6:7a:4c:54:
71:17:04:4f:51:05:14:d2:bd:45:48:05:35:f1:ba:
a9:a0:77:0f:06:65:8b:fc:b3:48:ac:aa:75:6d:23:
de:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C9:B8:B8:0E:18:0A:83:E9:4D:60:96:15:E1:02:F1:D4:6E:7E:EC
X509v3 Authority Key Identifier:
keyid:2B:F3:74:6D:B0:40:80:C7:80:A8:BC:6D:95:D7:02:45:81:8C:07:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_N0bbBAgMeAqLxtldcCRYGMBzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c4cdb0-d9f6-45d5-a524-f5d34f5e85d6/1/Ccm4uA4YCoPpTWCWFeEC8dRufuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c4cdb0-d9f6-45d5-a524-f5d34f5e85d6/1/K_N0bbBAgMeAqLxtldcCRYGMBzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.20.0/24
Signature Algorithm: sha256WithRSAEncryption
44:88:a5:b2:dd:e6:d5:a8:fb:e9:e1:c7:2f:df:3a:89:a1:c2:
9d:9c:da:3a:63:70:d1:28:7c:1c:d4:05:08:73:ba:9c:99:2d:
e4:a9:1b:32:bc:2a:13:1e:80:b9:c0:bc:10:a3:f9:18:e3:03:
f2:37:f7:27:72:0d:2c:3c:5b:ed:98:99:26:9e:f8:40:53:b4:
cb:47:6d:a3:7f:cc:34:bc:22:b2:55:90:c8:36:36:54:5b:b4:
14:e0:82:56:20:f3:01:6f:0c:dc:c9:44:c5:81:3f:2c:30:db:
9b:b3:57:ee:b6:c9:e4:80:14:a7:91:2a:c1:91:30:92:96:b0:
53:ad:e2:87:a1:cf:f6:13:7a:80:f6:ac:f0:3a:da:85:e6:6c:
4a:ad:9e:63:36:60:8e:06:4b:ce:d9:a8:b0:9e:e8:05:41:31:
7d:9e:4a:58:c7:50:de:e0:bb:67:ae:63:c1:b6:d1:8e:1b:46:
66:6a:f6:75:55:bc:a1:00:0d:5a:46:c6:40:38:f3:64:3e:4b:
89:db:06:90:1b:f9:33:08:2e:6a:c7:7b:c2:9b:e6:d9:d7:73:
69:03:83:e1:0b:6b:2d:1c:0b:cc:84:35:3d:8c:ca:7f:9a:f0:
00:66:83:22:73:09:50:13:9b:f5:ab:17:84:5d:69:e2:83:15:
5e:1e:58:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:22 2023 by rpki-client on console.sobornost.net