Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/35f632-db7b-4fb4-98a6-79d817202ae5/1/SrY1DxDLcUJosFnWAXk5oy4-XzY.roa
File: SrY1DxDLcUJosFnWAXk5oy4-XzY.roa (raw, json)
Hash identifier: DgW33cnWLvjWDawHa+zG2HUuHaaXh8MkLBKNbv4M4/M=
Subject key identifier: 4A:B6:35:0F:10:CB:71:42:68:B0:59:D6:01:79:39:A3:2E:3E:5F:36
Certificate issuer: /CN=cee0c0a5ac133a8f0f248161276e893985d8d3e1
Certificate serial: 0185729ED3E4F505BCAAC3FB9ADE0CA5C1A4
Authority key identifier: CE:E0:C0:A5:AC:13:3A:8F:0F:24:81:61:27:6E:89:39:85:D8:D3:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zuDApawTOo8PJIFhJ26JOYXY0-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/35f632-db7b-4fb4-98a6-79d817202ae5/1/SrY1DxDLcUJosFnWAXk5oy4-XzY.roa
Signing time: Mon 02 Jan 2023 13:14:49 +0000
ROA not before: Mon 02 Jan 2023 13:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203576
IP address blocks: 185.251.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:d3:e4:f5:05:bc:aa:c3:fb:9a:de:0c:a5:c1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cee0c0a5ac133a8f0f248161276e893985d8d3e1
Validity
Not Before: Jan 2 13:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ab6350f10cb714268b059d6017939a32e3e5f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:cf:b6:19:0a:f9:a7:a5:5a:d5:8f:23:12:
d9:66:07:20:8e:cf:39:30:f4:4b:ea:ff:6f:c2:bb:
66:0b:aa:70:94:c6:d2:f2:d4:78:1b:65:c1:1e:11:
ab:80:7a:e9:ee:28:79:aa:20:fd:d1:d2:93:ed:40:
38:36:73:79:2b:8f:e0:1c:24:a5:0a:fe:83:57:16:
6b:f2:3b:0e:2f:4b:16:4b:5b:c3:ce:ad:27:19:9f:
e7:ac:1f:cd:14:f3:8a:b9:f8:7c:c0:bc:c5:0a:73:
ab:08:4d:77:b3:23:8f:9b:68:14:2b:e8:d7:ce:7f:
fa:29:13:25:29:58:1f:ba:63:c7:25:f8:6b:ca:ee:
d0:bc:04:9c:56:b2:19:e9:56:a0:0f:eb:6d:ca:93:
14:8d:cf:40:59:45:ae:89:f4:26:ca:db:fb:c3:77:
3e:7b:52:8e:e3:e4:2a:24:dc:1e:5e:3c:86:c5:56:
42:b3:69:fe:bf:21:29:d9:32:47:f2:cb:15:d8:26:
5c:bc:f3:d3:6d:2c:91:36:b5:05:02:fb:39:df:a2:
ea:eb:76:c8:a5:72:cf:bd:3a:25:76:79:ac:fd:24:
c8:6e:cc:66:b9:1a:54:9f:c0:35:6a:58:4c:fe:e1:
87:06:6e:1d:82:ba:4f:a7:99:84:cd:71:f0:0a:47:
78:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B6:35:0F:10:CB:71:42:68:B0:59:D6:01:79:39:A3:2E:3E:5F:36
X509v3 Authority Key Identifier:
keyid:CE:E0:C0:A5:AC:13:3A:8F:0F:24:81:61:27:6E:89:39:85:D8:D3:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zuDApawTOo8PJIFhJ26JOYXY0-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/35f632-db7b-4fb4-98a6-79d817202ae5/1/SrY1DxDLcUJosFnWAXk5oy4-XzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/35f632-db7b-4fb4-98a6-79d817202ae5/1/zuDApawTOo8PJIFhJ26JOYXY0-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.180.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:d3:dc:da:24:d2:1d:47:dd:8b:85:6e:e2:58:f9:96:e2:5f:
c8:92:f1:eb:59:dc:da:d3:e0:6d:5e:8d:c0:53:d0:25:2b:43:
8b:52:9d:93:e9:47:48:65:98:86:5e:58:6d:56:29:1c:62:8d:
0b:b4:ac:36:7f:57:1a:7e:be:d4:7e:30:11:61:76:0c:75:46:
a7:9f:82:2c:2d:4e:42:6d:b1:4a:7a:03:40:33:69:91:9c:42:
92:c4:40:d8:d3:14:1e:60:3d:21:8f:40:3e:94:91:dd:9a:d5:
59:34:32:e0:17:97:86:b6:0d:65:55:e4:fe:b8:b8:45:15:08:
33:93:a9:10:20:2e:87:91:cc:4a:35:13:f5:20:1c:3a:51:4c:
62:fb:d9:86:4a:ad:2a:35:a9:6d:d4:fc:5f:c6:f5:ed:7b:f2:
67:50:d6:30:bd:60:ab:9c:67:4b:70:82:00:1e:78:5b:01:0b:
82:39:c7:67:5b:f5:a8:5c:51:7f:72:ed:5d:6c:e8:00:a2:f0:
b7:50:e1:71:25:49:37:86:3a:1a:0e:dd:69:68:35:0e:3d:89:
3c:98:d3:27:3f:52:60:9f:08:68:8a:5d:32:35:96:45:4e:51:
cf:36:34:e2:fd:de:3f:ab:eb:72:28:97:83:20:d8:92:80:ab:
f0:3f:0f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:30 2023 by rpki-client on console.sobornost.net