Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/99c246-0fa2-44d1-a8f1-a06178ef3f50/1/xgQj4pO8P-DOUuX6J5j5G_vBWQ8.roa
File: xgQj4pO8P-DOUuX6J5j5G_vBWQ8.roa (raw, json)
Hash identifier: NJmjvSO12knTuKFt8HTR2/rBojJL2NZ9GUEyNVMnQpo=
Subject key identifier: C6:04:23:E2:93:BC:3F:E0:CE:52:E5:FA:27:98:F9:1B:FB:C1:59:0F
Certificate issuer: /CN=7b8415ffab220f31629dad1e716423e2cd703eb0
Certificate serial: 0EDB0E16
Authority key identifier: 7B:84:15:FF:AB:22:0F:31:62:9D:AD:1E:71:64:23:E2:CD:70:3E:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4QV_6siDzFina0ecWQj4s1wPrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/99c246-0fa2-44d1-a8f1-a06178ef3f50/1/xgQj4pO8P-DOUuX6J5j5G_vBWQ8.roa
Signing time: Sat 01 Jan 2022 13:06:32 +0000
ROA not before: Sat 01 Jan 2022 13:06:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209197
IP address blocks: 185.207.31.0/24 maxlen: 24
185.207.30.0/24 maxlen: 24
185.207.30.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249237014 (0xedb0e16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8415ffab220f31629dad1e716423e2cd703eb0
Validity
Not Before: Jan 1 13:06:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c60423e293bc3fe0ce52e5fa2798f91bfbc1590f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:40:f2:56:87:83:bb:c9:2d:3e:ce:60:96:
24:d8:5e:16:34:60:92:02:e9:b2:4c:bb:97:69:f8:
21:70:fb:52:4b:dd:6b:92:d6:d8:ab:f5:0d:e4:b7:
7f:2b:14:84:18:cb:1b:d3:02:2d:67:c2:5d:79:b9:
ac:dd:3f:cc:a9:31:52:33:0d:e4:7d:51:64:df:d0:
fb:38:f2:dc:ad:ea:0f:de:0c:5c:75:eb:47:d6:4c:
6c:fb:4e:c0:ad:4d:b9:a4:0d:36:03:3f:c8:cc:2d:
39:3a:b9:1c:bb:2e:21:ff:33:c2:64:30:b5:6d:00:
a9:cc:5b:97:83:ca:06:22:0a:28:96:d5:c5:89:08:
88:6b:49:2b:1e:02:2b:ac:84:b1:a4:55:a6:11:54:
dc:a4:ca:fe:e8:02:91:54:4f:69:5f:48:f5:55:51:
fd:76:e3:85:1c:ac:06:2e:c7:45:a7:1a:28:1a:f5:
34:1f:75:5e:57:4d:2c:43:37:74:fc:d9:c4:36:4b:
5c:b6:ef:af:7e:0e:45:51:65:6a:9b:9b:68:39:77:
16:1c:a3:d6:5f:57:56:0a:2f:c2:da:a6:b0:b7:25:
ef:07:3a:f7:c2:c8:7b:9b:74:70:b7:9f:c3:de:1e:
89:4e:48:e2:49:23:86:08:4a:cc:ca:4d:62:d8:5c:
eb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:04:23:E2:93:BC:3F:E0:CE:52:E5:FA:27:98:F9:1B:FB:C1:59:0F
X509v3 Authority Key Identifier:
keyid:7B:84:15:FF:AB:22:0F:31:62:9D:AD:1E:71:64:23:E2:CD:70:3E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4QV_6siDzFina0ecWQj4s1wPrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/99c246-0fa2-44d1-a8f1-a06178ef3f50/1/xgQj4pO8P-DOUuX6J5j5G_vBWQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/99c246-0fa2-44d1-a8f1-a06178ef3f50/1/e4QV_6siDzFina0ecWQj4s1wPrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.30.0/23
Signature Algorithm: sha256WithRSAEncryption
55:34:14:1a:9d:4a:3f:47:95:e0:aa:2a:ce:7b:f1:bf:e6:4a:
51:9c:89:b2:90:02:a7:1d:ed:e2:c3:8c:85:a4:6a:e1:12:16:
6e:25:19:34:81:02:93:c3:8e:36:de:23:9e:5c:21:64:2e:aa:
2e:04:1e:23:ed:a1:7d:a1:1c:6a:7d:8c:7d:b0:d1:14:73:25:
85:93:fd:f2:ff:7b:d4:ea:d7:fa:01:4e:c0:4f:25:02:b0:80:
aa:04:09:af:7c:c3:c5:82:86:93:d1:f8:bb:e4:5c:4f:3e:e5:
59:a5:48:80:76:af:30:75:70:c2:77:e8:57:81:cb:f5:a1:40:
90:dd:5e:74:b9:d7:19:44:5e:39:45:5e:fc:93:c4:e0:42:86:
52:59:eb:c4:63:2a:61:a0:12:5b:87:b5:d3:f3:12:2b:50:d5:
23:ec:0c:f7:b3:13:df:96:59:d1:06:42:ed:ce:3c:82:75:db:
b4:4b:43:d0:c0:42:99:41:95:8e:19:a8:39:cf:31:b1:5e:a9:
02:9a:9f:62:c9:dd:3e:85:c6:4c:3f:78:8d:39:a2:56:00:ae:
a8:82:66:4e:fa:a8:7b:04:2f:b2:19:32:9c:e1:c4:41:b3:aa:
05:73:01:4c:6b:d8:af:01:bd:fe:74:a4:77:97:12:df:a8:5f:
50:69:cf:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:22 2023 by rpki-client on console.sobornost.net