Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7f7b6c-4e00-47ea-83fe-6a1e923cb3b0/1/tFHmhD98jSnpjVNwVE0DeWc8NMg.roa
File: tFHmhD98jSnpjVNwVE0DeWc8NMg.roa (raw, json)
Hash identifier: oMj9crntLXQrGiipqys/y2cfzLa++4zSvrE2FeyY0dc=
Subject key identifier: B4:51:E6:84:3F:7C:8D:29:E9:8D:53:70:54:4D:03:79:67:3C:34:C8
Certificate issuer: /CN=061e2589afdbdea582306f13c983cf24e5d9e94c
Certificate serial: 018CC64B516F88A1CEA2173AE9A53FD9E987
Authority key identifier: 06:1E:25:89:AF:DB:DE:A5:82:30:6F:13:C9:83:CF:24:E5:D9:E9:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bh4lia_b3qWCMG8TyYPPJOXZ6Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7f7b6c-4e00-47ea-83fe-6a1e923cb3b0/1/tFHmhD98jSnpjVNwVE0DeWc8NMg.roa
Signing time: Mon 01 Jan 2024 18:31:13 +0000
ROA not before: Mon 01 Jan 2024 18:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 185.211.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:51:6f:88:a1:ce:a2:17:3a:e9:a5:3f:d9:e9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061e2589afdbdea582306f13c983cf24e5d9e94c
Validity
Not Before: Jan 1 18:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b451e6843f7c8d29e98d5370544d0379673c34c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:00:97:39:17:43:64:fe:61:f1:f9:2c:ef:2d:
9c:0f:11:21:8f:b4:53:49:62:f8:ef:06:b9:82:70:
5b:70:a8:c2:a1:26:0c:b2:bd:4b:c5:a4:de:06:6c:
c3:b6:eb:7d:39:ba:05:da:df:56:0a:2f:a2:0c:86:
f1:89:94:c7:72:e4:f3:c5:06:01:cc:14:74:55:cc:
d2:9a:0b:d1:d3:39:00:f0:9c:58:fc:46:df:7d:7e:
0b:5b:0b:03:20:77:24:a9:79:eb:18:42:d8:85:0c:
ac:65:b5:85:d4:3f:8a:7a:d0:34:9e:98:c9:76:36:
b6:d9:11:4c:32:0a:9d:a0:47:1a:fb:68:be:e1:5f:
3c:61:30:d4:b4:5a:78:62:7e:0d:77:0c:b3:a4:d6:
da:72:ab:af:51:ac:9d:85:63:68:c9:01:3a:3b:7d:
9c:ba:1e:28:db:b3:26:72:08:21:c1:54:fd:7e:f6:
44:ba:ae:29:af:ac:9c:b0:08:bd:bb:8f:d4:5c:8a:
a0:6c:3e:92:9e:7c:b0:91:31:b9:13:59:8a:01:9f:
f9:27:77:1d:a2:3a:82:5e:56:da:7f:3b:6f:b0:e2:
e7:91:0d:fc:85:7d:4a:1b:3a:b0:b1:e6:a8:a3:42:
f3:9f:5b:1e:0f:9b:ff:86:00:78:10:d2:7c:1b:69:
6d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:51:E6:84:3F:7C:8D:29:E9:8D:53:70:54:4D:03:79:67:3C:34:C8
X509v3 Authority Key Identifier:
keyid:06:1E:25:89:AF:DB:DE:A5:82:30:6F:13:C9:83:CF:24:E5:D9:E9:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lia_b3qWCMG8TyYPPJOXZ6Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7f7b6c-4e00-47ea-83fe-6a1e923cb3b0/1/tFHmhD98jSnpjVNwVE0DeWc8NMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7f7b6c-4e00-47ea-83fe-6a1e923cb3b0/1/Bh4lia_b3qWCMG8TyYPPJOXZ6Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.171.0/24
Signature Algorithm: sha256WithRSAEncryption
44:34:99:79:75:e0:a9:03:3a:f0:47:43:db:95:38:9c:09:cf:
53:2c:b0:0e:54:46:a6:2d:96:f3:c3:c6:42:65:f1:3f:3c:95:
fa:25:dd:53:d4:4e:9f:d2:fd:48:64:9b:bc:3e:1c:87:bd:a9:
91:b5:91:fc:2a:28:ac:4e:52:cc:fc:ea:12:3a:7f:dd:0e:ed:
b6:30:38:d3:a1:02:56:3b:c2:6f:06:94:5e:dc:a6:c9:84:01:
e6:39:3c:e4:44:04:66:cf:d2:d1:20:16:3a:f9:ae:58:08:3c:
4c:c0:a4:21:69:cf:21:d9:c8:b9:7d:6c:39:76:9d:85:75:5b:
a3:67:42:87:8d:3c:78:65:cc:7b:81:b8:98:0f:7a:1c:0f:a8:
dd:cf:d3:87:66:bc:48:d7:c3:12:03:03:4f:bf:e1:66:82:78:
c0:af:ae:76:7a:64:52:d9:3f:72:22:bc:5c:3f:e8:b1:d5:c6:
9b:a0:98:5b:49:72:bd:41:db:70:20:30:a4:b3:c9:84:41:82:
ca:8e:2f:2e:61:8c:81:ce:35:17:63:9f:eb:1f:51:c7:dd:ff:
69:1d:ad:ba:cb:08:b0:6e:e0:dd:35:d8:47:61:0b:e6:94:75:
36:49:ed:ca:58:f5:ca:53:83:bf:d7:15:02:b3:fe:83:09:2e:
51:fb:22:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 15:26:21 2024 by rpki-client on console.sobornost.net