Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/cKhx5WlzTQPa9UHsq2M1vDR_k4I.roa
File: cKhx5WlzTQPa9UHsq2M1vDR_k4I.roa (raw, json)
Hash identifier: toc0a0Kbunhd24m7jn504Pk3aWbLuS4nhzisWmrLJLA=
Subject key identifier: 70:A8:71:E5:69:73:4D:03:DA:F5:41:EC:AB:63:35:BC:34:7F:93:82
Certificate issuer: /CN=f998035895f95549c2cdaac3f005446cbdd11c02
Certificate serial: 018833C84B960FC73EC9BCDA4FD911A8DD24
Authority key identifier: F9:98:03:58:95:F9:55:49:C2:CD:AA:C3:F0:05:44:6C:BD:D1:1C:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/cKhx5WlzTQPa9UHsq2M1vDR_k4I.roa
Signing time: Fri 19 May 2023 11:32:24 +0000
ROA not before: Fri 19 May 2023 11:32:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205320
IP address blocks: 185.250.42.0/24 maxlen: 24
185.250.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:33:c8:4b:96:0f:c7:3e:c9:bc:da:4f:d9:11:a8:dd:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f998035895f95549c2cdaac3f005446cbdd11c02
Validity
Not Before: May 19 11:32:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70a871e569734d03daf541ecab6335bc347f9382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:cc:d4:2b:d7:7b:dc:fb:38:02:7e:59:84:
68:99:7a:e4:c4:77:c0:68:6a:6e:0a:c3:be:d0:cd:
b1:93:c7:10:77:0c:aa:fa:50:2a:ae:e0:65:80:45:
22:75:9f:f0:8a:97:97:f4:7b:91:fe:c4:7c:ac:6e:
3a:b3:2e:de:1e:a6:87:42:a9:46:43:96:53:0d:a2:
8e:5b:56:b2:f6:36:26:b6:2c:58:01:f2:0f:1d:4e:
5f:93:b1:63:8f:68:1f:26:f3:1f:8d:9c:f8:74:17:
1f:5e:c9:b2:8f:fe:7e:5f:2b:47:46:cb:e2:ee:df:
f9:c9:8c:60:4d:07:1d:3f:96:a6:3d:7f:f5:0f:4c:
8f:60:9c:cd:70:d7:30:b8:bd:0b:86:93:0f:e3:3d:
58:a2:4e:37:af:d6:55:ce:3f:26:f7:fa:46:cb:c8:
43:67:1e:82:12:2f:dd:ec:1d:52:78:66:c0:0d:4e:
20:77:e5:bb:86:eb:40:d4:ba:a8:98:94:7c:be:e6:
11:f0:f1:4c:a3:a2:1f:10:3f:9b:53:fc:89:ab:2a:
3a:38:00:4b:55:fa:13:22:13:5c:d0:b4:a5:cf:4b:
80:e2:11:7d:58:6d:6e:70:8e:8f:38:4a:8b:7b:b5:
a8:93:fc:8b:b2:be:bd:68:d3:dc:a7:84:42:16:2a:
74:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A8:71:E5:69:73:4D:03:DA:F5:41:EC:AB:63:35:BC:34:7F:93:82
X509v3 Authority Key Identifier:
keyid:F9:98:03:58:95:F9:55:49:C2:CD:AA:C3:F0:05:44:6C:BD:D1:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/cKhx5WlzTQPa9UHsq2M1vDR_k4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.42.0/23
Signature Algorithm: sha256WithRSAEncryption
82:92:1e:a9:ae:29:b4:d4:40:72:a4:20:03:b0:dd:13:ce:e0:
da:8f:17:67:26:d9:01:8b:15:b3:5b:b4:05:b4:6a:9e:4f:0d:
03:8f:d8:47:39:aa:c1:f2:1c:ce:02:c1:2f:71:cb:44:dd:04:
23:12:19:9c:00:73:14:a1:05:ab:be:18:a0:76:ca:0d:b6:0e:
bb:5e:14:8c:93:28:e7:aa:b4:b7:5c:64:e3:5c:3d:56:42:cc:
32:75:4a:fc:89:f0:20:2e:66:a4:42:68:6a:91:f4:da:20:33:
bb:b8:98:ee:82:31:c3:f5:5d:79:2e:60:4f:59:93:d8:15:de:
35:47:ff:1e:64:73:3d:50:0c:2d:5e:2d:71:aa:70:7b:20:71:
f3:e2:77:b5:a2:8a:0d:c3:f0:19:e1:4d:53:36:45:cb:ef:83:
71:f1:dc:6c:b0:59:03:c8:a0:d7:03:fb:35:48:56:db:fe:8a:
17:20:5d:f3:5a:d9:98:c4:7f:e1:1f:e7:d7:4c:4a:f7:98:a8:
86:8e:dc:e6:63:eb:1b:8a:5a:2e:a4:45:cd:51:cb:55:9f:89:
4f:f5:47:6f:68:54:08:f4:bf:b8:89:7f:0c:29:57:98:6d:27:
62:9a:57:cc:5a:f4:72:28:77:b2:8a:d9:56:4a:47:c4:70:45:
ec:1e:96:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:17 2025 by rpki-client