Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f64637-c7df-4a7c-bd16-2d7b9e917e87/1/awuDgSioCSi_ZKnzNAvaAG3iPZo.roa
File: awuDgSioCSi_ZKnzNAvaAG3iPZo.roa (raw, json)
Hash identifier: 8IePbBknCEkqtoAMTE1qIuYdREv5ldPZiCLKmCdCIGs=
Subject key identifier: 6B:0B:83:81:28:A8:09:28:BF:64:A9:F3:34:0B:DA:00:6D:E2:3D:9A
Certificate issuer: /CN=3441eb5d7addba0e5afbf82a8c7d301ae41b9185
Certificate serial: 01856F8B5FC22D5BC8C5398C2B30EEA39659
Authority key identifier: 34:41:EB:5D:7A:DD:BA:0E:5A:FB:F8:2A:8C:7D:30:1A:E4:1B:91:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEHrXXrdug5a-_gqjH0wGuQbkYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f64637-c7df-4a7c-bd16-2d7b9e917e87/1/awuDgSioCSi_ZKnzNAvaAG3iPZo.roa
Signing time: Sun 01 Jan 2023 22:54:43 +0000
ROA not before: Sun 01 Jan 2023 22:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24904
IP address blocks: 185.212.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:5f:c2:2d:5b:c8:c5:39:8c:2b:30:ee:a3:96:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3441eb5d7addba0e5afbf82a8c7d301ae41b9185
Validity
Not Before: Jan 1 22:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b0b838128a80928bf64a9f3340bda006de23d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f9:b6:79:b2:a4:b0:10:e6:ca:07:28:b1:27:
1c:63:8e:c1:ea:31:ef:48:bd:0b:33:fe:bf:b5:29:
f5:a6:23:d5:d7:79:c3:00:d8:3b:87:bc:27:c5:5f:
ab:27:37:6d:fa:8d:70:e5:e8:2a:ba:b0:0d:34:4e:
35:27:db:30:d3:10:fe:58:b5:7b:6c:e8:48:7b:2e:
67:66:12:6d:c0:dc:5e:45:c1:ee:23:18:89:87:c8:
bf:7a:f1:4a:b6:02:fd:47:cb:96:40:28:72:84:f3:
d3:9d:83:25:15:7d:b8:1a:cb:28:2b:59:84:a0:2b:
29:7f:47:a6:3b:7e:cf:bd:e5:d1:ce:29:30:0f:b7:
f0:20:59:cb:b1:43:38:04:24:d2:49:66:6c:9a:26:
29:25:0d:39:73:9f:7e:b8:27:ac:82:0f:be:c2:58:
33:c6:61:ab:53:5d:bf:cc:10:d3:99:96:69:f0:66:
06:04:c6:dc:fd:63:98:1e:a4:54:a8:fe:69:1d:26:
d8:b8:c3:88:39:06:35:96:b8:e2:04:0a:32:c7:3f:
dc:e8:e3:e6:d1:49:d9:8b:ef:0e:5b:48:ae:41:1b:
44:0d:c0:81:81:2b:95:da:a4:dd:eb:e9:a3:d1:72:
9d:21:67:38:ae:52:1d:47:cf:25:6e:e1:66:50:3e:
f9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0B:83:81:28:A8:09:28:BF:64:A9:F3:34:0B:DA:00:6D:E2:3D:9A
X509v3 Authority Key Identifier:
keyid:34:41:EB:5D:7A:DD:BA:0E:5A:FB:F8:2A:8C:7D:30:1A:E4:1B:91:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEHrXXrdug5a-_gqjH0wGuQbkYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f64637-c7df-4a7c-bd16-2d7b9e917e87/1/awuDgSioCSi_ZKnzNAvaAG3iPZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f64637-c7df-4a7c-bd16-2d7b9e917e87/1/NEHrXXrdug5a-_gqjH0wGuQbkYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.212.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:6c:92:a6:e3:e6:61:c0:b9:95:87:7f:7b:f3:af:dc:97:cf:
37:2a:64:e9:11:53:fc:4b:4a:a5:15:bb:b5:38:2c:73:84:cc:
fd:86:01:c0:33:9c:cc:a3:8a:37:87:c5:71:b5:9a:a1:dd:e3:
4a:31:1c:28:1b:51:e5:90:9d:67:5f:a1:75:19:2b:1d:dd:24:
92:8d:7c:4e:72:18:52:9d:ad:e7:3c:06:ff:10:63:3b:a8:89:
ec:9f:3c:8d:6a:98:43:a1:44:db:49:16:ae:e9:ab:a2:c9:68:
cb:cc:b8:54:9c:c3:29:0a:ea:8f:39:ae:de:c9:e0:44:17:cf:
16:aa:20:96:7d:d0:b6:3c:87:b2:91:c1:96:7c:b3:47:7c:b1:
ae:ea:94:a1:df:70:72:f9:28:22:ca:12:1a:09:b3:5f:9c:f8:
a1:55:0c:9f:15:69:5f:e8:96:9e:90:2e:3d:ea:96:4b:e8:70:
bb:75:7a:48:8c:43:e2:7e:1c:57:09:59:3d:61:e7:7d:42:41:
93:45:c3:73:bf:fa:83:2a:5b:77:5c:16:83:dc:73:91:29:2c:
36:d7:33:32:13:5c:4f:49:f8:fe:4f:08:0a:3e:af:1d:62:1e:
3e:e0:c9:9b:6e:87:eb:2d:fa:44:1f:ec:36:da:a0:4b:e3:d5:
8b:b5:5c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:14 2025 by rpki-client