Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/8yhBKluMmM8gcy6756FTlkS83Cc.roa
File: 8yhBKluMmM8gcy6756FTlkS83Cc.roa (raw, json)
Hash identifier: 5QvcCsBEaJkBv6YjH1LFEz9OONleHquX1DLp5/4a3ek=
Subject key identifier: F3:28:41:2A:5B:8C:98:CF:20:73:2E:BB:E7:A1:53:96:44:BC:DC:27
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 01894AF2C7156905F4F2AE41F082FC82FE6D
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/8yhBKluMmM8gcy6756FTlkS83Cc.roa
Signing time: Wed 12 Jul 2023 16:32:51 +0000
ROA not before: Wed 12 Jul 2023 16:32:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.21.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4a:f2:c7:15:69:05:f4:f2:ae:41:f0:82:fc:82:fe:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jul 12 16:32:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f328412a5b8c98cf20732ebbe7a1539644bcdc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:07:0f:2f:eb:c2:15:2a:02:82:44:f3:5a:
be:78:06:a1:c5:1a:09:a6:a6:7a:54:3d:b2:f6:09:
b0:d5:a3:60:f6:a6:98:d6:cd:b0:3b:ce:8c:74:af:
d9:0e:a5:a1:a9:7b:48:88:ab:3a:3b:af:98:0a:b8:
01:85:4d:37:2c:69:0f:04:e3:df:0d:75:b2:40:ed:
de:87:0c:8a:b4:85:53:e3:93:4d:2b:05:d2:8d:3f:
43:35:bd:a3:4f:f0:85:ca:b2:45:37:d9:a6:46:a6:
76:bd:7b:bb:52:a8:b3:2f:86:10:18:4a:5e:c6:d7:
f8:f7:b6:e1:7d:6b:fd:ec:8d:ce:53:f1:7b:c9:80:
1c:2b:43:9e:49:23:eb:79:10:87:db:0a:c4:af:1e:
42:4e:e3:23:20:15:e7:08:6a:2c:e7:c9:c9:26:f9:
8f:88:57:58:0e:ac:27:96:20:f2:0f:0b:d3:da:0d:
ba:5b:60:3c:35:ae:c0:b7:c0:02:6f:d4:35:7d:07:
f7:47:2d:8d:42:7c:c7:0f:2f:b2:2d:1d:89:ed:2f:
5c:bd:fb:d5:9a:fe:1b:60:f2:fe:4f:e2:34:d2:dc:
74:80:a1:15:18:10:89:85:4e:a9:c0:3f:36:41:15:
bb:d3:1d:10:9f:47:5a:f3:58:07:63:32:13:1d:f1:
81:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:28:41:2A:5B:8C:98:CF:20:73:2E:BB:E7:A1:53:96:44:BC:DC:27
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/8yhBKluMmM8gcy6756FTlkS83Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.252.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:3e:3a:24:00:59:0a:d7:d0:2f:bb:ad:d7:f4:24:52:17:f3:
d9:bb:99:8d:5d:ae:7a:61:f4:1f:b2:f9:c0:31:58:df:26:bc:
5f:90:56:48:11:e6:b9:ad:52:b4:b7:9a:04:1d:a0:ca:ab:26:
b6:bd:c5:91:a4:91:a2:c1:26:e6:61:eb:d7:4c:66:f0:54:bf:
59:f1:33:1c:8e:c3:a8:cb:07:c0:71:08:a5:46:52:bd:25:de:
a0:76:19:eb:c4:97:5d:1d:7f:d3:cd:90:7a:62:b6:69:2d:f5:
ef:73:69:42:bb:8e:92:05:74:15:0c:38:15:40:9f:ba:d6:6b:
eb:3b:95:bc:5a:b4:de:20:4c:42:64:0a:a6:40:78:4b:03:04:
73:21:38:1f:29:ec:bd:ad:b0:33:22:6d:9b:d0:02:d8:bd:9b:
6b:ee:7b:76:2e:52:6e:8c:d5:60:e7:af:03:65:1d:44:32:0f:
67:9d:31:d1:dd:85:c2:94:ca:fd:16:79:28:6f:cc:8d:be:59:
e2:11:7c:ab:6f:d9:01:95:14:8e:ec:31:04:be:a5:53:9d:89:
15:23:0f:b5:74:f6:60:54:ab:11:44:a5:74:a6:7c:16:34:3b:
07:6c:76:b3:ce:6b:e4:a4:82:55:94:10:f7:e5:79:10:a5:08:
59:0e:df:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:47 2025 by rpki-client