Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/3c4bb6-6641-4073-93fa-7c6327e37b30/1/oT2hb-fZwLwsZdcCFefa6w-pvyU.roa
File: oT2hb-fZwLwsZdcCFefa6w-pvyU.roa (raw, json)
Hash identifier: wPXkdD+/NOdjPyRR2qBvowKbkw4HVnnlDZBDyvphKHw=
Subject key identifier: A1:3D:A1:6F:E7:D9:C0:BC:2C:65:D7:02:15:E7:DA:EB:0F:A9:BF:25
Certificate issuer: /CN=a182e24a4524c18e916e7d636be2d11c8e497c67
Certificate serial: 05D374D5
Authority key identifier: A1:82:E2:4A:45:24:C1:8E:91:6E:7D:63:6B:E2:D1:1C:8E:49:7C:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYLiSkUkwY6Rbn1ja-LRHI5JfGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/3c4bb6-6641-4073-93fa-7c6327e37b30/1/oT2hb-fZwLwsZdcCFefa6w-pvyU.roa
Signing time: Sat 01 Jan 2022 04:01:44 +0000
ROA not before: Sat 01 Jan 2022 04:01:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206429
IP address blocks: 185.252.152.0/22 maxlen: 22
2a0c:28c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97744085 (0x5d374d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a182e24a4524c18e916e7d636be2d11c8e497c67
Validity
Not Before: Jan 1 04:01:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a13da16fe7d9c0bc2c65d70215e7daeb0fa9bf25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:4d:42:bd:64:11:09:d1:46:94:f9:cf:a1:
e7:20:cd:8f:97:c5:e3:3b:76:7f:89:e0:40:fc:23:
72:b3:5f:42:db:b1:c9:95:79:aa:c2:2f:b3:68:da:
4a:f7:9c:5f:ea:4f:92:8f:d2:e9:6c:b7:0c:e6:73:
23:fd:f3:60:19:92:94:9c:2c:f4:0a:39:db:d8:14:
62:bd:d9:32:e9:b1:9b:ef:cb:cb:e5:e6:51:b0:31:
9d:a1:31:d1:b7:4b:ee:ca:25:5f:8d:da:25:c3:c5:
e0:94:99:08:6b:09:73:94:a6:f4:02:38:db:0b:69:
73:0e:6d:fb:57:63:02:d2:7e:3a:f4:f6:49:5f:75:
89:e5:8b:33:f5:9e:37:dd:0a:a9:ae:62:43:85:d5:
b7:cb:33:72:a1:68:1a:6e:d2:8d:ab:e9:8f:c3:87:
f4:83:df:32:73:9b:66:7d:1b:73:7d:d6:ba:8d:05:
55:27:aa:1c:f9:e9:07:8a:31:4d:a7:a6:24:eb:2d:
e0:0b:3f:9f:ee:7e:de:f3:bd:60:b1:3b:36:4d:19:
b3:29:86:82:ee:29:2f:fe:eb:65:00:bf:d1:5c:32:
f2:9b:ec:b3:36:1e:95:ce:5b:08:8d:9f:af:a8:b7:
f7:42:3f:cf:3c:22:f6:fa:47:16:01:4a:72:15:57:
eb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3D:A1:6F:E7:D9:C0:BC:2C:65:D7:02:15:E7:DA:EB:0F:A9:BF:25
X509v3 Authority Key Identifier:
keyid:A1:82:E2:4A:45:24:C1:8E:91:6E:7D:63:6B:E2:D1:1C:8E:49:7C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYLiSkUkwY6Rbn1ja-LRHI5JfGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/3c4bb6-6641-4073-93fa-7c6327e37b30/1/oT2hb-fZwLwsZdcCFefa6w-pvyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/3c4bb6-6641-4073-93fa-7c6327e37b30/1/oYLiSkUkwY6Rbn1ja-LRHI5JfGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.152.0/22
IPv6:
2a0c:28c0::/32
Signature Algorithm: sha256WithRSAEncryption
ab:8e:4e:78:59:6e:34:8e:c9:51:dd:d3:b7:ea:8f:74:77:2a:
80:34:28:f6:8d:64:77:02:94:94:a0:cf:02:41:af:4b:d7:71:
36:03:dc:0a:52:8b:13:48:14:b3:f4:64:89:0d:a0:e1:97:d5:
c6:8d:49:16:94:3f:4a:bf:84:77:97:76:79:51:85:c0:4d:ac:
4b:cc:6f:74:cf:56:62:db:ca:69:7a:75:53:32:87:46:ca:2a:
b4:51:c5:2e:77:40:36:38:d7:65:7e:e8:68:b2:3a:4a:84:f7:
2f:9b:32:e9:7e:c3:60:57:29:1f:8e:68:85:39:8e:43:56:cd:
59:57:4f:cf:bd:c3:98:ca:42:62:ee:ae:c4:d0:8b:9f:e1:88:
d3:30:88:11:0e:f7:49:65:9c:37:05:d3:94:94:8b:f9:52:44:
99:03:e3:b3:fa:f3:13:db:a0:2f:d2:97:3e:d2:fc:5a:da:0f:
b9:cc:74:c7:10:61:2b:db:d9:5d:ee:dc:4a:6e:cb:42:fa:21:
f6:2b:5c:6a:36:af:da:7c:df:15:07:69:81:4b:68:ba:75:75:
31:3e:e7:6b:f4:09:f7:ca:c9:a8:0f:4d:ad:24:46:e3:a5:8c:
43:18:d2:d7:88:cb:2b:d0:bd:a8:5e:f7:db:f3:73:a4:b6:9c:
06:9e:a3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:33 2025 by rpki-client