Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/be4ba4-88ab-4f33-98ae-af6d2bdae087/1/IeS4ZT-CkIeaCkqGBhrDqz5cyKI.roa
File: IeS4ZT-CkIeaCkqGBhrDqz5cyKI.roa (raw, json)
Hash identifier: PunaOE0zZbeAfN1DYgtLoln7daRbk4/rGXzZrFy11O4=
Subject key identifier: 21:E4:B8:65:3F:82:90:87:9A:0A:4A:86:06:1A:C3:AB:3E:5C:C8:A2
Certificate issuer: /CN=3338a72ed4060ca1597e4dcbcd4de430bc4e1bbc
Certificate serial: 01822074894BE3E8FA270429A50495FE78F6
Authority key identifier: 33:38:A7:2E:D4:06:0C:A1:59:7E:4D:CB:CD:4D:E4:30:BC:4E:1B:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzinLtQGDKFZfk3LzU3kMLxOG7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/be4ba4-88ab-4f33-98ae-af6d2bdae087/1/IeS4ZT-CkIeaCkqGBhrDqz5cyKI.roa
Signing time: Thu 21 Jul 2022 11:11:24 +0000
ROA not before: Thu 21 Jul 2022 11:11:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 185.252.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:74:89:4b:e3:e8:fa:27:04:29:a5:04:95:fe:78:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3338a72ed4060ca1597e4dcbcd4de430bc4e1bbc
Validity
Not Before: Jul 21 11:11:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21e4b8653f8290879a0a4a86061ac3ab3e5cc8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:43:ee:4b:a6:fa:24:08:28:bb:89:70:51:42:
86:79:57:c6:b9:99:99:96:fb:aa:6e:93:8a:02:bf:
b4:2f:dc:02:2a:ac:33:b7:7e:de:a5:7d:cb:d5:28:
1a:2f:25:90:b1:a2:e8:71:9d:33:02:53:97:d7:91:
91:af:12:c0:89:af:b5:58:99:fb:ab:81:0c:36:ab:
aa:0d:d5:8b:9b:1a:71:24:59:f2:fd:f4:ac:7d:3b:
68:4b:3d:67:c4:f2:6a:6e:4f:82:fd:e1:47:28:ab:
51:82:64:25:81:c3:e9:d9:80:88:2f:2d:24:e3:ff:
2b:83:c9:f5:71:b5:19:f8:4e:76:30:e0:5a:bc:85:
b1:40:75:8b:26:f4:f9:b9:cb:83:c5:72:1e:86:0b:
7a:31:22:ec:94:00:cd:3a:4f:6c:c8:e5:09:4f:24:
ea:11:e7:24:53:10:68:62:71:7c:b2:10:1a:60:93:
ad:83:ee:bc:74:cf:d2:20:bc:d0:13:63:9f:a0:93:
28:a9:d3:53:71:fe:20:ab:be:45:d4:2a:41:0d:62:
fe:f8:d7:d3:46:71:85:3c:c0:11:ee:00:4b:b6:b9:
49:ba:37:07:dd:f7:3d:4a:cb:83:ee:cb:27:3a:bc:
f1:37:6a:b1:5d:ff:c6:4c:c4:cb:39:05:68:ac:c3:
df:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E4:B8:65:3F:82:90:87:9A:0A:4A:86:06:1A:C3:AB:3E:5C:C8:A2
X509v3 Authority Key Identifier:
keyid:33:38:A7:2E:D4:06:0C:A1:59:7E:4D:CB:CD:4D:E4:30:BC:4E:1B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzinLtQGDKFZfk3LzU3kMLxOG7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/be4ba4-88ab-4f33-98ae-af6d2bdae087/1/IeS4ZT-CkIeaCkqGBhrDqz5cyKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/be4ba4-88ab-4f33-98ae-af6d2bdae087/1/MzinLtQGDKFZfk3LzU3kMLxOG7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.210.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:81:da:fe:d2:8f:fe:6b:8a:11:1f:d7:1e:14:85:6a:27:5a:
d7:6b:a0:60:66:04:ca:60:48:cc:09:b9:6e:69:ef:ad:79:e9:
12:d8:2a:0d:d1:1f:31:ff:a0:59:0a:3f:4b:57:4c:95:11:4c:
20:a6:8f:0f:5d:b8:86:ed:96:f3:ea:98:30:93:d2:9a:79:f5:
53:77:72:01:5b:bb:67:a1:29:6a:01:b6:73:fd:60:f1:40:ee:
86:45:71:fa:0c:bf:52:6c:c1:fe:d8:1d:1a:75:5c:34:2a:71:
09:e9:fa:c4:d3:cf:95:2b:14:38:87:4b:38:51:78:fe:37:ce:
41:55:3e:82:7a:1b:22:ef:76:37:4c:51:1b:a8:cb:c2:96:7a:
ea:19:21:72:35:e5:d0:af:85:66:bc:6b:49:10:26:a7:8c:c6:
77:ce:a6:d0:f3:6f:04:62:28:b5:22:be:2b:c9:94:5c:b1:16:
b1:4a:86:03:4f:00:78:f4:dd:53:e4:b1:34:79:96:24:95:a9:
a6:ff:87:e6:6a:d4:70:40:01:9b:2c:41:8a:06:35:65:cc:56:
cc:5a:52:92:e4:44:62:aa:24:bb:e8:63:31:c7:ab:76:cd:e1:
e4:0f:bd:80:d3:18:92:cd:3b:ff:cb:ee:74:ae:74:51:dc:24:
72:7d:b5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:14 2024 by rpki-client on console-ams.rpki-client.org