Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/be4ba4-88ab-4f33-98ae-af6d2bdae087/1/V1y_g7-tv3QLc9gzHkE5tuBDaDg.roa
File: V1y_g7-tv3QLc9gzHkE5tuBDaDg.roa (raw, json)
Hash identifier: etDxr8u3AaFLMm4IFAGMD+1aRTgZwv1td0Fj7xNpwX4=
Subject key identifier: 57:5C:BF:83:BF:AD:BF:74:0B:73:D8:33:1E:41:39:B6:E0:43:68:38
Certificate issuer: /CN=3338a72ed4060ca1597e4dcbcd4de430bc4e1bbc
Certificate serial: 0100E2C0
Authority key identifier: 33:38:A7:2E:D4:06:0C:A1:59:7E:4D:CB:CD:4D:E4:30:BC:4E:1B:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzinLtQGDKFZfk3LzU3kMLxOG7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/be4ba4-88ab-4f33-98ae-af6d2bdae087/1/V1y_g7-tv3QLc9gzHkE5tuBDaDg.roa
Signing time: Sat 01 Jan 2022 09:58:58 +0000
ROA not before: Sat 01 Jan 2022 09:58:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 185.252.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16835264 (0x100e2c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3338a72ed4060ca1597e4dcbcd4de430bc4e1bbc
Validity
Not Before: Jan 1 09:58:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=575cbf83bfadbf740b73d8331e4139b6e0436838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b9:0d:31:57:d3:5a:42:45:b8:b2:ed:a2:31:
8d:5c:4f:28:bd:5f:99:de:c0:59:d5:ad:82:a2:38:
f9:3b:8a:7a:4e:11:09:2e:af:aa:38:98:76:84:8d:
db:a9:bc:00:c9:e5:dc:ae:88:4e:ce:32:34:9a:33:
69:d7:04:a7:33:ea:0e:9e:dd:b4:d9:64:ce:4b:52:
24:f2:c0:c2:41:1f:92:6f:2e:74:c4:e8:7d:de:97:
1b:78:64:c0:08:2c:4e:e2:f0:b8:45:e8:f9:77:70:
0b:24:0f:b8:6f:43:01:9a:fb:8e:d2:1b:cb:ec:f6:
4f:9b:67:fd:dd:f1:ae:0f:f1:7d:10:9d:3c:ee:e0:
96:ed:6e:45:3c:b0:7d:3f:08:f1:0c:17:a8:c7:87:
5e:b0:47:05:59:e1:2a:f5:81:95:d0:5e:17:5a:35:
57:4a:00:f1:56:a2:05:78:57:f8:3d:61:fc:73:f9:
64:e0:a7:9b:04:b3:a7:80:d1:71:91:c8:5e:26:e4:
57:85:1d:cc:b8:6b:8c:df:b8:f3:e2:fb:2c:90:21:
55:e2:50:d8:cb:8d:b1:ed:07:f7:6c:d7:5c:fc:1c:
90:80:9e:3b:1f:75:64:e1:b8:d6:d0:cf:e1:47:7d:
0d:72:6e:6d:0b:85:60:b2:41:f6:df:75:e4:70:29:
fb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5C:BF:83:BF:AD:BF:74:0B:73:D8:33:1E:41:39:B6:E0:43:68:38
X509v3 Authority Key Identifier:
keyid:33:38:A7:2E:D4:06:0C:A1:59:7E:4D:CB:CD:4D:E4:30:BC:4E:1B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzinLtQGDKFZfk3LzU3kMLxOG7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/be4ba4-88ab-4f33-98ae-af6d2bdae087/1/V1y_g7-tv3QLc9gzHkE5tuBDaDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/be4ba4-88ab-4f33-98ae-af6d2bdae087/1/MzinLtQGDKFZfk3LzU3kMLxOG7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.210.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:20:ab:3f:a3:0e:f5:21:8b:36:1b:ab:fe:a0:eb:0a:2b:16:
32:a6:7b:10:6d:ee:36:22:dd:2f:cf:37:95:58:e7:74:2b:f7:
67:e2:7d:ac:3f:40:62:74:6f:4a:44:c3:43:eb:05:6c:6d:26:
00:d7:ab:8c:27:ad:dd:d3:4b:65:97:99:2b:50:02:1c:a1:06:
5a:2d:15:8d:e0:1d:2a:6f:fc:d2:9f:39:2e:db:9b:94:9c:8e:
dc:5d:39:da:96:61:f0:8c:28:9c:db:03:e5:23:bf:a4:34:46:
1e:68:93:4f:48:c4:fc:73:e5:91:e7:72:7a:2b:23:83:15:97:
d3:3a:c8:49:2d:9f:ac:12:b5:a6:8d:87:8a:a4:b8:aa:7e:1f:
96:2f:58:f0:38:d6:18:3e:b1:03:ed:7f:b5:84:a6:2e:0e:f3:
c8:ed:25:f1:3c:65:10:76:63:4a:29:aa:97:10:ea:f5:66:97:
03:9a:a2:9f:cc:ae:9b:33:e7:e0:f8:60:aa:ab:7d:b0:22:52:
14:c7:50:06:01:fd:d5:56:39:6c:7d:62:4c:7c:16:de:02:a8:
11:9c:23:75:94:99:85:48:c0:5b:70:69:03:a7:d6:cd:0e:1d:
4d:d5:1f:57:37:36:c9:27:6e:e1:26:63:79:c1:67:ee:1f:aa:
63:90:a1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:33 2025 by rpki-client