Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/be4ba4-88ab-4f33-98ae-af6d2bdae087/1/Y2Liwve8D0rgUHMdGgHOCmt6lw4.roa
File: Y2Liwve8D0rgUHMdGgHOCmt6lw4.roa (raw, json)
Hash identifier: 3g0l4PXpjcXIK1zx3aUM4fpcplfHz2pf7GcLlndyP9w=
Subject key identifier: 63:62:E2:C2:F7:BC:0F:4A:E0:50:73:1D:1A:01:CE:0A:6B:7A:97:0E
Certificate issuer: /CN=3338a72ed4060ca1597e4dcbcd4de430bc4e1bbc
Certificate serial: FF8D94
Authority key identifier: 33:38:A7:2E:D4:06:0C:A1:59:7E:4D:CB:CD:4D:E4:30:BC:4E:1B:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzinLtQGDKFZfk3LzU3kMLxOG7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/be4ba4-88ab-4f33-98ae-af6d2bdae087/1/Y2Liwve8D0rgUHMdGgHOCmt6lw4.roa
Signing time: Sat 01 Jan 2022 09:58:57 +0000
ROA not before: Sat 01 Jan 2022 09:58:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.252.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16747924 (0xff8d94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3338a72ed4060ca1597e4dcbcd4de430bc4e1bbc
Validity
Not Before: Jan 1 09:58:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6362e2c2f7bc0f4ae050731d1a01ce0a6b7a970e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:36:4c:c6:ed:d7:8c:38:1b:2e:eb:7f:de:ac:
75:54:6b:f1:dd:2e:d6:14:95:d8:e2:7e:f5:57:d2:
64:71:59:08:ea:82:a6:4d:e4:88:cb:37:91:ea:76:
77:dc:32:58:0b:05:5d:7a:d9:f3:df:ab:d8:77:c4:
6e:ac:36:98:bc:64:e9:01:9f:30:12:b5:2d:b5:9f:
c9:9b:62:bd:67:98:66:8a:ce:60:dd:15:64:04:83:
ac:a3:f6:a0:f1:14:ce:23:e5:eb:59:54:af:85:6d:
51:99:69:c4:35:6a:f9:68:12:1b:01:60:f8:c1:f0:
75:52:31:8d:25:f4:07:28:a6:6f:d8:52:33:04:7c:
26:40:b4:c5:f7:cc:23:01:c8:c8:ab:b3:20:6d:3e:
3d:5f:58:18:0e:0d:22:ce:68:b1:e2:1d:1c:b2:6f:
fb:11:58:08:f2:92:d8:2d:02:a2:93:bf:3a:16:cf:
bc:c2:7c:52:6e:0d:ee:ac:ed:24:de:7e:00:70:7d:
e7:1a:33:16:2e:a0:bd:ee:59:6b:e8:51:26:04:20:
11:c8:2b:68:4a:e2:5f:27:5e:7f:26:db:6a:9b:f8:
fd:83:5c:a6:3b:c7:8a:4d:d7:5f:d4:2c:a0:59:2e:
cc:af:af:d1:0f:a1:b3:b1:85:e5:7f:54:8b:ec:76:
1b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:62:E2:C2:F7:BC:0F:4A:E0:50:73:1D:1A:01:CE:0A:6B:7A:97:0E
X509v3 Authority Key Identifier:
keyid:33:38:A7:2E:D4:06:0C:A1:59:7E:4D:CB:CD:4D:E4:30:BC:4E:1B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzinLtQGDKFZfk3LzU3kMLxOG7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/be4ba4-88ab-4f33-98ae-af6d2bdae087/1/Y2Liwve8D0rgUHMdGgHOCmt6lw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/be4ba4-88ab-4f33-98ae-af6d2bdae087/1/MzinLtQGDKFZfk3LzU3kMLxOG7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.210.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ce:79:ff:a3:18:f5:24:a1:81:d0:e7:13:38:a4:5b:e5:59:
87:6a:b7:dd:73:04:26:10:85:b2:41:fc:5f:05:d4:ca:ae:db:
02:19:99:d8:6d:b0:50:77:c7:7e:14:b6:b6:8c:7e:64:db:12:
ab:df:71:6e:8a:9b:d7:0e:ff:a0:b1:b3:99:98:75:80:5b:75:
49:14:db:30:c8:de:64:57:19:69:65:14:37:ad:59:5a:bf:97:
4d:c5:cc:8e:bd:02:bd:64:a5:2a:94:cf:83:8d:f4:d9:03:65:
ec:75:c4:0f:e5:38:cf:ce:61:f3:f2:5b:ba:c2:bd:05:f0:6f:
b7:7d:63:7c:c8:22:2b:37:2e:02:5b:82:d6:5e:bb:06:34:9a:
af:cc:ad:31:ef:9e:cc:bb:ed:94:13:c1:d5:a3:af:d1:d2:7f:
bf:dc:71:2f:4e:68:79:0b:3a:5a:f5:0d:ca:61:95:88:ee:13:
3c:8b:8b:be:48:d5:47:80:ba:41:ff:fd:3f:8e:14:c5:bb:e3:
a3:19:2e:3d:45:af:e8:ab:09:e5:78:06:9e:4a:0a:ce:35:97:
45:b7:f4:48:3d:76:cf:04:96:3c:65:d3:0b:b4:22:2b:d6:d2:
50:2e:90:e3:5a:dd:f7:4c:3b:b1:71:73:7e:37:7e:48:67:23:
78:fb:fc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:00 2025 by rpki-client