Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/OFwrU7q2w9DrESqjvnm7dMY-w-Y.roa
File: OFwrU7q2w9DrESqjvnm7dMY-w-Y.roa (raw, json)
Hash identifier: d1yRGXK2mZHheyhcOIyQlzwekd12Akl+hfDOMKy7FYg=
Subject key identifier: 38:5C:2B:53:BA:B6:C3:D0:EB:11:2A:A3:BE:79:BB:74:C6:3E:C3:E6
Certificate issuer: /CN=5324defbaade93e998e13a942029dd593b8b2ea3
Certificate serial: 1BDAE959
Authority key identifier: 53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/OFwrU7q2w9DrESqjvnm7dMY-w-Y.roa
Signing time: Sun 03 Jul 2022 14:44:25 +0000
ROA not before: Sun 03 Jul 2022 14:44:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49805
IP address blocks: 185.118.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467331417 (0x1bdae959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5324defbaade93e998e13a942029dd593b8b2ea3
Validity
Not Before: Jul 3 14:44:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=385c2b53bab6c3d0eb112aa3be79bb74c63ec3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a7:50:43:2c:6b:53:1e:2f:77:f0:8c:13:e9:
13:49:e6:8e:a0:b8:c1:35:2d:0e:c0:f3:1e:ac:f5:
c8:8e:3a:30:74:36:95:5b:f2:57:34:1a:14:07:2d:
d2:b4:ba:61:43:6f:d3:6b:3c:f9:71:f7:a2:18:c1:
95:38:77:8e:f5:56:c9:be:0b:57:90:2f:7d:92:74:
d7:58:76:6f:12:ad:cf:9f:7b:77:b1:11:87:75:5f:
61:e9:89:e9:6d:f2:e0:cd:59:d5:82:68:bd:4e:cf:
ad:67:53:16:5f:92:2b:fb:b2:d9:7c:1b:43:ae:b2:
12:c2:8a:61:ba:1e:2d:1e:8f:9b:7c:18:45:9f:fa:
74:c8:51:e6:2c:87:7b:5a:21:4e:1f:ef:91:c2:3f:
ba:6e:6e:3a:fa:0c:f6:5c:69:34:f0:d1:0b:26:26:
ba:e7:e2:21:d8:16:b7:f3:17:be:f5:c9:84:90:08:
75:f3:12:59:ab:1b:f6:df:76:43:4d:9d:78:dd:c7:
5b:3f:a4:3e:42:03:ec:a6:30:58:1c:e2:ef:c0:dd:
c2:ef:7a:9b:6f:90:bc:b3:f5:82:26:c5:6a:53:94:
15:d9:85:29:d8:cd:e8:d5:0b:0c:48:6e:dd:b0:c6:
49:97:ea:f0:8d:4e:a0:56:ef:c9:db:0e:0c:55:7b:
e1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5C:2B:53:BA:B6:C3:D0:EB:11:2A:A3:BE:79:BB:74:C6:3E:C3:E6
X509v3 Authority Key Identifier:
keyid:53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/OFwrU7q2w9DrESqjvnm7dMY-w-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.141.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ab:02:1b:cb:4e:15:0b:c5:2e:21:1a:cc:34:ec:51:17:44:
9e:45:3a:d4:5c:fe:29:d8:cc:42:8d:22:7b:f9:ec:46:66:fb:
3d:2c:15:c8:2a:85:1a:33:b6:e2:5a:7c:12:49:3d:a9:9c:97:
04:8f:35:8b:d7:c2:80:86:f0:13:e4:f7:77:06:04:0a:c2:bd:
28:78:c1:cc:62:d7:e0:88:74:3b:d7:cd:a0:60:c2:db:49:e6:
57:f8:a0:4e:ec:b8:5d:c9:f9:8b:49:59:50:eb:a0:98:d8:75:
42:5c:71:e9:6c:b3:86:66:d1:7c:99:8b:fe:8b:b5:87:13:e0:
08:52:9f:d0:7e:df:2e:7b:e4:2d:3c:24:19:83:aa:ab:4e:46:
95:6a:f3:30:42:64:ff:0e:a9:df:56:57:e1:26:84:a7:45:47:
c3:73:2f:79:ff:a7:f8:4a:67:5f:98:6e:c7:c7:8e:ff:a7:11:
09:83:f0:c6:93:7c:23:55:c1:ed:12:84:e3:4d:37:33:32:4d:
6c:65:90:46:29:60:ac:0b:ed:31:20:b2:4c:c7:78:ae:b0:af:
5b:15:ad:8f:25:de:30:ab:c2:b1:f0:51:4c:e0:e8:91:fc:41:
e2:ef:15:15:6e:4d:87:8b:9e:12:98:12:6b:7d:2e:25:46:20:
db:0f:98:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:32 2025 by rpki-client