Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/xL-4oLJF5ZR3Csyaig4O8-w1gqc.roa
File: xL-4oLJF5ZR3Csyaig4O8-w1gqc.roa (raw, json)
Hash identifier: /VC2lrEpwA34cVYr8e1sPlt7dpVnFLHGmVeq47ETu2g=
Subject key identifier: C4:BF:B8:A0:B2:45:E5:94:77:0A:CC:9A:8A:0E:0E:F3:EC:35:82:A7
Certificate issuer: /CN=5324defbaade93e998e13a942029dd593b8b2ea3
Certificate serial: 018570B060E0994376E6F53F35D9A63D20FC
Authority key identifier: 53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/xL-4oLJF5ZR3Csyaig4O8-w1gqc.roa
Signing time: Mon 02 Jan 2023 04:14:45 +0000
ROA not before: Mon 02 Jan 2023 04:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30535
IP address blocks: 185.162.73.0/24 maxlen: 24
185.162.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:60:e0:99:43:76:e6:f5:3f:35:d9:a6:3d:20:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5324defbaade93e998e13a942029dd593b8b2ea3
Validity
Not Before: Jan 2 04:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4bfb8a0b245e594770acc9a8a0e0ef3ec3582a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:c5:aa:a6:3a:a1:6f:82:8f:39:43:a5:e2:
9a:aa:2f:06:46:8d:27:86:cd:f6:45:70:45:a3:fd:
6e:42:79:7f:5e:c8:07:3d:f5:34:25:00:94:d6:f8:
db:08:87:dd:9f:68:61:82:c1:a6:1a:c8:e6:7b:e0:
58:22:d8:23:c7:b0:eb:68:92:e0:89:9a:4c:2f:02:
63:46:bb:7d:46:f3:53:25:24:06:d4:18:de:10:a1:
5c:fb:17:27:a7:bc:7c:aa:cb:ca:18:b4:03:6b:39:
3f:38:07:d2:a9:3f:e9:ed:a7:53:7d:7b:e8:36:83:
94:c9:ed:be:ca:c3:b9:15:c3:39:d2:93:18:91:20:
c4:11:86:50:78:16:62:a3:e8:2e:e9:02:14:af:76:
b8:d6:2c:0a:73:92:05:f8:95:ad:b9:5d:db:d7:c9:
79:49:ff:0c:7d:b3:13:d5:a2:1c:81:0a:cd:75:7f:
af:d9:a0:15:fb:31:7f:25:20:dd:51:e9:c0:54:c0:
66:3e:75:19:23:ae:61:fb:33:5c:4d:37:b4:da:a8:
15:3a:32:01:23:45:ef:48:3d:af:75:b7:4d:9a:56:
c3:74:a6:f5:e7:f9:47:6a:72:91:aa:78:ea:7e:52:
2a:a6:41:91:52:b3:d9:c9:b1:68:90:3d:c0:48:9d:
65:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BF:B8:A0:B2:45:E5:94:77:0A:CC:9A:8A:0E:0E:F3:EC:35:82:A7
X509v3 Authority Key Identifier:
keyid:53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/xL-4oLJF5ZR3Csyaig4O8-w1gqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.72.0/23
Signature Algorithm: sha256WithRSAEncryption
20:4d:00:9e:ba:55:fa:fc:fb:83:d9:e6:ee:7b:ef:30:c1:63:
b8:ce:02:9f:12:82:97:39:9f:07:db:11:02:36:05:ad:99:fb:
99:34:c0:54:2c:29:59:25:ef:4f:1d:1f:93:57:31:dc:7e:59:
f6:8c:f0:22:7c:e0:b8:6d:5a:aa:b5:8b:25:61:d2:4d:10:1f:
88:70:3b:b7:d5:a5:78:e2:ea:56:0b:c0:9e:34:5f:17:e8:9f:
29:50:4c:f8:cc:99:25:48:4a:84:80:e6:f8:d4:32:07:a4:a6:
05:a6:35:7f:8e:87:50:91:2f:12:9f:51:30:f3:0b:1c:fd:8b:
9b:89:68:0c:4b:c1:3e:5e:2f:d2:93:47:7c:5b:9e:3f:50:54:
dd:52:b4:5d:7d:f2:91:3f:b0:aa:1b:1a:3b:0a:89:98:8c:cb:
36:3b:ad:91:dc:cf:df:45:b6:a5:f6:b6:4b:3c:6e:cb:d2:6a:
f3:4c:45:20:8c:bf:97:4d:90:f1:b0:28:04:38:8a:89:97:64:
9e:d0:22:87:dc:eb:af:f8:e9:55:c9:dd:73:c8:c9:b6:de:c9:
67:65:de:c0:89:3f:a1:cb:05:20:df:54:dd:95:7e:f7:b9:b4:
42:a8:5f:b1:f5:4d:c2:11:7c:ca:24:8f:1b:45:72:bd:97:42:
ff:2a:b3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:04 2025 by rpki-client