Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/RmfH_DU7JotjVx2Yq4OOaqx3O1Q.roa
File: RmfH_DU7JotjVx2Yq4OOaqx3O1Q.roa (raw, json)
Hash identifier: g+FVBDQTJL9THo0nQ1IAybjuPeP0sDwAGHuvGhC0rys=
Subject key identifier: 46:67:C7:FC:35:3B:26:8B:63:57:1D:98:AB:83:8E:6A:AC:77:3B:54
Certificate issuer: /CN=bc69e2061e8c7cee42efa4fef9f30f7bf6f6d053
Certificate serial: 08727931
Authority key identifier: BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGniBh6MfO5C76T--fMPe_b20FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/RmfH_DU7JotjVx2Yq4OOaqx3O1Q.roa
Signing time: Wed 16 Feb 2022 18:10:12 +0000
ROA not before: Wed 16 Feb 2022 18:10:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201079
IP address blocks: 185.254.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141719857 (0x8727931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc69e2061e8c7cee42efa4fef9f30f7bf6f6d053
Validity
Not Before: Feb 16 18:10:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4667c7fc353b268b63571d98ab838e6aac773b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:90:22:ef:bf:2d:7a:ca:39:36:b1:2c:41:
37:0a:fa:5c:f5:bb:f2:fd:4f:bc:dd:84:d6:4b:ab:
e4:df:26:76:34:b8:9d:c6:1e:64:99:18:3c:76:ee:
a9:c9:c0:5c:3a:2c:aa:4d:bd:be:fc:51:b5:c5:ba:
02:5c:d5:15:92:0a:1b:37:9c:2a:aa:b7:22:e3:83:
ff:93:02:7a:20:5e:fd:07:b4:11:5e:12:a4:36:1b:
b3:fd:5c:1e:57:dc:38:d3:78:1e:b1:63:0b:4f:ee:
0f:90:5e:3a:a0:ae:58:11:bf:81:cc:ec:aa:4a:c6:
d4:2b:92:ff:7c:63:f2:f1:e3:4f:1d:c9:17:52:b9:
d2:bf:cb:85:e7:7a:fd:3d:df:62:e7:38:65:1f:38:
3a:66:f4:6e:f0:6e:76:bf:a7:c6:1a:5c:7a:1b:9e:
e9:da:2a:ce:6e:d6:20:6a:e5:73:91:a2:1b:4b:90:
82:57:00:51:78:4a:f1:4f:a0:84:b7:83:97:68:ad:
d1:6a:27:de:28:d8:6f:4d:cb:7a:6c:79:36:6f:83:
78:00:48:f8:f6:b2:98:02:34:95:bf:53:8a:a8:35:
06:6f:70:d3:ad:d2:34:db:ef:5a:53:3a:e9:70:fc:
f5:4b:27:70:3f:02:9d:d3:21:cf:4b:04:06:84:8b:
44:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:67:C7:FC:35:3B:26:8B:63:57:1D:98:AB:83:8E:6A:AC:77:3B:54
X509v3 Authority Key Identifier:
keyid:BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGniBh6MfO5C76T--fMPe_b20FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/RmfH_DU7JotjVx2Yq4OOaqx3O1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/vGniBh6MfO5C76T--fMPe_b20FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.53.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:1d:21:50:c8:1b:0c:7e:62:d2:43:5c:01:61:7c:8e:63:70:
12:b4:05:1b:02:f5:f8:24:81:f8:83:37:4e:49:93:d0:36:29:
ef:64:1b:cb:c3:c1:2d:83:db:b3:e6:1d:7d:91:e5:c7:9d:d0:
49:cd:59:cd:5e:f3:d8:7a:15:b7:35:87:8c:d5:a2:97:22:51:
f0:18:b7:b4:5d:77:b1:2b:17:82:eb:db:c2:86:f4:95:aa:67:
e1:0d:8b:7c:49:38:70:aa:37:d5:10:a3:9a:cc:08:95:fc:c4:
a5:b6:92:fa:0a:db:c1:70:64:f7:05:27:7b:3c:26:50:33:c3:
0c:db:36:5f:63:60:ef:8e:0b:99:ff:26:e1:46:fb:bb:02:25:
b6:38:56:e6:5e:f5:a0:ca:e8:e4:b0:34:e9:fa:3e:a4:51:28:
06:ee:09:bc:ce:b1:b9:1d:5b:f1:85:e8:5f:3e:b5:db:08:cc:
f3:1e:a5:64:ba:9c:d6:85:6e:18:5d:84:92:eb:1d:63:f8:ca:
f4:47:f1:47:d1:f7:93:fe:14:e8:e8:2d:66:f7:dc:89:5a:61:
3d:dd:be:93:1a:4e:db:8a:1f:21:94:2b:3b:2b:1f:e9:54:91:
39:d9:aa:f5:e5:3c:ba:76:60:d2:3a:f8:72:83:af:d1:42:9e:
05:4d:8f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:41 2025 by rpki-client