Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/IZf4xcZGYTUpcOLph8HZ6BqWOBQ.roa
File: IZf4xcZGYTUpcOLph8HZ6BqWOBQ.roa (raw, json)
Hash identifier: 26begBCigbDtHteMrgB+u5yVdKTnW9LYahuLq2uHFC0=
Subject key identifier: 21:97:F8:C5:C6:46:61:35:29:70:E2:E9:87:C1:D9:E8:1A:96:38:14
Certificate issuer: /CN=2af5e4866ba09820124a6e511104fc41fa541995
Certificate serial: 018CC9BCB778E93954E934671291BBF53E5F
Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/IZf4xcZGYTUpcOLph8HZ6BqWOBQ.roa
Signing time: Tue 02 Jan 2024 10:33:57 +0000
ROA not before: Tue 02 Jan 2024 10:33:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21005
IP address blocks: 185.110.239.0/24 maxlen: 24
185.110.238.0/24 maxlen: 24
185.110.237.0/24 maxlen: 24
185.110.236.0/22 maxlen: 22
185.110.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:b7:78:e9:39:54:e9:34:67:12:91:bb:f5:3e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995
Validity
Not Before: Jan 2 10:33:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2197f8c5c64661352970e2e987c1d9e81a963814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:98:fc:19:b4:8e:ed:10:d2:af:22:40:fe:
60:aa:76:16:13:69:4e:33:63:78:17:d7:9f:81:67:
de:cb:94:1f:54:da:a7:d1:39:ba:0d:1e:09:a7:75:
cd:dc:7c:ab:6d:32:7d:ac:0d:7a:5f:c1:2b:5f:85:
fc:d3:3d:aa:52:22:c9:2c:87:48:af:a9:1e:7e:58:
5f:a6:a6:b2:85:85:45:11:e8:96:f5:ce:99:66:3e:
c6:2a:2e:53:6c:03:fa:3a:da:3d:8d:06:4b:a5:4a:
b8:6e:c0:4d:19:64:3e:18:56:15:64:f1:a8:b4:8d:
a6:41:05:ee:59:87:f4:c8:28:92:11:ee:49:fd:1e:
28:23:f4:ac:c0:7e:12:1c:4c:ad:1a:e9:2b:c2:cd:
81:03:f5:64:71:95:94:ea:6b:4b:04:93:67:42:3a:
0b:95:7c:8d:03:7e:9d:f6:65:20:21:fe:ae:99:15:
75:d8:1d:31:34:c2:f5:44:a9:47:d1:02:a5:fe:1f:
30:28:f4:64:05:ba:31:15:d3:4a:28:c4:23:b9:59:
76:68:80:55:c7:6d:d9:a0:19:68:d5:49:fc:60:22:
58:a7:ac:09:96:82:e8:71:89:a1:96:fb:cc:d9:6a:
fc:15:13:b5:3f:21:f2:a3:c8:3b:d6:ce:6c:34:d4:
46:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:97:F8:C5:C6:46:61:35:29:70:E2:E9:87:C1:D9:E8:1A:96:38:14
X509v3 Authority Key Identifier:
keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/IZf4xcZGYTUpcOLph8HZ6BqWOBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.236.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:d1:2e:af:af:ac:05:9a:60:cd:36:91:3a:24:54:5a:3d:53:
18:9c:a1:39:39:05:a3:12:2a:de:e2:00:82:ee:d6:ba:07:2e:
1a:db:fb:07:1e:a9:9e:1b:97:ec:18:06:38:a2:9e:98:63:1d:
82:d1:2f:52:4a:ff:81:23:de:ac:1a:4e:01:fb:8c:9e:6c:9e:
34:91:35:4d:4a:7d:a1:2b:c8:5c:96:bd:05:7f:ec:ad:75:2b:
04:06:70:b2:a6:73:38:72:69:33:f9:a7:1d:72:f7:89:7d:35:
7e:7a:c7:7a:67:fc:ad:5b:fa:32:01:eb:43:73:f9:d4:66:c0:
4e:01:a8:70:03:47:45:c0:e2:4e:83:c7:f1:5a:52:41:9f:70:
d0:9b:b3:39:eb:93:03:eb:71:d0:a4:b2:14:52:60:1b:4f:73:
67:ff:79:71:c4:62:74:dd:94:99:a6:f4:c7:6f:c2:cd:81:d9:
c4:84:69:b2:ec:b3:4c:b9:9a:61:9e:ee:c8:51:e0:9b:86:9f:
4e:fc:c4:a9:bb:3b:5d:c9:e1:e3:41:79:87:e1:c3:91:5c:72:
b0:74:6c:58:c0:64:e5:2a:c3:02:be:08:d8:9d:99:1f:1e:16:
d1:6e:ee:a4:16:19:39:23:aa:4f:3b:15:7c:22:cf:c6:de:16:
89:60:a1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:29:27 2025 by rpki-client