Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/25b32d-3d43-41bf-9387-c9682264a81f/1/kXhgJyraXqZTP3bX2sl5IS_z_bg.roa
File: kXhgJyraXqZTP3bX2sl5IS_z_bg.roa (raw, json)
Hash identifier: 2WKj6dHOhNiNtvtq3M94nHYlttS/ijyS+kw1UN/Yb2E=
Subject key identifier: 91:78:60:27:2A:DA:5E:A6:53:3F:76:D7:DA:C9:79:21:2F:F3:FD:B8
Certificate issuer: /CN=588c9b8a1a4da31fa533b58ba2b45e62170edfa2
Certificate serial: EF6F
Authority key identifier: 58:8C:9B:8A:1A:4D:A3:1F:A5:33:B5:8B:A2:B4:5E:62:17:0E:DF:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIybihpNox-lM7WLorReYhcO36I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/25b32d-3d43-41bf-9387-c9682264a81f/1/kXhgJyraXqZTP3bX2sl5IS_z_bg.roa
Signing time: Tue 08 Feb 2022 18:38:23 +0000
ROA not before: Tue 08 Feb 2022 18:38:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48031
IP address blocks: 185.225.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61295 (0xef6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588c9b8a1a4da31fa533b58ba2b45e62170edfa2
Validity
Not Before: Feb 8 18:38:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=917860272ada5ea6533f76d7dac979212ff3fdb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:31:3b:bf:07:43:1e:26:77:31:0c:e3:76:a8:
2c:48:56:e6:f9:ae:e2:af:dc:6a:4a:8a:cb:dd:66:
8c:5c:ac:31:76:e2:20:f1:fc:9c:91:61:05:1a:97:
1a:a6:ae:74:84:4d:8d:9a:52:8f:b3:52:e0:44:46:
05:d3:69:97:a2:32:b4:6e:33:4e:ed:f5:3a:a6:a6:
4c:20:d5:b7:17:0f:a4:c8:91:59:38:eb:88:12:f8:
80:25:dd:01:0f:86:1e:d4:6c:f1:4b:37:84:cd:dd:
42:9a:a8:47:c4:b9:5d:a6:50:78:e3:01:28:a8:5b:
6a:2e:6c:73:27:b6:e4:6a:5f:f4:fe:4a:75:0b:c9:
fc:35:c6:9e:6e:e2:8d:37:71:84:d4:d9:63:d6:d9:
e9:a2:48:0b:7f:67:d8:14:b2:ff:98:5f:df:d5:f1:
bd:65:de:2f:87:b9:d2:78:31:22:99:26:03:47:6b:
e7:b6:7f:30:ca:0a:22:6c:e0:32:e2:60:da:a9:18:
ca:b9:5c:c5:50:01:b2:db:f2:42:08:d4:7e:08:cc:
9a:0a:af:f0:10:8d:8c:c7:a5:4c:4c:0e:0c:75:a1:
8e:2f:fa:71:8b:8b:55:ac:72:f2:5c:b0:47:6d:45:
8c:53:65:6c:6f:ca:e1:b3:a2:2a:34:fa:44:44:8c:
fd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:78:60:27:2A:DA:5E:A6:53:3F:76:D7:DA:C9:79:21:2F:F3:FD:B8
X509v3 Authority Key Identifier:
keyid:58:8C:9B:8A:1A:4D:A3:1F:A5:33:B5:8B:A2:B4:5E:62:17:0E:DF:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIybihpNox-lM7WLorReYhcO36I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/25b32d-3d43-41bf-9387-c9682264a81f/1/kXhgJyraXqZTP3bX2sl5IS_z_bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/25b32d-3d43-41bf-9387-c9682264a81f/1/WIybihpNox-lM7WLorReYhcO36I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.190.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:71:49:2b:ca:90:07:0b:92:67:16:0c:46:64:7f:04:bc:bb:
a3:26:28:f5:32:76:60:3a:c5:a0:8f:cc:a2:b2:3f:b1:7d:9d:
77:90:17:ea:0e:d3:0f:26:1f:c8:9a:b3:98:8d:af:96:55:a7:
4e:c3:33:eb:b8:6d:5b:01:44:ee:b1:bd:d0:05:4c:dd:84:ce:
21:a0:fb:a2:c8:af:de:29:5e:44:c5:eb:7b:ce:4e:8e:a2:cf:
5d:45:4d:44:55:3b:fb:29:c3:34:4c:87:4a:a6:44:6b:cc:c0:
28:19:6e:17:a2:b5:a1:86:bd:9e:15:23:ba:94:1b:df:8b:b2:
e6:31:fd:d8:65:3c:b9:7e:b6:75:f9:95:c1:9d:3f:9e:35:6b:
72:06:e7:f7:ad:7b:7c:c0:42:75:29:95:90:9e:37:3e:13:0f:
ce:94:3e:42:fe:bf:7b:14:b8:48:c7:9c:f9:f2:32:85:4f:af:
e7:bb:66:cb:d5:ef:b1:a1:0f:31:43:2a:f9:00:04:c5:4d:db:
2f:bc:15:cc:2d:3d:2d:dd:01:82:bc:30:46:64:b7:32:9b:ca:
6f:95:5f:09:7e:a5:ee:dc:68:e8:de:dd:66:4e:ac:1b:bf:bc:
d5:90:a2:f7:e1:e4:43:d4:84:b3:98:5a:83:8f:e6:6b:fc:06:
0f:50:0d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:16 2025 by rpki-client