Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2dec93-7b0a-4614-a059-f7e092ce2170/1/w-14v15yYCM5n_abmtogiL6RREk.roa
File: w-14v15yYCM5n_abmtogiL6RREk.roa (raw, json)
Hash identifier: DxI70QAg0LlCc+H8tyPx13eHGhWoMe1HtX0Vx+0lsXo=
Subject key identifier: C3:ED:78:BF:5E:72:60:23:39:9F:F6:9B:9A:DA:20:88:BE:91:44:49
Certificate issuer: /CN=a0db124ef35c222167894a5a5e93704a811c34ac
Certificate serial: 170D966A
Authority key identifier: A0:DB:12:4E:F3:5C:22:21:67:89:4A:5A:5E:93:70:4A:81:1C:34:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNsSTvNcIiFniUpaXpNwSoEcNKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2dec93-7b0a-4614-a059-f7e092ce2170/1/w-14v15yYCM5n_abmtogiL6RREk.roa
Signing time: Sat 01 Jan 2022 03:00:50 +0000
ROA not before: Sat 01 Jan 2022 03:00:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200411
IP address blocks: 185.47.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386766442 (0x170d966a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0db124ef35c222167894a5a5e93704a811c34ac
Validity
Not Before: Jan 1 03:00:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3ed78bf5e726023399ff69b9ada2088be914449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:49:98:25:82:40:40:6c:9e:de:14:09:54:25:
7f:99:04:6d:2e:83:da:d3:3d:8c:1f:3a:74:48:2e:
86:ad:83:6d:54:a7:df:f1:53:3c:9b:82:84:ad:65:
64:d2:93:4a:6d:f4:0e:10:6e:e5:0e:a5:37:16:43:
09:e5:3a:b4:ea:c7:aa:a5:b9:de:3e:ba:a1:c2:63:
16:de:a4:4d:af:a5:e4:fe:21:7d:4d:fb:a8:31:7f:
ae:6a:56:86:a8:ab:98:7e:91:70:e9:41:82:3b:13:
d9:93:30:8b:df:b0:9c:8a:d2:74:c5:de:4d:28:4c:
58:48:29:13:51:2e:67:4c:15:08:76:9f:b6:13:e2:
c8:24:23:71:e7:d9:07:19:a5:93:69:ea:a5:d7:83:
9c:c0:e4:e7:4f:ad:75:3d:a2:fa:da:24:2f:ad:24:
c2:3b:e4:a4:d5:5c:ca:99:7c:3d:e9:0a:78:f8:04:
ed:a8:04:60:3e:23:8b:34:1c:ee:f1:4e:e3:de:fa:
56:5b:33:1e:11:1d:12:6f:d9:08:44:ad:dc:7b:ae:
51:aa:fb:08:d4:02:35:88:9a:cf:dd:b9:97:27:1d:
31:84:9b:7b:f9:3e:b2:71:7c:eb:24:8c:59:57:6e:
81:1d:57:0b:be:d9:cf:99:ae:5e:ea:3a:5c:bb:8e:
2f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:ED:78:BF:5E:72:60:23:39:9F:F6:9B:9A:DA:20:88:BE:91:44:49
X509v3 Authority Key Identifier:
keyid:A0:DB:12:4E:F3:5C:22:21:67:89:4A:5A:5E:93:70:4A:81:1C:34:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNsSTvNcIiFniUpaXpNwSoEcNKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2dec93-7b0a-4614-a059-f7e092ce2170/1/w-14v15yYCM5n_abmtogiL6RREk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2dec93-7b0a-4614-a059-f7e092ce2170/1/oNsSTvNcIiFniUpaXpNwSoEcNKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.240.0/22
Signature Algorithm: sha256WithRSAEncryption
53:d5:ab:a0:e3:7e:4d:87:05:30:06:3c:30:91:3c:93:f7:7f:
bc:31:ef:64:f0:f7:51:e1:86:29:42:eb:38:16:65:70:56:39:
42:c1:27:e7:56:95:e5:39:5a:d9:eb:70:e1:3f:a4:ea:fd:4e:
f1:fc:2e:cf:82:29:68:18:c9:8e:d1:a5:f7:72:c3:c2:09:31:
24:db:35:a1:ea:70:c9:89:12:9f:ca:dc:c5:dd:52:69:38:28:
0f:16:b3:3f:86:6f:1a:27:6b:cf:b0:0c:03:3a:ea:f6:da:62:
14:fe:ad:87:00:89:9e:7e:e4:ad:d4:9b:e3:0d:78:a7:5a:6e:
28:98:fc:af:52:a1:0a:2f:aa:b7:44:d5:61:22:9e:f1:27:bc:
5f:e4:4f:02:28:21:55:ee:9f:27:0f:a4:38:1d:2d:c7:20:a0:
af:6e:97:19:0c:4a:4e:63:80:ef:d7:6c:e0:a8:b1:c2:cb:9b:
e9:c9:a5:6d:1b:65:48:1f:e5:db:e6:7e:3e:4e:d5:d3:0e:f3:
9c:fe:5e:a1:d1:bc:77:b0:69:25:e5:bf:a1:02:92:24:27:75:
f4:8c:09:9b:92:40:54:c2:57:dc:ef:63:f2:a5:69:ff:04:00:
d8:2a:e3:d4:89:ba:d3:fb:04:37:8d:65:d9:94:43:d9:dc:e3:
d8:ad:5c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:06 2025 by rpki-client