Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/RvwlhGth9URbRgmPNeeD6TsX370.roa
File: RvwlhGth9URbRgmPNeeD6TsX370.roa (raw, json)
Hash identifier: UaA2k3HpOTh59KWQwkbhSTedw8z/FOeze8Gk75d9Wjg=
Subject key identifier: 46:FC:25:84:6B:61:F5:44:5B:46:09:8F:35:E7:83:E9:3B:17:DF:BD
Certificate issuer: /CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
Certificate serial: 01856D9D29DF3F1E576765C8CB36AED19A1E
Authority key identifier: B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/RvwlhGth9URbRgmPNeeD6TsX370.roa
Signing time: Sun 01 Jan 2023 13:54:54 +0000
ROA not before: Sun 01 Jan 2023 13:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204996
IP address blocks: 185.170.248.0/22 maxlen: 24
185.170.248.0/23 maxlen: 23
185.170.248.0/24 maxlen: 24
185.170.251.0/24 maxlen: 24
185.170.249.0/24 maxlen: 24
185.170.250.0/24 maxlen: 24
185.170.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:29:df:3f:1e:57:67:65:c8:cb:36:ae:d1:9a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
Validity
Not Before: Jan 1 13:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46fc25846b61f5445b46098f35e783e93b17dfbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f4:b1:28:5d:17:c7:39:2e:f7:cb:65:87:d5:
32:d2:d1:94:0b:8c:ed:42:9c:ed:ef:a5:40:26:6d:
61:8e:e1:d7:ce:f8:d1:02:a3:ed:eb:8b:dd:00:92:
e8:98:20:3f:4b:d7:c3:1e:a1:14:68:d8:c9:92:7f:
b6:aa:c9:08:ad:cf:60:78:47:ef:db:02:af:88:d9:
e0:05:94:96:ea:b4:85:02:4f:6b:d2:f2:75:a5:11:
2f:7f:c3:57:92:44:26:7d:76:34:e5:50:cd:45:0d:
cd:87:cf:a7:86:03:24:e6:1d:3a:71:bf:ae:e5:63:
0d:5f:86:d1:9e:99:42:26:c2:f0:d3:11:bb:9a:25:
e5:c2:77:28:a9:1a:e3:5a:33:8c:c4:fe:f8:22:cd:
9b:16:a4:0f:53:32:b8:b3:5d:cd:2d:00:3a:b5:80:
bf:a8:73:b3:7c:d7:06:69:cd:aa:6e:75:dd:1b:ac:
04:ea:fb:f0:35:b5:44:a7:dc:53:31:43:58:47:ed:
fe:4b:9c:b3:12:12:79:03:64:98:38:f3:75:23:13:
69:cd:3e:c4:a1:78:41:be:2d:70:3f:5a:6d:21:7b:
ea:55:96:00:e1:54:5a:67:01:c0:2e:56:ef:6b:86:
cd:8f:24:1b:9f:86:1c:04:d9:8e:30:22:07:f7:9e:
25:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FC:25:84:6B:61:F5:44:5B:46:09:8F:35:E7:83:E9:3B:17:DF:BD
X509v3 Authority Key Identifier:
keyid:B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/RvwlhGth9URbRgmPNeeD6TsX370.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.248.0/22
Signature Algorithm: sha256WithRSAEncryption
03:1d:cc:1a:25:37:f1:f2:3e:81:60:ec:b5:8b:0e:76:e9:a8:
25:a6:71:ac:c5:ec:e1:90:34:92:53:70:ec:f8:7d:55:ab:b8:
24:25:7a:93:35:c4:04:8b:a6:35:a5:dd:ac:4f:ac:55:48:2b:
9d:f1:1a:61:20:68:0a:4f:43:4c:9e:d7:28:e9:60:71:8e:70:
0b:b4:5c:74:a6:0d:fd:27:ab:d6:df:55:1c:c7:69:9c:05:ae:
01:c2:b7:2f:17:2b:0f:13:c6:34:5c:89:35:6d:8d:9b:76:23:
86:86:3d:b3:45:dc:2c:cc:25:a9:0a:7c:1e:26:27:d8:a9:35:
3c:01:3c:32:a7:c8:a2:19:e0:32:9d:f0:4f:07:66:5d:dc:84:
b8:14:74:bf:6e:35:0b:2b:32:6c:77:58:18:89:19:ba:bc:c7:
b4:8b:f1:e4:19:4f:ed:16:17:95:36:1e:1b:44:32:46:c6:dc:
a3:b9:97:23:13:fb:b4:c2:80:e1:09:af:97:1a:f0:f9:6d:6e:
d5:89:04:c3:b2:15:a6:d9:24:52:d5:5e:6c:60:f2:8b:72:a5:
eb:18:fa:33:54:90:12:05:21:77:44:d4:b6:6b:ed:90:8b:6e:
40:07:c3:45:66:54:4e:42:5d:a4:b4:7e:7a:93:78:cc:2e:58:
16:64:6e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:11 2025 by rpki-client