Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/Kem6A-5BlrHl-L4SlCimJxqPo9Q.roa
File: Kem6A-5BlrHl-L4SlCimJxqPo9Q.roa (raw, json)
Hash identifier: Xmlp7B220y5RuPTkNA+CDG8nTGxxsYwpJ6PkERW26t4=
Subject key identifier: 29:E9:BA:03:EE:41:96:B1:E5:F8:BE:12:94:28:A6:27:1A:8F:A3:D4
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 0323CF33
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/Kem6A-5BlrHl-L4SlCimJxqPo9Q.roa
Signing time: Sat 01 Jan 2022 10:03:29 +0000
ROA not before: Sat 01 Jan 2022 10:03:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 185.186.212.0/24 maxlen: 24
2a0b:8780::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52678451 (0x323cf33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: Jan 1 10:03:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29e9ba03ee4196b1e5f8be129428a6271a8fa3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d5:60:00:b1:59:24:15:39:a7:ec:a1:aa:d5:
6e:1c:4d:a4:e5:9e:65:d4:1e:cf:dc:5d:55:2f:b8:
a5:4f:8d:4f:48:20:8d:bc:c0:c9:1a:0f:77:b1:aa:
a3:fd:83:d8:8c:b5:26:bc:de:8a:91:6b:5f:a5:f3:
2d:13:c0:6d:7e:af:69:f7:c0:35:e6:a1:1a:b8:aa:
ec:e9:87:52:0f:86:95:bd:cc:51:44:ab:ba:23:1b:
5a:e4:bf:72:14:16:09:bd:97:21:e4:f9:75:5e:88:
28:28:45:1a:9d:1c:20:9d:5e:41:0f:62:eb:f4:c2:
b8:4a:6d:c6:d1:cb:fd:60:23:33:8f:e9:a1:89:75:
e0:ac:df:83:72:ae:9c:8d:6d:94:59:bb:64:19:1b:
9f:0a:63:0a:f5:c4:42:92:fa:0a:ab:6d:1a:a5:21:
54:e2:22:e7:59:70:30:e0:3b:78:9b:35:3f:20:26:
68:d5:73:a0:64:e3:49:56:3d:e8:7a:f8:8c:bc:73:
bc:ec:1e:34:ff:95:15:ee:f1:94:53:23:a6:d4:ef:
fe:a3:60:b2:0b:06:e7:fa:1c:82:a7:73:09:05:59:
d0:0d:cc:55:53:a4:f0:93:43:77:38:a7:f9:c0:99:
2a:5a:4b:34:16:bb:ba:6f:7d:3c:c5:a1:e1:2b:bc:
90:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E9:BA:03:EE:41:96:B1:E5:F8:BE:12:94:28:A6:27:1A:8F:A3:D4
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/Kem6A-5BlrHl-L4SlCimJxqPo9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.212.0/24
IPv6:
2a0b:8780::/48
Signature Algorithm: sha256WithRSAEncryption
2c:8b:b4:9f:66:af:f5:83:ef:e5:c4:c2:79:7a:7a:db:da:6b:
b0:8b:19:25:3c:d3:f3:ed:7b:31:47:f1:1c:8a:73:9c:f4:b4:
7f:f9:b7:8b:b4:c4:52:4f:5e:c5:fb:11:97:e1:b4:43:02:ed:
a8:3b:9c:8f:7e:55:62:4c:d4:72:f1:8c:b7:7b:da:a0:62:c3:
bc:d7:90:e6:74:5d:85:68:d7:48:64:f4:c6:53:9d:b1:a3:48:
c4:82:af:28:17:c9:f0:e7:da:7c:5c:0c:b6:e7:ff:9a:22:0a:
d0:33:78:09:c0:5d:e0:2b:9f:f5:d0:09:fc:db:d1:45:3b:7d:
d8:22:dd:aa:e8:65:fd:67:b3:2f:22:7b:b6:f5:d1:40:d3:e9:
25:7c:4b:5b:62:05:f8:b4:91:1e:0e:45:39:72:d6:5e:78:73:
c5:5c:ad:00:bc:ed:44:fe:df:06:c7:1f:e3:8b:56:62:c7:68:
d2:6a:4a:88:74:9b:f2:ca:d6:14:1d:68:51:bc:60:da:e3:be:
d6:f1:54:0a:85:02:9b:2d:94:42:65:14:a3:a1:b8:95:d0:b7:
7a:9c:d4:43:f3:5f:0b:2a:cd:d9:26:b1:5c:f4:47:d5:e4:9b:
cf:a5:43:01:62:1b:2c:fd:9f:64:f2:93:6e:dc:a8:50:de:9a:
27:1b:76:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:43 2025 by rpki-client