Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/PbSktjM7ixsdsPxnpxY1RAHW0Xg.roa
File: PbSktjM7ixsdsPxnpxY1RAHW0Xg.roa (raw, json)
Hash identifier: 2mF68sBzqJeIh5OKQPKDJA+MIEvvmgJ8hAzsMbNBKoM=
Subject key identifier: 3D:B4:A4:B6:33:3B:8B:1B:1D:B0:FC:67:A7:16:35:44:01:D6:D1:78
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 04E8D003
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/PbSktjM7ixsdsPxnpxY1RAHW0Xg.roa
Signing time: Fri 01 Jul 2022 10:26:26 +0000
ROA not before: Fri 01 Jul 2022 10:26:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 82.118.26.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82366467 (0x4e8d003)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jul 1 10:26:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3db4a4b6333b8b1b1db0fc67a716354401d6d178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f1:77:d1:1e:96:b2:f6:10:af:21:77:74:05:
36:d8:e8:62:15:fb:b5:a4:5e:b3:ca:c9:e1:0b:e2:
82:1d:06:2d:26:e0:68:29:98:00:7a:54:60:0d:a7:
13:7a:9f:cf:75:5c:cc:bc:57:c1:69:5f:2a:32:1e:
26:42:52:93:29:14:d3:a2:59:73:ad:e3:ea:20:87:
ae:fd:a7:97:75:9e:59:9d:12:10:e2:2b:4d:72:ec:
f7:a7:7a:06:c2:b9:fd:dc:b1:8f:8d:8f:b6:49:f8:
5f:23:62:ae:ab:b8:b6:78:eb:af:af:66:6d:ce:42:
5a:44:23:31:99:d1:a8:bb:a6:aa:4f:9d:00:8e:89:
3d:29:f5:e1:51:74:0a:c7:b4:46:f0:83:48:d5:fd:
64:ae:1d:43:5c:84:b4:fc:9c:23:0a:6d:4a:14:74:
29:80:d5:be:fa:4d:65:51:55:18:77:e9:81:d7:92:
b7:d1:99:a6:be:50:5d:0d:28:f5:4b:57:d2:50:4e:
64:62:78:48:21:e0:bf:db:39:eb:80:e2:65:05:92:
0f:a3:0d:09:89:9d:31:c8:70:8b:d2:28:2c:31:48:
94:bd:bd:47:54:96:df:0f:3c:99:1c:9e:f4:c9:1c:
5e:3b:12:62:d1:e5:d3:5b:bf:0b:67:6f:c4:2b:c0:
97:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B4:A4:B6:33:3B:8B:1B:1D:B0:FC:67:A7:16:35:44:01:D6:D1:78
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/PbSktjM7ixsdsPxnpxY1RAHW0Xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.26.0/23
Signature Algorithm: sha256WithRSAEncryption
02:b7:50:e3:45:2f:06:f1:fb:14:fc:5b:30:27:79:70:1f:cd:
ba:3d:ff:b4:3a:3a:ad:4a:b1:aa:8b:08:c7:c6:0b:9a:f4:c5:
7d:dd:ad:44:b6:44:bd:1d:de:1e:87:47:d5:b6:06:ce:a6:f5:
33:88:f7:39:a1:5c:d5:ad:35:56:2c:b5:74:c9:be:ee:03:a5:
47:24:c3:8b:76:f5:7d:3d:b7:61:13:2a:cc:cd:cf:40:87:b7:
a3:60:e8:d0:1a:1d:49:2f:f8:31:81:cf:63:ba:42:97:83:8c:
dd:0b:31:68:d4:30:dd:e4:14:e7:98:00:45:95:3e:7d:ec:e6:
48:bf:0a:4a:7d:28:85:d9:23:ce:c2:a9:f2:7d:9b:ad:a6:bb:
d0:1f:30:ec:cf:56:2b:53:4f:7d:87:82:40:86:d6:d7:0d:03:
59:25:d2:79:df:7b:12:55:84:49:26:17:fb:38:c5:58:64:56:
d1:fe:6b:0d:31:49:7c:14:2d:71:1d:e1:be:ed:6f:bc:08:e8:
64:b7:ec:51:40:70:76:49:b1:4f:b7:32:a1:d8:da:03:d0:06:
f6:a7:34:5e:2d:95:44:a7:6b:a7:47:4a:ae:ed:21:36:82:b4:
11:46:62:4d:d0:a0:bb:39:da:98:6b:4d:34:39:f8:84:01:fb:
4e:2a:46:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:12 2025 by rpki-client