Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/avPkKoaRcf0b2Qbnl5Ih3QfX4c0.roa
File: avPkKoaRcf0b2Qbnl5Ih3QfX4c0.roa (raw, json)
Hash identifier: HcN8BYF7WcQwulTSM7G54YYfTxtko1b/8zyYRuAxUuU=
Subject key identifier: 6A:F3:E4:2A:86:91:71:FD:1B:D9:06:E7:97:92:21:DD:07:D7:E1:CD
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 03119B4B
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/avPkKoaRcf0b2Qbnl5Ih3QfX4c0.roa
Signing time: Sat 01 Jan 2022 01:50:32 +0000
ROA not before: Sat 01 Jan 2022 01:50:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 269788
IP address blocks: 82.118.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51485515 (0x3119b4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 01:50:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6af3e42a869171fd1bd906e7979221dd07d7e1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ea:9a:53:ea:ce:14:09:2d:05:59:a1:53:69:
8c:17:25:9e:3c:7c:ba:11:a2:6a:fc:2d:95:bb:71:
41:a6:5a:b1:df:3a:1b:59:e6:39:51:d9:43:e2:a7:
18:03:58:38:e8:19:f0:1f:4d:97:61:b4:37:5a:f4:
7e:47:25:85:6d:41:02:e6:33:ca:e5:90:8c:16:91:
c6:0c:66:76:8b:93:a6:55:2a:fb:a3:3d:c5:eb:d3:
c0:ca:5e:be:0b:f8:fb:48:7b:f6:52:f1:cf:6c:f2:
18:2e:8a:e4:47:62:41:de:3b:fa:b0:d5:e4:8e:82:
67:23:0a:f4:6b:01:85:f6:66:c2:be:79:1e:eb:b7:
3b:61:ed:a7:b1:d3:8a:06:78:92:37:02:94:84:5e:
9a:7a:88:da:44:52:31:c6:31:11:58:f5:e1:4e:d2:
8f:b8:55:e6:4e:c7:77:17:47:19:4b:e6:af:03:29:
d9:d9:95:ee:a9:7e:b9:84:2f:8d:83:c9:84:c0:8e:
43:23:54:36:01:90:40:1b:89:99:e7:dd:77:72:93:
bf:01:ee:36:d1:1b:99:8a:33:4c:00:d1:d0:41:8f:
9b:03:93:d5:a4:d0:f7:6e:cb:03:54:61:97:2a:d3:
54:8a:14:e7:a2:01:b3:a6:72:2d:ec:ba:b7:86:b5:
4c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F3:E4:2A:86:91:71:FD:1B:D9:06:E7:97:92:21:DD:07:D7:E1:CD
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/avPkKoaRcf0b2Qbnl5Ih3QfX4c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.28.0/24
Signature Algorithm: sha256WithRSAEncryption
52:47:78:88:60:9b:bc:48:dd:33:99:f9:b6:14:8f:1d:c6:06:
b2:84:bc:1d:a6:b6:01:83:94:8d:6d:5d:c5:86:d1:7a:d9:63:
23:49:90:c3:63:37:ca:e2:53:a9:63:4f:b6:2a:c9:e3:10:46:
e0:c3:4a:4b:25:14:70:4a:d2:bf:a6:cb:f7:c7:5b:05:74:00:
66:7f:99:4f:ee:a2:b0:10:70:ee:82:53:8f:6f:d3:dc:4d:bc:
42:ac:25:13:91:30:e4:60:d2:d2:22:24:75:40:b0:78:ed:b4:
76:1c:5a:94:2a:4d:55:be:42:f4:6f:19:e5:04:2f:fe:a6:0a:
d9:73:a6:86:18:4d:97:95:5a:53:30:44:62:8f:d9:44:e3:5b:
d1:7b:0e:e6:37:ba:25:c3:06:aa:0f:31:ad:89:da:33:db:6b:
14:57:93:82:b3:82:91:5d:d2:a9:91:23:cc:30:26:09:ae:cd:
a7:c3:be:e6:1a:7e:d3:fc:6e:23:3a:a9:c6:68:b1:a1:37:00:
66:07:53:15:e5:fb:8d:d2:51:55:72:44:e3:43:c0:6b:3a:9c:
63:46:e6:b6:e4:4b:a1:fa:47:91:d5:56:84:4b:eb:d5:5c:08:
46:f1:53:64:d2:f7:c0:17:f0:8d:2a:95:94:a1:e0:43:ad:49:
79:7d:b2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:02 2025 by rpki-client