Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/117d93-40f4-43f0-8c2e-89fa229ba717/1/AidKUgbi-BImNnDUaFaXDR-sLtA.roa
File: AidKUgbi-BImNnDUaFaXDR-sLtA.roa (raw, json)
Hash identifier: 9s4AjPirOOPPV8OqRhNyMkwYnNJ9BaW76uAPe8PCL+A=
Subject key identifier: 02:27:4A:52:06:E2:F8:12:26:36:70:D4:68:56:97:0D:1F:AC:2E:D0
Certificate issuer: /CN=04b027ccabc088f12efe1837cd113177a544f55d
Certificate serial: E99EC4
Authority key identifier: 04:B0:27:CC:AB:C0:88:F1:2E:FE:18:37:CD:11:31:77:A5:44:F5:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLAnzKvAiPEu_hg3zRExd6VE9V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/117d93-40f4-43f0-8c2e-89fa229ba717/1/AidKUgbi-BImNnDUaFaXDR-sLtA.roa
Signing time: Sat 01 Jan 2022 11:05:20 +0000
ROA not before: Sat 01 Jan 2022 11:05:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58075
IP address blocks: 185.233.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15310532 (0xe99ec4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04b027ccabc088f12efe1837cd113177a544f55d
Validity
Not Before: Jan 1 11:05:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02274a5206e2f812263670d46856970d1fac2ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:72:a6:a5:45:a1:5a:18:e6:49:f3:6d:f1:
36:26:cf:9d:41:12:44:84:1e:53:69:5d:90:46:3d:
20:14:07:98:03:37:6f:68:b4:61:86:b7:d7:4a:af:
9e:ca:88:f1:af:38:c2:9f:67:c8:e5:03:cd:93:d2:
75:cc:71:33:60:14:f4:d8:7a:5a:88:d1:2c:54:ef:
0f:a2:de:d4:4a:81:2b:32:4e:35:99:ea:b8:04:b9:
f7:bf:1f:87:fe:e5:89:71:86:e8:b0:4d:f9:77:ac:
24:13:03:22:eb:55:c6:2d:da:9e:90:36:5a:2a:6b:
39:9e:1b:b1:03:54:eb:2c:25:a8:6c:89:f2:cc:b2:
8c:70:e4:27:61:09:6e:09:6d:ca:f0:dc:b9:78:53:
f4:8f:14:61:31:ba:8e:fb:d5:8a:33:5f:6d:24:cb:
1f:8b:42:32:38:d8:89:0c:e5:f5:9e:f1:49:e8:ce:
94:45:26:89:a1:eb:e7:5a:3e:6f:d2:d9:96:b8:ef:
69:b6:6d:75:1e:a5:d1:2a:bd:52:5f:b0:bb:d4:76:
47:0b:01:89:29:cd:9a:ef:60:06:1b:7c:7c:be:f0:
30:5b:e3:6b:c1:5e:c6:fc:ad:9b:b0:35:da:e4:55:
f6:4a:a7:09:32:81:58:bd:32:f0:55:b4:34:13:37:
61:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:27:4A:52:06:E2:F8:12:26:36:70:D4:68:56:97:0D:1F:AC:2E:D0
X509v3 Authority Key Identifier:
keyid:04:B0:27:CC:AB:C0:88:F1:2E:FE:18:37:CD:11:31:77:A5:44:F5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLAnzKvAiPEu_hg3zRExd6VE9V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/117d93-40f4-43f0-8c2e-89fa229ba717/1/AidKUgbi-BImNnDUaFaXDR-sLtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/117d93-40f4-43f0-8c2e-89fa229ba717/1/BLAnzKvAiPEu_hg3zRExd6VE9V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.216.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:85:83:c1:35:18:86:80:4f:68:b0:32:d8:1e:e5:bd:f8:1e:
bd:07:1b:b8:f0:6a:ce:19:f9:39:44:42:f5:2a:53:be:a6:9c:
ae:19:ba:99:12:1f:0a:e3:5e:e2:30:f4:57:98:71:b1:b0:16:
98:32:cb:57:2c:04:51:f3:b2:9d:bc:8e:c3:c7:85:9f:94:eb:
4a:1b:e1:52:8a:60:bb:07:2c:a3:f5:cd:a8:95:0b:4b:5a:2d:
d9:18:eb:29:38:74:6f:53:8f:74:7d:f6:52:40:2b:39:9a:b3:
31:c3:71:56:83:a7:86:83:55:a1:34:a7:db:8b:d1:5f:5f:5b:
72:5c:20:33:6f:64:9d:9d:6b:ea:f8:66:5a:82:32:c4:05:f3:
2d:1c:03:ce:77:50:15:62:7d:6b:bc:80:3d:5c:d1:42:ca:47:
bd:f3:4c:d0:8c:de:1a:d4:76:b9:7d:2d:87:31:50:1d:4a:5a:
48:f1:6c:5e:32:bc:18:0d:41:98:5d:7f:90:00:d2:26:6a:63:
d6:af:15:49:7c:93:cd:f7:a1:0f:eb:51:5d:db:e4:f7:89:cf:
d0:c3:10:c6:82:b6:4e:17:6c:a6:51:a7:c4:ff:61:7a:b3:02:
a4:eb:24:d5:b8:aa:f3:97:39:81:62:0f:51:0e:44:72:c4:ad:
c0:b4:9d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:04 2025 by rpki-client