Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/76d0d1-2b41-4118-9e60-f9288d80315b/1/PaUEsACUEIFkvHi05dzMXEU24Vs.roa
File: PaUEsACUEIFkvHi05dzMXEU24Vs.roa (raw, json)
Hash identifier: BCLJ8Ii8qUbSRZdW7uuVo8ssv2ZYkg4WngufZVc/Wh4=
Subject key identifier: 3D:A5:04:B0:00:94:10:81:64:BC:78:B4:E5:DC:CC:5C:45:36:E1:5B
Certificate issuer: /CN=4f1e3770e71e6ee68b4e16f4eec6b1909f1d6686
Certificate serial: 0183FE4A64312276013B1B1FC86316FADAA1
Authority key identifier: 4F:1E:37:70:E7:1E:6E:E6:8B:4E:16:F4:EE:C6:B1:90:9F:1D:66:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tx43cOcebuaLThb07saxkJ8dZoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/76d0d1-2b41-4118-9e60-f9288d80315b/1/PaUEsACUEIFkvHi05dzMXEU24Vs.roa
Signing time: Sat 22 Oct 2022 06:03:51 +0000
ROA not before: Sat 22 Oct 2022 06:03:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26636
IP address blocks: 185.55.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fe:4a:64:31:22:76:01:3b:1b:1f:c8:63:16:fa:da:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1e3770e71e6ee68b4e16f4eec6b1909f1d6686
Validity
Not Before: Oct 22 06:03:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3da504b00094108164bc78b4e5dccc5c4536e15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:78:3a:99:89:19:f4:4f:17:96:41:94:c4:
05:e8:ea:1a:30:b9:b7:92:31:12:83:b4:2a:9e:46:
2e:eb:bc:1a:6d:db:5a:52:b2:23:c7:1f:87:72:a2:
e9:0a:de:08:26:b8:64:e7:25:47:95:6a:c2:61:5c:
bb:d4:c3:c4:65:05:af:09:44:9a:cb:1d:b0:fb:58:
b7:05:3d:35:a3:c4:1a:b9:eb:23:a2:3c:73:9f:17:
41:62:9b:7b:47:90:e3:0a:d9:cb:b9:41:d8:73:d6:
51:9b:43:c3:69:ef:e3:d7:4f:7b:5a:4f:e8:35:3d:
4d:ea:de:b8:67:82:db:7e:e3:47:fb:ee:c2:6f:d0:
5a:4c:c4:e5:0a:ef:4d:2a:7b:c0:a1:b3:58:51:2f:
fa:80:fb:eb:b2:f0:f0:ca:5f:1a:e5:cd:fe:fb:14:
cb:5e:df:5e:2b:84:aa:d8:b1:a4:ac:fc:0d:2e:7f:
88:a1:0b:fa:73:c8:50:7d:51:16:80:96:4f:7b:2d:
10:8e:4d:e3:88:53:da:ac:81:2e:5d:45:a0:46:ee:
d2:85:23:94:3d:82:f3:28:0e:cc:54:84:6f:d8:69:
91:6c:8d:f4:7b:08:d2:40:8f:a8:b0:2e:99:2b:7a:
51:9e:71:4f:d1:0f:43:5f:37:28:bb:1e:3b:d8:73:
7a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A5:04:B0:00:94:10:81:64:BC:78:B4:E5:DC:CC:5C:45:36:E1:5B
X509v3 Authority Key Identifier:
keyid:4F:1E:37:70:E7:1E:6E:E6:8B:4E:16:F4:EE:C6:B1:90:9F:1D:66:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tx43cOcebuaLThb07saxkJ8dZoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/76d0d1-2b41-4118-9e60-f9288d80315b/1/PaUEsACUEIFkvHi05dzMXEU24Vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/76d0d1-2b41-4118-9e60-f9288d80315b/1/Tx43cOcebuaLThb07saxkJ8dZoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.57.0/24
Signature Algorithm: sha256WithRSAEncryption
32:95:8b:4f:d3:e2:6b:14:68:cd:1e:de:e0:09:ff:67:58:d3:
11:0f:0c:96:f2:3b:fb:31:79:74:f2:d2:fd:31:a2:7e:81:88:
0f:d4:54:a5:62:b4:0e:ee:75:c7:4a:f4:04:38:14:20:b7:21:
36:03:e1:bf:26:ef:81:16:89:4c:e0:e6:8c:1c:ff:2c:a3:7c:
57:9a:79:90:27:0a:87:fc:12:40:ee:77:40:53:4d:bc:fd:61:
8a:79:e3:30:c0:84:f8:ac:8c:17:a4:3f:41:a6:1d:02:28:03:
6f:ee:a4:b9:30:23:ae:c5:82:df:b0:c7:2d:a6:38:fb:5c:58:
24:7c:a9:bc:b4:c1:73:50:aa:4d:3c:df:3a:c4:a1:91:e0:d5:
eb:9d:2c:35:9d:44:3e:71:60:c1:86:98:a0:fd:20:b5:aa:79:
cd:38:88:98:e0:b1:17:f0:d0:c4:5c:d2:53:db:c0:da:02:32:
ee:8a:bb:4c:46:3a:8f:de:a9:17:64:d2:4f:3d:c7:c3:04:d5:
e3:10:66:b4:6f:60:c6:85:60:38:4e:03:4f:bb:f6:7b:fb:8d:
ef:b4:0b:2c:57:c2:0f:fb:c1:c4:44:10:58:0d:a8:80:57:47:
30:18:34:31:5d:da:57:ab:23:e8:05:a2:bf:66:1c:6e:54:fd:
e7:35:ec:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:42 2025 by rpki-client