Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/qEPbWqs2hZS9it-7uQhJ9RcGIpc.roa
File: qEPbWqs2hZS9it-7uQhJ9RcGIpc.roa (raw, json)
Hash identifier: 8iyIpwoVYJmtpkVNkjtVTWgBceUCoMqOlqQajf7C2UY=
Subject key identifier: A8:43:DB:5A:AB:36:85:94:BD:8A:DF:BB:B9:08:49:F5:17:06:22:97
Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial: 0184E21A0BAD30AA151FC59448992B532987
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/qEPbWqs2hZS9it-7uQhJ9RcGIpc.roa
Signing time: Mon 05 Dec 2022 11:44:28 +0000
ROA not before: Mon 05 Dec 2022 11:44:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8075
IP address blocks: 185.222.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:1a:0b:ad:30:aa:15:1f:c5:94:48:99:2b:53:29:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Validity
Not Before: Dec 5 11:44:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a843db5aab368594bd8adfbbb90849f517062297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:42:03:b1:e8:02:40:ac:5f:83:e6:60:a5:
8d:c3:08:65:45:87:c8:5c:96:b8:cb:aa:fd:23:22:
4f:fd:16:26:32:26:9b:88:ba:7a:f3:65:fc:d6:25:
ae:0f:fc:b4:29:ec:d6:71:87:37:fa:98:ed:71:fc:
6b:89:1a:08:a6:e0:91:65:83:39:f6:64:17:81:0d:
10:90:b5:fd:8c:44:cf:94:20:a8:a2:2f:59:5a:2d:
13:7e:8d:ce:5c:50:48:9a:76:a6:ae:3b:58:6f:bc:
83:47:0f:7f:9d:d4:cd:e9:88:3f:9c:c9:81:8e:fb:
40:a4:6b:b3:eb:c8:8f:3a:36:39:ec:69:1e:8c:d3:
b8:e2:72:72:cf:98:82:26:d3:94:de:99:2a:8a:88:
9b:8b:39:0f:ec:d4:55:4e:be:74:6f:91:a9:9e:3f:
50:ab:cc:a0:5b:de:7d:4b:8b:79:04:7d:13:f0:81:
d1:72:62:28:b3:e0:fb:94:c0:41:c8:0c:b6:5f:9e:
a3:94:b8:88:cc:84:68:40:52:0e:4e:69:2f:be:f4:
f5:f9:59:b4:33:7d:90:5f:c8:e5:2c:cb:40:20:04:
53:04:8d:89:3b:30:18:b3:e8:48:52:a3:b5:69:cc:
88:04:a5:bc:84:06:d4:70:1c:44:33:1b:d1:b5:e2:
1b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:43:DB:5A:AB:36:85:94:BD:8A:DF:BB:B9:08:49:F5:17:06:22:97
X509v3 Authority Key Identifier:
keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/qEPbWqs2hZS9it-7uQhJ9RcGIpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.140.0/22
Signature Algorithm: sha256WithRSAEncryption
24:a8:af:78:9d:e7:ab:a4:20:56:1b:4e:1c:33:e2:c8:61:86:
a5:e2:06:8a:8a:b8:49:cb:db:96:74:80:83:98:78:d7:08:ed:
56:d6:e1:70:93:89:41:54:db:3c:16:2f:e9:6c:56:d5:c8:07:
49:aa:d4:7f:01:1d:bf:04:09:00:f8:07:39:1e:98:a9:c0:e6:
da:15:b4:39:8b:e5:8f:e6:39:8f:a0:06:90:71:d7:f3:20:ac:
9e:7d:50:8a:55:93:17:cc:3c:3a:ef:89:68:e9:8f:14:fd:9e:
5e:a9:cd:1e:89:39:b0:af:27:6a:6f:e6:c4:85:9e:e7:75:89:
9e:b3:dd:6c:84:8b:a9:39:84:45:30:de:40:3c:61:bf:4f:20:
b5:d4:bf:cc:e3:4c:d7:56:41:0b:eb:5d:f3:f7:06:67:8b:58:
85:fe:a3:e5:a7:26:d3:5e:27:d5:c6:31:08:96:f1:64:a3:0b:
cb:5c:99:d0:fc:32:b9:d8:65:3b:3f:72:fe:de:77:6c:ec:17:
83:dd:6f:1e:c8:62:6d:0a:2d:39:fc:4d:95:a6:4b:cc:55:25:
b4:5b:f7:7d:f9:06:48:8a:cd:bb:e2:36:7d:3e:4a:6d:07:91:
d9:07:b2:28:dd:42:6e:8f:5c:72:0b:60:5a:4f:0c:78:46:22:
a0:23:44:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:51 2025 by rpki-client