Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9f379d-51dc-42a8-b2cc-1d1fe2784e24/1/s5-1Q3rbtKT0HkcMSMlLGMlZ5-Q.roa
File: s5-1Q3rbtKT0HkcMSMlLGMlZ5-Q.roa (raw, json)
Hash identifier: Ofz8Uw5Px5XOSlB+a+MV+JRMGn3OTsBp4svcWGsJJ/k=
Subject key identifier: B3:9F:B5:43:7A:DB:B4:A4:F4:1E:47:0C:48:C9:4B:18:C9:59:E7:E4
Certificate issuer: /CN=1e2ecaec8a4865046594c6f7f2109520016f0eb7
Certificate serial: 018CC34897CE507B3D9F653422CAAB52A784
Authority key identifier: 1E:2E:CA:EC:8A:48:65:04:65:94:C6:F7:F2:10:95:20:01:6F:0E:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hi7K7IpIZQRllMb38hCVIAFvDrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9f379d-51dc-42a8-b2cc-1d1fe2784e24/1/s5-1Q3rbtKT0HkcMSMlLGMlZ5-Q.roa
Signing time: Mon 01 Jan 2024 04:29:23 +0000
ROA not before: Mon 01 Jan 2024 04:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50980
IP address blocks: 185.133.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:97:ce:50:7b:3d:9f:65:34:22:ca:ab:52:a7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e2ecaec8a4865046594c6f7f2109520016f0eb7
Validity
Not Before: Jan 1 04:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b39fb5437adbb4a4f41e470c48c94b18c959e7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0b:2d:c9:22:01:d6:3b:45:b8:81:b0:99:8a:
d8:2e:77:8a:29:46:7f:97:d2:63:a5:7a:8b:80:68:
6a:f6:05:21:91:1c:b2:9e:6e:05:f8:a0:d0:f7:0c:
62:d3:a3:8d:c4:9e:f7:54:d1:3c:66:1a:37:ec:66:
02:b4:0c:bf:07:13:00:5b:05:92:15:ee:81:aa:9a:
c2:d9:70:6d:f7:db:33:cc:04:d5:f2:d4:01:c6:af:
a3:d3:51:e4:8a:0c:ab:94:3f:d3:f2:5a:98:33:57:
d6:85:e2:f6:71:c6:8c:4b:ad:71:0a:0d:3b:c6:11:
c5:2f:3f:b0:83:94:b5:9e:fd:e3:65:0d:ce:ee:bd:
15:f0:85:9e:fa:6a:71:e2:83:f4:cb:24:27:4f:2b:
4b:64:d4:f6:12:f0:9b:86:ac:5c:86:e0:53:df:bc:
25:d5:4c:2d:26:d7:04:a4:f6:53:7b:58:ec:e8:1d:
6d:f2:af:2d:d2:10:0b:1b:f7:66:64:31:e1:b4:ca:
78:f9:37:36:dc:ac:48:31:01:5d:cc:26:1d:6e:fc:
47:55:94:bd:79:6d:c5:55:25:b3:9b:2a:1d:f6:be:
53:28:c9:25:34:aa:ea:d2:13:52:02:d5:11:fc:78:
29:84:e8:58:b9:7a:ec:9b:cd:14:04:35:ef:81:4f:
a8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9F:B5:43:7A:DB:B4:A4:F4:1E:47:0C:48:C9:4B:18:C9:59:E7:E4
X509v3 Authority Key Identifier:
keyid:1E:2E:CA:EC:8A:48:65:04:65:94:C6:F7:F2:10:95:20:01:6F:0E:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hi7K7IpIZQRllMb38hCVIAFvDrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9f379d-51dc-42a8-b2cc-1d1fe2784e24/1/s5-1Q3rbtKT0HkcMSMlLGMlZ5-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9f379d-51dc-42a8-b2cc-1d1fe2784e24/1/Hi7K7IpIZQRllMb38hCVIAFvDrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.196.0/22
Signature Algorithm: sha256WithRSAEncryption
68:73:a6:84:bf:2c:7e:69:2d:8c:e6:47:4a:ec:9e:5c:ce:66:
f4:ae:9a:2a:cb:f3:d8:14:ff:74:12:29:c4:bf:fb:23:33:86:
de:51:5b:22:42:1a:f7:46:e7:fb:e2:cc:33:98:ff:0b:bf:4a:
d5:31:41:42:10:7d:62:9c:a5:5e:b8:63:b4:37:9d:33:0a:ae:
3e:22:73:99:c2:6b:ed:51:47:31:65:9c:5f:46:bf:ad:61:f2:
d7:57:af:c2:cf:eb:26:80:b2:f6:76:77:7c:1f:c2:6d:9c:b0:
b9:a2:bd:96:48:2b:1d:17:58:19:36:8f:6e:70:d9:59:5e:9f:
62:a5:a8:f7:77:f5:b2:69:80:0d:b5:f3:12:55:7c:79:70:d8:
cc:45:e2:3c:9d:98:77:f9:8a:c7:a4:ba:c6:e5:35:34:61:ed:
b5:d8:bd:cc:c1:1e:93:fa:06:f4:19:ba:3b:53:fb:b5:80:ef:
54:89:20:c4:aa:ac:cf:cb:66:f5:a4:71:bf:2f:18:8f:b1:ea:
68:72:66:fe:b0:03:00:a9:1a:76:15:c3:ab:f6:71:66:02:46:
fa:f0:93:b9:d2:90:86:9d:95:5d:91:85:a8:5e:2e:f9:c4:df:
7d:e2:12:7f:d5:11:77:90:8b:62:fc:1f:27:7c:9a:0e:be:a0:
1f:6a:5f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:38 2025 by rpki-client