Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/25f9cc-deb1-4685-8753-acf4c14685ec/1/cJQCYxUjFV1BqZm1MVWnzMg-_VI.roa
File: cJQCYxUjFV1BqZm1MVWnzMg-_VI.roa (raw, json)
Hash identifier: BNr+KsIaS9d9swMsV0ihIozaGpl7o7ZHYbBiMr/6mSo=
Subject key identifier: 70:94:02:63:15:23:15:5D:41:A9:99:B5:31:55:A7:CC:C8:3E:FD:52
Certificate issuer: /CN=dd4cec354b50afbbdbbf9d52ec38b596fdef2f9d
Certificate serial: 036C89AD
Authority key identifier: DD:4C:EC:35:4B:50:AF:BB:DB:BF:9D:52:EC:38:B5:96:FD:EF:2F:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UzsNUtQr7vbv51S7Di1lv3vL50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/25f9cc-deb1-4685-8753-acf4c14685ec/1/cJQCYxUjFV1BqZm1MVWnzMg-_VI.roa
Signing time: Sat 01 Jan 2022 10:53:58 +0000
ROA not before: Sat 01 Jan 2022 10:53:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206668
IP address blocks: 185.179.124.0/24 maxlen: 24
185.179.125.0/24 maxlen: 24
185.179.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57444781 (0x36c89ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4cec354b50afbbdbbf9d52ec38b596fdef2f9d
Validity
Not Before: Jan 1 10:53:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=709402631523155d41a999b53155a7ccc83efd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:f7:b5:82:e5:96:14:50:10:22:12:01:d3:
4e:99:f7:21:57:55:e6:fd:d2:22:7e:42:ad:1e:0b:
74:0d:81:c1:ef:7e:da:c3:59:a4:d3:c6:84:d3:c0:
37:f8:be:f1:b4:a4:48:4c:c7:e5:18:db:bf:cf:be:
7f:db:e0:4b:0d:df:a4:87:f1:7f:fd:2d:e2:65:c2:
8e:e9:d7:6f:5c:ea:e6:67:9c:9a:5f:28:c4:37:26:
9c:41:06:4c:96:75:ed:86:e5:8b:61:05:dd:9e:a8:
15:d9:94:b4:1f:52:04:7e:ea:e8:12:26:f5:08:45:
d8:3c:60:bf:aa:d7:a7:b6:e2:6a:48:b0:d6:e0:3e:
9f:18:5f:9d:26:ba:fc:dc:20:8e:16:70:19:fc:09:
e6:df:0d:82:c9:e0:d3:da:68:c1:26:d4:27:65:bb:
d7:a8:a1:9f:09:88:ca:45:7b:71:8f:84:31:29:92:
86:29:ce:7c:3f:33:be:e9:e6:52:c8:5c:a6:83:2c:
38:bd:f1:1a:87:06:3f:0d:73:c1:f3:b9:4c:33:fb:
2b:29:31:58:4c:06:0e:04:b9:02:59:59:83:9b:fd:
84:d9:ff:29:33:76:08:94:90:e3:aa:19:47:cf:da:
2c:4e:2e:f6:ff:35:3c:c9:04:d7:d0:84:bc:1d:2a:
f4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:94:02:63:15:23:15:5D:41:A9:99:B5:31:55:A7:CC:C8:3E:FD:52
X509v3 Authority Key Identifier:
keyid:DD:4C:EC:35:4B:50:AF:BB:DB:BF:9D:52:EC:38:B5:96:FD:EF:2F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UzsNUtQr7vbv51S7Di1lv3vL50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/25f9cc-deb1-4685-8753-acf4c14685ec/1/cJQCYxUjFV1BqZm1MVWnzMg-_VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/25f9cc-deb1-4685-8753-acf4c14685ec/1/3UzsNUtQr7vbv51S7Di1lv3vL50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.124.0-185.179.126.255
Signature Algorithm: sha256WithRSAEncryption
b4:5b:2f:77:d4:b3:ba:0d:55:7f:d5:ac:0d:fd:68:41:8c:75:
1b:b8:e0:7d:d0:1e:0f:2d:21:30:f5:f2:52:15:18:83:4f:d3:
f1:2c:f6:f0:2f:26:41:1a:fd:fa:61:06:16:b3:d1:c8:d8:d0:
0b:4e:83:ee:5a:e3:c6:a1:92:b0:d8:a1:05:ce:e3:18:43:46:
4c:01:c9:03:b4:5d:65:41:55:c9:3b:31:1a:94:08:6d:31:be:
ef:a0:ed:f7:09:cd:ef:2b:d5:af:03:71:8e:ca:c9:db:93:38:
b6:80:31:db:09:f6:90:76:79:27:3a:af:f4:c8:3d:dd:32:8e:
e2:bd:a8:e6:a9:2a:c7:a0:f0:50:9e:71:3a:e3:a3:fc:ca:d8:
65:3a:6e:54:f8:27:e9:c6:f0:b7:3d:47:e2:b6:38:ef:4a:5a:
34:b2:28:c1:f4:fc:c8:02:d5:c0:5a:00:f0:c5:f2:50:97:f0:
c8:6a:41:ff:ca:dc:7f:8c:7f:87:5f:e7:d5:bd:9a:34:b3:27:
e3:24:11:ff:ea:5c:88:63:c4:eb:8d:73:79:12:29:b7:e7:65:
f4:34:94:fa:4a:fb:3c:0c:11:99:9d:38:20:57:a0:b5:92:a0:
d5:70:ed:4b:99:1f:21:68:55:22:3c:56:32:8b:cc:db:ed:81:
a2:dd:61:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:57 2025 by rpki-client