Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/d22d65-b6e9-4ba6-8019-75237996c06c/1/qY0Bgh9kje0rvYyKPwCwVHnYxc4.roa
File: qY0Bgh9kje0rvYyKPwCwVHnYxc4.roa (raw, json)
Hash identifier: /x1ch151fh8pWBGH7dZhL8mNhZef2C9VCvbE97I6+vA=
Subject key identifier: A9:8D:01:82:1F:64:8D:ED:2B:BD:8C:8A:3F:00:B0:54:79:D8:C5:CE
Certificate issuer: /CN=da1e212597b3ae009c016dce182db544917871c6
Certificate serial: 018326EC5248DD3F709DB299D9261C9CE184
Authority key identifier: DA:1E:21:25:97:B3:AE:00:9C:01:6D:CE:18:2D:B5:44:91:78:71:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2h4hJZezrgCcAW3OGC21RJF4ccY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/d22d65-b6e9-4ba6-8019-75237996c06c/1/qY0Bgh9kje0rvYyKPwCwVHnYxc4.roa
Signing time: Sat 10 Sep 2022 10:22:45 +0000
ROA not before: Sat 10 Sep 2022 10:22:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 185.94.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:26:ec:52:48:dd:3f:70:9d:b2:99:d9:26:1c:9c:e1:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1e212597b3ae009c016dce182db544917871c6
Validity
Not Before: Sep 10 10:22:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a98d01821f648ded2bbd8c8a3f00b05479d8c5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:14:0a:f9:5a:dd:f1:13:fd:13:c8:08:05:
42:61:2e:94:b9:a9:f5:ca:6c:71:ef:83:df:30:b6:
30:ea:46:ac:c5:0c:ea:bb:03:83:8c:32:39:b2:43:
41:b2:55:ca:2e:02:7a:4b:4f:b4:19:af:dc:29:46:
67:8a:38:bb:a4:34:71:69:45:05:4c:4a:74:d6:a5:
49:1f:e5:02:77:e5:99:d4:9a:e2:de:56:3d:7b:93:
43:b9:17:7e:9b:d5:fc:25:21:e5:69:12:bc:ae:db:
a2:1b:d3:a5:90:47:fd:7a:95:16:95:fa:d7:bc:6a:
ef:7a:f5:b1:ec:a2:37:55:38:32:16:c9:8e:31:3e:
a3:78:2e:e8:fb:78:fb:98:41:94:75:b1:45:6b:91:
05:9e:f9:14:47:60:99:f0:42:51:93:65:83:eb:33:
38:a4:73:b7:e3:34:be:bb:8f:1b:11:22:a5:fb:5b:
87:9c:e6:6b:0f:ba:b7:48:97:d3:83:ae:f8:5e:51:
e1:81:35:51:f2:8c:db:0a:23:bc:ca:33:b6:ae:fc:
14:be:76:cd:29:57:ec:b7:9a:a3:0c:20:b9:81:1b:
75:db:02:58:06:3a:f7:ca:f9:db:0b:3d:3a:1f:5e:
7c:38:88:72:82:12:89:60:0c:2f:88:aa:11:c5:86:
17:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8D:01:82:1F:64:8D:ED:2B:BD:8C:8A:3F:00:B0:54:79:D8:C5:CE
X509v3 Authority Key Identifier:
keyid:DA:1E:21:25:97:B3:AE:00:9C:01:6D:CE:18:2D:B5:44:91:78:71:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2h4hJZezrgCcAW3OGC21RJF4ccY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d22d65-b6e9-4ba6-8019-75237996c06c/1/qY0Bgh9kje0rvYyKPwCwVHnYxc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d22d65-b6e9-4ba6-8019-75237996c06c/1/2h4hJZezrgCcAW3OGC21RJF4ccY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.65.0/24
Signature Algorithm: sha256WithRSAEncryption
50:eb:30:76:0f:b7:1b:6e:d7:f7:0e:fe:d0:4c:50:a1:52:11:
f4:76:39:52:69:96:e6:c7:99:2b:3d:36:83:45:93:d1:56:78:
31:d8:d2:48:94:97:be:ea:6b:05:47:ef:74:54:76:26:7a:a7:
49:94:a3:2c:d8:bc:30:ba:97:d1:e3:5b:4c:8a:03:f4:77:9d:
60:57:12:16:e6:26:20:50:d6:77:73:82:ae:e1:d7:d2:a5:83:
48:8c:e9:38:1f:78:c1:e0:04:38:c0:d3:c3:56:6c:9b:5b:26:
ed:82:76:c8:18:e8:4a:d5:e6:b6:e5:f7:cc:eb:65:d6:ff:32:
9a:ac:07:a7:41:a0:de:cc:08:c9:cd:3b:c5:9f:46:74:72:c0:
e5:89:4c:59:46:33:cd:ba:0b:eb:af:c8:28:65:41:a7:10:1b:
f5:83:de:d9:a3:2a:65:ac:af:b2:71:dd:5a:55:c4:f4:ce:82:
13:6f:1d:73:c9:17:fd:cb:95:b9:c6:5e:13:0d:03:a8:34:86:
93:08:ad:38:f6:37:a3:9e:08:fb:78:cb:29:ec:2c:2a:87:c8:
b2:52:cf:7e:ba:08:24:bc:08:06:f7:dd:39:58:bb:e7:71:2f:
3b:20:0a:70:2c:fd:b8:11:0f:8f:d4:05:86:69:bc:34:ff:55:
73:f5:ba:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:09 2025 by rpki-client