Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/W_Db2OqYMcm60GaGQqlvevqwzkE.roa
File: W_Db2OqYMcm60GaGQqlvevqwzkE.roa (raw, json)
Hash identifier: RL13Hw8Nmvf7UyLXuTC3gva9SDQegQbpKGnkDAPpRz4=
Subject key identifier: 5B:F0:DB:D8:EA:98:31:C9:BA:D0:66:86:42:A9:6F:7A:FA:B0:CE:41
Certificate issuer: /CN=e379d83d22a0beeb86c87e15a6cb6c69bd42903f
Certificate serial: 8F3016
Authority key identifier: E3:79:D8:3D:22:A0:BE:EB:86:C8:7E:15:A6:CB:6C:69:BD:42:90:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43nYPSKgvuuGyH4Vpstsab1CkD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/W_Db2OqYMcm60GaGQqlvevqwzkE.roa
Signing time: Sat 01 Jan 2022 01:55:54 +0000
ROA not before: Sat 01 Jan 2022 01:55:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43288
IP address blocks: 185.188.28.0/22 maxlen: 24
2a0b:b480::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9383958 (0x8f3016)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e379d83d22a0beeb86c87e15a6cb6c69bd42903f
Validity
Not Before: Jan 1 01:55:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bf0dbd8ea9831c9bad0668642a96f7afab0ce41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f7:fe:f8:c2:d2:a4:f7:2e:7d:ae:b9:02:78:
b8:2f:7b:75:dc:1d:23:4d:31:16:91:fb:6f:7e:b8:
37:4a:17:1b:bb:90:6d:b8:b2:cc:63:79:e1:22:8b:
71:cb:62:db:f9:36:30:53:da:33:75:ab:62:bb:40:
63:0a:99:4d:36:75:f7:61:bf:e4:fb:74:98:84:96:
97:78:0b:48:ef:3a:d9:8b:41:2d:6c:af:f2:e7:e7:
8a:be:ae:2e:01:a7:28:a2:89:70:81:3b:ee:63:f9:
85:43:0e:f0:06:c7:84:aa:03:68:94:94:b1:2c:22:
06:8d:c2:03:e9:7c:c2:4f:09:89:40:87:96:05:30:
68:55:26:ff:bc:af:8b:53:48:f7:d0:b3:26:bf:f2:
5c:f7:6e:81:16:d5:a5:cc:0e:fe:2f:ca:aa:45:09:
9c:9f:56:fb:c4:5a:2b:df:3e:68:fa:dc:9d:43:c3:
f5:66:5f:56:91:8b:47:58:dc:45:02:e9:d4:36:25:
64:60:a7:8a:f2:dc:39:40:08:fe:95:e9:db:80:1e:
c6:48:e2:27:d2:51:53:92:a4:34:cb:1c:77:4c:66:
4b:3b:b2:45:0b:06:2e:c5:b3:89:53:f0:dc:4b:0e:
b9:43:be:b3:1d:f5:cd:88:ce:42:51:4b:ef:29:77:
64:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F0:DB:D8:EA:98:31:C9:BA:D0:66:86:42:A9:6F:7A:FA:B0:CE:41
X509v3 Authority Key Identifier:
keyid:E3:79:D8:3D:22:A0:BE:EB:86:C8:7E:15:A6:CB:6C:69:BD:42:90:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43nYPSKgvuuGyH4Vpstsab1CkD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/W_Db2OqYMcm60GaGQqlvevqwzkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/43nYPSKgvuuGyH4Vpstsab1CkD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.28.0/22
IPv6:
2a0b:b480::/29
Signature Algorithm: sha256WithRSAEncryption
82:d5:0e:c1:a0:b8:13:3c:df:c4:6f:59:d8:c2:a1:64:8b:fd:
ea:0c:45:89:20:b3:1b:8e:97:1c:63:11:7d:9f:29:b0:b9:ca:
67:a7:d3:e3:68:59:ab:c8:42:c7:c9:45:97:07:9d:f6:dc:ad:
90:02:89:18:bd:36:78:69:33:71:40:57:80:b0:a4:05:8d:c5:
fd:c3:8f:64:ad:d1:4a:5b:ac:00:c3:7e:39:2e:c0:b9:9c:dc:
7c:e0:a8:13:4e:99:3d:0b:39:0f:1a:ac:b6:da:86:5e:fc:9b:
a7:de:fe:e5:d0:e7:82:18:bc:7f:e5:d6:c2:f2:7d:e0:b1:50:
20:57:b9:7a:fc:4b:74:a3:98:2f:13:54:41:5a:68:71:b7:67:
8c:f6:eb:54:f3:2c:73:72:88:8b:fb:82:46:60:ce:40:1f:b7:
08:ef:ba:eb:30:95:5e:1b:d1:43:dc:e7:de:fc:2e:67:06:88:
ea:0a:c0:2a:a0:7f:a0:11:e0:82:e6:e1:49:cd:46:76:e7:03:
ab:2f:e8:36:de:51:6a:2f:42:1b:71:02:83:72:56:00:95:50:
df:f1:e2:71:f1:b2:b1:68:e2:f6:df:21:d2:ac:2b:e8:4b:6e:
63:a9:93:64:15:fa:d6:83:d5:31:32:3e:80:a5:df:df:c5:ac:
fe:7d:c4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:05 2025 by rpki-client