Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/8NQl2M8FJkZetO3C1NtEy9lXRAE.roa
File: 8NQl2M8FJkZetO3C1NtEy9lXRAE.roa (raw, json)
Hash identifier: edrr4bTFippRd4/Y6oX3lpJywsAfAisOr2hX5ut3D3g=
Subject key identifier: F0:D4:25:D8:CF:05:26:46:5E:B4:ED:C2:D4:DB:44:CB:D9:57:44:01
Certificate issuer: /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Certificate serial: 01917E32785A1219C42D378A77F70C840029
Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/8NQl2M8FJkZetO3C1NtEy9lXRAE.roa
Signing time: Fri 23 Aug 2024 07:45:22 +0000
ROA not before: Fri 23 Aug 2024 07:45:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13002
IP address blocks: 185.42.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7e:32:78:5a:12:19:c4:2d:37:8a:77:f7:0c:84:00:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Validity
Not Before: Aug 23 07:45:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0d425d8cf0526465eb4edc2d4db44cbd9574401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:c8:36:6e:5d:59:07:1d:8f:18:44:ec:6c:
e8:ad:5f:fc:3e:53:b4:83:ab:a9:2b:32:88:22:d0:
82:31:5d:6d:dd:ff:f1:01:6e:19:0b:00:fe:6a:dc:
e3:e4:c5:62:1b:9c:e3:d3:44:fb:d9:63:68:78:b6:
b2:90:d3:81:cb:cb:5c:d8:74:e4:e9:14:ef:f7:de:
3f:64:44:aa:4a:3c:bd:34:3b:ad:63:66:70:2e:24:
06:90:a5:29:0c:aa:11:1c:95:2e:29:bd:2d:ba:fb:
ab:71:27:ab:e8:4a:5c:1d:7f:2b:60:0d:52:7d:16:
a5:7b:c5:8c:f6:11:77:e1:62:ba:9a:b0:ee:41:6e:
7f:ac:2b:48:ed:28:9b:f8:b8:ea:e5:7d:2b:57:b3:
2b:cc:17:17:11:90:e6:ba:8e:f3:e6:1c:81:c3:f0:
2d:db:2a:32:1a:9d:37:7c:a4:67:7a:6c:de:c1:30:
6d:65:71:cb:0c:14:6d:2e:71:18:06:ac:60:b1:43:
2f:f2:3b:00:7b:ce:f4:ec:84:ab:5c:46:2d:e4:47:
e2:f0:8a:a4:24:75:14:fd:b3:70:6b:cc:70:98:3a:
4b:2b:16:d4:7a:41:6a:8f:5d:b2:69:5d:51:be:c3:
aa:bb:45:91:f7:2c:ad:ba:58:53:1b:90:1c:3c:56:
85:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D4:25:D8:CF:05:26:46:5E:B4:ED:C2:D4:DB:44:CB:D9:57:44:01
X509v3 Authority Key Identifier:
keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/8NQl2M8FJkZetO3C1NtEy9lXRAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.216.0/24
Signature Algorithm: sha256WithRSAEncryption
51:3f:41:cb:4f:01:62:02:9b:79:bb:5e:ac:d1:c5:92:4e:4d:
ed:e7:f1:ab:bd:69:a9:bc:e6:ec:d2:3d:7f:a2:2b:bf:8a:75:
e3:5a:e2:12:cb:8f:17:ae:9c:45:34:49:9d:12:71:79:f8:5c:
31:ee:92:d2:69:8b:54:b5:6e:ff:d5:68:87:e5:ad:97:db:24:
42:02:6d:51:29:ad:5c:3b:1f:ca:3d:2b:f5:3b:6d:0b:a3:36:
80:e3:b1:fb:63:22:7f:ac:0e:8e:46:39:37:3a:26:ca:85:5e:
21:c2:6f:8e:b9:2e:8a:5f:08:26:e8:66:3f:04:77:c9:f8:b2:
d9:e7:b9:d5:af:4b:db:c8:72:21:73:cf:3c:b7:95:4e:df:ce:
26:4a:ad:bb:93:28:9c:58:3b:a4:75:3a:f3:81:27:0f:d1:6a:
e0:20:b1:5e:02:f7:4c:f0:31:01:af:f9:ce:c5:a0:c8:18:3c:
f4:e1:cd:56:5d:17:97:9f:15:3e:70:a8:5f:40:49:94:40:79:
19:a2:c7:b5:51:10:33:c4:4c:1e:7f:f9:b1:3a:98:8e:db:82:
09:d4:6d:1e:37:b2:a6:c1:9a:a8:2d:71:55:1e:20:b2:b5:18:
fb:ec:a9:6f:35:e3:90:cb:b9:e7:40:8b:78:74:c3:18:65:74:
b6:3b:ec:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:07 2025 by rpki-client