Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/CzNq3vHsFjHVkChEscAvKZYxrT8.roa
File: CzNq3vHsFjHVkChEscAvKZYxrT8.roa (raw, json)
Hash identifier: JBf2heolloZCnpkVyQyLHxZYPovrgYpoW8s/JPgMZcc=
Subject key identifier: 0B:33:6A:DE:F1:EC:16:31:D5:90:28:44:B1:C0:2F:29:96:31:AD:3F
Certificate issuer: /CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
Certificate serial: 01875C36686CB5BD43DD4D0E8CF39543C607
Authority key identifier: 61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/CzNq3vHsFjHVkChEscAvKZYxrT8.roa
Signing time: Fri 07 Apr 2023 14:54:42 +0000
ROA not before: Fri 07 Apr 2023 14:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206238
IP address blocks: 185.238.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5c:36:68:6c:b5:bd:43:dd:4d:0e:8c:f3:95:43:c6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
Validity
Not Before: Apr 7 14:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b336adef1ec1631d5902844b1c02f299631ad3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:f9:0c:fd:35:3f:d6:3d:57:b1:74:80:37:
81:da:97:8d:e2:d7:36:b4:e7:e0:e0:fe:77:f5:fd:
c4:8a:74:b7:6f:f6:d8:5f:b3:f1:5e:55:7c:47:bd:
67:57:82:20:57:fb:b3:06:fd:0e:79:11:01:54:c0:
1f:f7:cc:b1:0a:45:7a:eb:14:fe:27:e9:51:71:aa:
27:39:c7:31:60:cc:40:76:3e:b9:7a:e9:f1:d5:7b:
8c:c0:13:d8:05:f3:1e:d0:1e:19:5b:18:f7:46:36:
a6:cc:55:15:11:94:09:9b:76:43:96:bc:9a:b0:79:
cd:85:1c:30:da:93:ac:89:ff:ed:ea:06:1f:f6:b6:
7d:d9:53:a2:8b:27:97:c7:4c:e8:e5:7f:56:0a:0f:
9f:10:e4:ce:f0:64:d3:88:bc:c6:d3:5a:61:d8:2b:
87:bc:27:0e:6e:30:96:69:01:da:71:0a:2e:fb:77:
fe:65:3a:d4:85:2f:83:4c:4b:7a:a8:69:23:97:f8:
ad:f1:89:06:ec:77:e2:b4:cd:6a:40:ec:ab:57:6c:
67:d7:8d:63:95:dc:8c:71:31:60:e4:b4:7d:72:94:
35:af:4a:94:50:90:d8:6b:78:f5:3d:1c:f6:6e:3e:
14:22:fc:4e:cd:80:c2:64:18:e5:ec:23:e9:8a:6f:
53:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:33:6A:DE:F1:EC:16:31:D5:90:28:44:B1:C0:2F:29:96:31:AD:3F
X509v3 Authority Key Identifier:
keyid:61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/CzNq3vHsFjHVkChEscAvKZYxrT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/YYL6MljC0s6hWExW8CYlwD_ysNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.128.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:1f:b7:70:60:3d:59:05:12:6e:42:c5:90:7d:ee:c9:81:d6:
9d:22:d8:8b:6e:d3:fb:4f:e4:3e:63:d1:1e:d9:65:dc:1f:1c:
52:ca:e9:4f:c5:29:40:8f:c5:59:15:00:d6:e8:2c:0f:37:e4:
cf:38:85:a2:13:37:ba:6e:21:87:dc:a6:75:b7:f3:c5:88:f5:
a1:a0:e0:05:c7:46:d3:6c:67:8f:59:19:96:a3:94:2e:59:64:
b7:bd:6f:ae:fc:c7:aa:12:f2:5c:52:a0:d3:2b:50:83:5f:22:
e1:77:20:d8:79:cc:97:4b:47:57:14:c8:cd:23:06:dd:65:cc:
b5:6c:2a:75:2f:8e:b8:f4:86:10:35:17:d3:86:ce:74:4c:03:
56:d7:73:3c:f3:2e:4a:ea:e8:c9:71:84:7e:eb:f8:f7:41:27:
31:79:14:dd:54:4e:d6:2a:0c:4e:c7:d2:86:a1:93:54:e1:04:
db:78:d6:ab:06:9c:34:dd:a5:15:d0:ea:8a:56:37:29:56:6b:
e1:24:6e:73:38:03:ea:4d:46:a6:19:f4:b8:ae:40:a3:98:ab:
e2:05:dd:04:64:8e:ce:1d:74:7d:90:91:e6:a2:d0:74:d6:72:
41:2c:94:bc:f3:c3:b8:62:7e:c9:23:6a:98:e9:1b:ce:1e:f5:
b7:69:90:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:06 2025 by rpki-client