Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/bbc08d-aa24-4750-b75a-a9f752d408ff/1/I5OsdSWPRPikC2kW0pFzRwlF4I4.roa
File: I5OsdSWPRPikC2kW0pFzRwlF4I4.roa (raw, json)
Hash identifier: hD2LzU2couXIgMBYMxNXjS0wka7JVUWtoFR4SOlrRwg=
Subject key identifier: 23:93:AC:75:25:8F:44:F8:A4:0B:69:16:D2:91:73:47:09:45:E0:8E
Certificate issuer: /CN=2a7166bde0d13beba0346454f31dc8a12b8429fd
Certificate serial: 018CC9BC20D6DEF8546D677FC8B242575650
Authority key identifier: 2A:71:66:BD:E0:D1:3B:EB:A0:34:64:54:F3:1D:C8:A1:2B:84:29:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnFmveDRO-ugNGRU8x3IoSuEKf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/bbc08d-aa24-4750-b75a-a9f752d408ff/1/I5OsdSWPRPikC2kW0pFzRwlF4I4.roa
Signing time: Tue 02 Jan 2024 10:33:18 +0000
ROA not before: Tue 02 Jan 2024 10:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205741
IP address blocks: 185.235.58.0/24 maxlen: 24
185.235.57.0/24 maxlen: 24
185.235.56.0/24 maxlen: 24
185.235.56.0/22 maxlen: 22
185.235.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:20:d6:de:f8:54:6d:67:7f:c8:b2:42:57:56:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7166bde0d13beba0346454f31dc8a12b8429fd
Validity
Not Before: Jan 2 10:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2393ac75258f44f8a40b6916d29173470945e08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b4:10:ff:e3:20:c9:c2:e9:2d:c7:1f:3d:39:
48:03:5f:0b:80:b1:eb:e3:1b:31:3a:fe:8d:30:ca:
ed:52:0c:a4:19:e8:c6:c9:b7:fd:36:6f:56:63:f9:
a1:5a:28:da:27:d6:52:80:a9:7a:df:1e:ca:9d:6f:
62:75:ae:02:e9:c5:16:8e:1f:0b:32:10:0e:7e:55:
50:e2:83:09:61:0c:15:98:4c:03:7f:f7:87:1f:65:
c5:23:a3:44:64:7d:b9:87:e8:cb:bd:fb:af:47:d0:
04:50:e2:e2:91:38:61:c6:c6:d3:c9:6f:69:12:28:
d0:c9:47:aa:08:58:e9:89:e0:66:42:8a:48:46:60:
d5:e8:7c:45:11:fc:3b:4d:50:5c:19:ba:37:88:8c:
c1:f2:bd:9c:05:fe:b8:86:cd:d6:f0:d2:fe:dd:ac:
71:7a:bc:51:3d:54:1f:61:79:a8:d1:9b:26:5d:87:
17:a8:1c:10:e8:88:03:6a:36:c4:d6:d7:03:cc:dd:
a7:e6:5c:22:7b:3c:d8:36:34:e9:f8:b7:68:04:35:
97:bc:66:43:06:cd:a5:15:aa:a7:ca:32:2b:a1:12:
96:e0:cb:a7:44:4b:09:12:01:2e:36:ba:c9:f5:de:
38:ff:88:d5:9c:0f:b1:70:02:4f:77:57:ea:67:fb:
97:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:93:AC:75:25:8F:44:F8:A4:0B:69:16:D2:91:73:47:09:45:E0:8E
X509v3 Authority Key Identifier:
keyid:2A:71:66:BD:E0:D1:3B:EB:A0:34:64:54:F3:1D:C8:A1:2B:84:29:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnFmveDRO-ugNGRU8x3IoSuEKf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bbc08d-aa24-4750-b75a-a9f752d408ff/1/I5OsdSWPRPikC2kW0pFzRwlF4I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bbc08d-aa24-4750-b75a-a9f752d408ff/1/KnFmveDRO-ugNGRU8x3IoSuEKf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.56.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:4f:8d:e0:52:d1:bb:ea:85:df:23:3a:45:f9:af:53:f6:00:
45:b7:52:6e:29:1b:8c:61:49:1c:61:a4:7e:ab:e2:e8:18:a7:
07:68:9e:12:87:51:e4:15:41:93:68:e6:ef:c4:86:4e:d0:4a:
d5:49:00:6b:a2:b3:36:0e:32:71:d3:60:cf:69:bc:6a:c6:ff:
4c:83:64:64:62:56:be:ec:88:d9:c4:4c:6b:87:2e:2d:5e:0d:
ac:3e:f1:6e:48:9d:36:e5:ff:07:0d:0b:57:d2:d1:a4:ec:2b:
9e:71:2e:ef:1c:8e:ba:98:f1:66:f1:e3:63:49:b1:3b:5b:82:
62:0b:e6:56:6b:1f:59:59:57:d3:e7:13:6d:a0:65:28:28:4d:
ad:3f:1e:fe:81:e9:1d:a0:b4:ef:9e:d5:3f:d4:6a:e1:da:52:
66:91:bb:c2:f0:b8:c8:a8:86:89:f1:dd:88:48:61:0a:d8:32:
48:36:18:a1:8a:60:cc:2d:73:0b:1a:1a:25:ee:9b:ef:42:14:
1b:ae:1f:eb:17:f0:bd:07:1a:76:47:8b:07:76:56:0e:67:3c:
3a:fb:7e:65:e0:27:cd:47:20:d7:7c:4e:21:00:14:67:16:2c:
4b:8e:45:c7:b3:f8:d2:78:73:e3:6d:06:51:bd:7e:7a:70:c9:
4b:9f:46:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:37:02 2025 by rpki-client