Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/bv5PgksiQXJn5Ux3Iev0QisSfYs.roa
File: bv5PgksiQXJn5Ux3Iev0QisSfYs.roa (raw, json)
Hash identifier: MX1ixUa61soehLzlyg7ZGeIVyNPUBqO3yCwCFOcv4YE=
Subject key identifier: 6E:FE:4F:82:4B:22:41:72:67:E5:4C:77:21:EB:F4:42:2B:12:7D:8B
Certificate issuer: /CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Certificate serial: 01857015315E014E0C4FB68407156117FC07
Authority key identifier: 5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/bv5PgksiQXJn5Ux3Iev0QisSfYs.roa
Signing time: Mon 02 Jan 2023 01:25:15 +0000
ROA not before: Mon 02 Jan 2023 01:25:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56636
IP address blocks: 185.217.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:31:5e:01:4e:0c:4f:b6:84:07:15:61:17:fc:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Validity
Not Before: Jan 2 01:25:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6efe4f824b22417267e54c7721ebf4422b127d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:09:38:fb:f9:0c:7e:75:18:fc:39:3b:b1:3e:
22:61:8d:a9:63:a4:ce:7a:b0:37:95:ef:5c:49:15:
6e:0e:b2:20:d2:59:b8:df:e7:93:db:80:6c:43:cd:
1c:09:ac:67:dc:58:11:dc:d1:f5:37:d1:80:2d:67:
63:7e:5e:2d:27:a2:d4:b3:f5:64:65:f6:23:ab:73:
ba:f0:2a:9c:75:be:d5:c7:3c:02:e1:d5:85:1b:da:
0a:52:92:f3:01:ac:88:ea:7f:17:a4:2e:1f:a6:52:
71:8c:d2:de:f7:e3:e6:ac:4e:ce:91:3a:02:fd:21:
f2:b8:98:75:5c:84:bc:a6:60:ba:cc:33:bb:58:c7:
ca:6d:e8:41:2a:77:b6:0b:93:49:9c:4f:84:d8:ab:
96:2c:c6:fd:fb:79:ab:00:41:1d:f7:6d:17:56:21:
a1:ff:58:6c:cf:de:a3:d2:81:1c:c4:26:cc:5a:76:
90:d2:27:f4:18:87:2b:fc:80:2d:d7:10:b6:cd:1c:
af:f5:4a:7f:3c:9d:8a:b9:ab:f1:60:c0:2b:25:21:
6c:5e:df:43:c2:72:9e:af:18:ba:4e:cc:db:93:3b:
24:33:88:92:7a:50:b1:56:97:e4:41:8f:62:bc:24:
e0:0a:c1:ca:b6:c7:6a:09:e5:41:36:92:b8:a1:3c:
5c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FE:4F:82:4B:22:41:72:67:E5:4C:77:21:EB:F4:42:2B:12:7D:8B
X509v3 Authority Key Identifier:
keyid:5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/bv5PgksiQXJn5Ux3Iev0QisSfYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.252.0/22
Signature Algorithm: sha256WithRSAEncryption
79:14:88:28:31:22:19:03:7b:d2:0e:ff:58:f2:1e:3e:d5:d5:
5c:87:57:d0:ef:42:34:d5:30:29:62:c8:70:53:79:b7:09:8c:
95:30:94:73:03:2e:ec:25:da:30:16:61:64:25:c8:59:d3:3c:
38:22:d0:66:78:81:3d:91:75:0e:a0:18:56:53:a7:25:fc:e5:
aa:ac:40:ca:d9:d8:e3:65:f4:37:b4:68:79:0f:01:83:c5:da:
96:7d:e3:4c:d8:ee:15:f5:36:e9:68:c3:b0:6b:93:d8:49:32:
45:07:13:a3:d4:bb:b9:bc:56:3c:09:66:88:40:7b:51:52:27:
4f:94:89:26:2f:26:e6:85:77:a6:90:86:f2:23:ab:b7:4b:c3:
d6:4a:fc:a8:51:3d:8c:8d:75:fa:fc:05:69:90:7d:65:73:bb:
5a:c5:30:3c:40:5a:da:38:10:cb:f2:8a:7d:67:a1:4c:d0:cc:
db:1d:ee:07:48:f6:72:b6:78:fd:45:3e:ae:36:28:66:7a:1e:
97:bc:4c:8c:02:fb:9a:64:8e:13:c3:df:5e:0f:8b:83:18:7a:
13:5c:ec:69:51:66:e5:60:20:98:d2:32:a3:ea:8f:94:cc:fc:
e3:34:13:3e:f0:c0:2a:2a:d3:c4:e1:1d:d2:6b:89:c9:87:24:
c7:d2:cb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:15 2025 by rpki-client