Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c6371f-7d1d-4e4b-888b-61fd0b521b62/1/164LuqKQ4WhwZtoyhzmQrcmFGF0.roa
File: 164LuqKQ4WhwZtoyhzmQrcmFGF0.roa (raw, json)
Hash identifier: SxP7uq0B+/zyHqwkGrq9glaknosZRV05LQtx4KxXwRE=
Subject key identifier: D7:AE:0B:BA:A2:90:E1:68:70:66:DA:32:87:39:90:AD:C9:85:18:5D
Certificate issuer: /CN=af40cf25b6b6b83bc4fa1693845bf637597412ca
Certificate serial: 03B39C1F
Authority key identifier: AF:40:CF:25:B6:B6:B8:3B:C4:FA:16:93:84:5B:F6:37:59:74:12:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0DPJba2uDvE-haThFv2N1l0Eso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c6371f-7d1d-4e4b-888b-61fd0b521b62/1/164LuqKQ4WhwZtoyhzmQrcmFGF0.roa
Signing time: Sat 01 Jan 2022 16:11:04 +0000
ROA not before: Sat 01 Jan 2022 16:11:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60458
IP address blocks: 185.215.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62102559 (0x3b39c1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af40cf25b6b6b83bc4fa1693845bf637597412ca
Validity
Not Before: Jan 1 16:11:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7ae0bbaa290e1687066da32873990adc985185d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:de:eb:d2:7b:90:02:2f:c2:33:c8:5a:ca:
25:a6:34:f9:90:97:fc:65:ec:e2:cf:55:e7:b2:38:
1d:b0:39:03:23:20:09:31:af:5d:8d:31:f2:8b:ce:
29:70:f3:3f:5d:44:b9:1e:f6:83:90:f9:05:43:49:
8c:60:2e:03:83:a8:9e:e2:25:3a:16:f2:e7:21:f4:
f1:6f:e1:45:61:be:03:7e:d6:4d:df:d4:51:0b:16:
74:44:ff:c9:ec:a9:62:a0:d9:08:95:87:97:e3:ec:
a1:05:e2:c4:59:be:96:e5:3c:26:7f:d0:c2:b3:52:
cc:7d:3e:02:c1:02:df:59:d8:e3:d3:91:2b:90:f1:
92:c9:de:a0:90:a0:b7:26:96:f1:f6:4f:cd:a6:10:
bb:6f:70:e2:fa:ea:df:b8:50:28:73:c0:b8:e5:a9:
e9:e9:f6:51:cb:e2:a8:a5:2e:3c:18:ec:e5:e6:5b:
5d:09:64:3c:43:5e:63:9b:c1:61:94:1a:e5:41:6d:
90:20:3d:f2:72:c4:14:02:dc:21:46:f4:ba:ed:41:
a4:ce:c3:d6:6b:5b:2f:21:53:0f:9c:3e:d7:0e:51:
c0:81:9e:0a:80:a9:2d:f7:b6:30:b4:83:b3:16:65:
3a:8c:ba:e6:22:e4:fa:8d:1e:25:5c:24:aa:36:72:
b7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AE:0B:BA:A2:90:E1:68:70:66:DA:32:87:39:90:AD:C9:85:18:5D
X509v3 Authority Key Identifier:
keyid:AF:40:CF:25:B6:B6:B8:3B:C4:FA:16:93:84:5B:F6:37:59:74:12:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0DPJba2uDvE-haThFv2N1l0Eso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c6371f-7d1d-4e4b-888b-61fd0b521b62/1/164LuqKQ4WhwZtoyhzmQrcmFGF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c6371f-7d1d-4e4b-888b-61fd0b521b62/1/r0DPJba2uDvE-haThFv2N1l0Eso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.114.0/24
Signature Algorithm: sha256WithRSAEncryption
62:70:c8:9e:89:68:6d:71:78:a0:27:54:c6:20:73:c0:6b:92:
d1:b7:89:28:40:15:07:9c:fa:13:b5:82:ae:8f:05:33:8c:af:
c9:0e:f5:0c:4b:ca:fe:1c:1e:0a:35:0f:10:51:b0:48:27:e9:
85:34:ed:0f:7e:47:a5:6e:58:eb:10:2b:6f:99:64:33:d6:ac:
20:80:42:b6:c9:5e:a6:e3:ba:c6:9c:fe:f0:99:bb:da:50:0f:
e9:2c:e5:90:44:c3:9e:75:31:d0:ba:e6:21:f1:5d:90:a5:7c:
8a:6e:e0:af:4a:09:fa:62:d7:95:87:e2:77:04:86:17:de:4e:
25:0d:44:87:c1:bd:ee:b8:66:de:f6:6e:e0:c1:00:25:e2:b6:
10:0f:f8:95:dc:71:af:1f:30:0d:de:9a:cf:56:38:77:2c:b5:
08:31:c1:89:ed:ab:36:7d:fd:20:a1:d4:db:15:97:9e:f8:38:
16:c0:2e:1f:ed:13:0f:8b:ab:ef:42:da:a4:90:a4:c1:0e:1c:
06:72:a4:f0:30:c4:08:ed:d7:da:02:a7:34:a7:f2:75:c6:5d:
8d:9c:16:09:4a:65:bc:1e:26:a3:41:45:6d:ca:f7:37:9f:66:
52:3b:2b:1d:a7:f2:c5:a3:3e:aa:f5:fd:08:08:6f:f0:00:50:
e5:7e:40:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:19 2025 by rpki-client