Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/7951b5-9cb6-4535-95c6-63c52e92c47e/1/sIpBENCtBUIiltn-4DRrFApdPIU.roa
File: sIpBENCtBUIiltn-4DRrFApdPIU.roa (raw, json)
Hash identifier: K4BA+JwTr2C+phnWQqmkZc2diSHOVAfMf/AxPLO3R1U=
Subject key identifier: B0:8A:41:10:D0:AD:05:42:22:96:D9:FE:E0:34:6B:14:0A:5D:3C:85
Certificate issuer: /CN=d557f65aa23dbacea5b1cf833a63482ef3e43057
Certificate serial: 026CDC2C
Authority key identifier: D5:57:F6:5A:A2:3D:BA:CE:A5:B1:CF:83:3A:63:48:2E:F3:E4:30:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Vf2WqI9us6lsc-DOmNILvPkMFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/7951b5-9cb6-4535-95c6-63c52e92c47e/1/sIpBENCtBUIiltn-4DRrFApdPIU.roa
Signing time: Sat 01 Jan 2022 00:52:19 +0000
ROA not before: Sat 01 Jan 2022 00:52:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.248.224.0/24 maxlen: 24
185.248.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40688684 (0x26cdc2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d557f65aa23dbacea5b1cf833a63482ef3e43057
Validity
Not Before: Jan 1 00:52:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b08a4110d0ad05422296d9fee0346b140a5d3c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:a7:65:a7:66:e8:83:d3:8c:84:06:98:8b:
72:4f:43:dd:e9:98:cd:34:5d:d4:67:f2:37:3e:a6:
7d:73:75:4a:35:79:c0:bc:d4:e4:48:f9:4b:b6:0f:
83:bf:62:35:da:b0:17:8e:c5:8e:68:62:76:3b:59:
61:5c:9d:54:69:92:84:1c:db:db:f0:7c:6a:03:53:
b2:e6:f9:a3:77:ce:62:7c:53:6c:ef:4a:4a:a4:0e:
50:83:f8:b2:0f:dc:87:77:94:25:f8:16:0f:7e:cc:
33:90:b2:28:0b:e3:a0:c1:1b:76:68:8c:94:75:58:
f6:42:40:74:ba:c2:58:36:8d:87:e7:a7:9c:df:11:
e6:6f:04:58:8a:07:9b:ef:b6:24:6f:b6:80:b7:47:
f9:96:7f:34:1f:b5:74:e3:d6:64:8d:15:f8:03:ce:
df:d4:b1:9d:e6:09:57:d0:cd:8d:f9:1b:09:34:23:
4b:8b:47:02:94:48:2c:c9:5f:3b:8b:f2:dc:3b:6e:
25:a8:33:f7:1e:9d:ee:74:d2:d5:4f:08:e7:fc:b1:
89:ae:ca:95:44:84:f9:fd:f0:ea:d7:5d:cc:cc:4c:
e7:51:3f:05:95:af:93:ec:bb:6e:9a:01:6b:2b:b2:
9d:fb:6d:5d:71:e4:8a:37:32:1b:c5:69:27:24:66:
2d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8A:41:10:D0:AD:05:42:22:96:D9:FE:E0:34:6B:14:0A:5D:3C:85
X509v3 Authority Key Identifier:
keyid:D5:57:F6:5A:A2:3D:BA:CE:A5:B1:CF:83:3A:63:48:2E:F3:E4:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Vf2WqI9us6lsc-DOmNILvPkMFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7951b5-9cb6-4535-95c6-63c52e92c47e/1/sIpBENCtBUIiltn-4DRrFApdPIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7951b5-9cb6-4535-95c6-63c52e92c47e/1/1Vf2WqI9us6lsc-DOmNILvPkMFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.224.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:00:f1:f9:2e:58:6b:90:64:ff:e3:79:46:d5:1b:d5:65:9f:
af:21:65:57:62:18:81:6a:57:30:24:a0:00:8c:ae:f3:4f:8b:
ce:6e:9e:c2:9d:38:6f:0c:5e:19:d0:ec:87:dd:93:b0:c2:91:
d5:b5:7a:9e:16:bb:09:92:ce:6b:d5:83:00:a4:f8:44:fa:16:
24:15:48:a3:42:a2:8e:c7:25:64:8f:c7:fc:e8:5d:77:81:b2:
22:ae:58:00:4a:c5:af:05:b5:92:63:e3:61:18:0a:72:e5:cb:
42:53:87:c1:75:7a:ac:5d:06:82:2d:2b:19:b1:41:51:7a:17:
df:aa:7c:9d:5f:54:cb:aa:00:39:c4:17:1e:55:a3:b9:11:19:
8b:36:47:48:56:cc:7c:50:45:38:e7:75:78:8b:ab:95:5c:cc:
57:1a:7d:ab:e2:a6:9c:9d:0d:11:ba:fa:4e:4c:9d:48:2e:60:
1b:4e:ff:33:e8:44:91:49:fe:cb:5c:b9:fc:0f:fe:44:fb:ec:
87:79:1e:09:93:f6:ed:55:32:aa:33:57:e4:1a:c4:a6:40:54:
e6:d8:e2:b9:85:b7:de:08:37:d3:cb:ec:fe:69:74:90:be:05:
b4:16:ff:9b:19:5d:f2:a3:1c:25:db:13:18:f1:c2:15:04:b5:
4b:73:08:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:10:37 2025 by rpki-client