Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/461b90-2e18-42f8-94b8-66d25e139364/1/Cl2aDIq0vnKjgP2mXd_Pe1Q6iQg.roa
File: Cl2aDIq0vnKjgP2mXd_Pe1Q6iQg.roa (raw, json)
Hash identifier: rTAxTMh2JJT8xiwMOGfvvcKjqaewEerF+pzrKKxsD7I=
Subject key identifier: 0A:5D:9A:0C:8A:B4:BE:72:A3:80:FD:A6:5D:DF:CF:7B:54:3A:89:08
Certificate issuer: /CN=18f2f0de77f27a9d98b844550431b6880cd7368c
Certificate serial: 18643D9D
Authority key identifier: 18:F2:F0:DE:77:F2:7A:9D:98:B8:44:55:04:31:B6:88:0C:D7:36:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPLw3nfyep2YuERVBDG2iAzXNow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/461b90-2e18-42f8-94b8-66d25e139364/1/Cl2aDIq0vnKjgP2mXd_Pe1Q6iQg.roa
Signing time: Sat 01 Jan 2022 14:54:52 +0000
ROA not before: Sat 01 Jan 2022 14:54:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205566
IP address blocks: 185.204.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409222557 (0x18643d9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f2f0de77f27a9d98b844550431b6880cd7368c
Validity
Not Before: Jan 1 14:54:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a5d9a0c8ab4be72a380fda65ddfcf7b543a8908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ce:60:c7:b7:7c:32:c3:ca:a5:ea:94:e7:92:
e0:aa:a9:18:3a:2b:f6:06:c8:23:dc:44:3c:72:3e:
63:a4:a1:2b:ad:f2:be:92:c4:8a:9b:30:10:39:30:
38:db:b4:bc:39:8f:ce:3e:b0:63:7c:f7:14:fc:96:
fb:41:35:0b:ff:2f:88:b1:a0:60:8a:db:7c:13:06:
36:a4:a5:e6:8e:d3:c9:2a:a4:f6:bd:99:80:b9:55:
a0:01:1f:e6:a0:32:0a:f5:21:94:7f:50:5b:50:52:
4d:0c:1f:6c:36:c9:c4:fd:2c:73:d0:b4:0f:ec:82:
42:c6:20:72:65:87:0e:7a:c7:f6:bb:ab:19:9f:4f:
36:f3:e3:5a:9f:82:3e:75:ce:bf:77:70:16:f6:49:
05:16:ae:e5:84:74:d9:e6:9d:4a:ce:35:39:77:85:
22:d6:2c:03:51:a7:eb:b8:69:c6:f4:9a:bf:f7:f1:
55:65:fe:3b:a9:70:8a:61:a4:b9:58:92:90:0a:12:
ea:8e:27:07:66:47:82:31:9e:cb:cf:c1:46:0f:8c:
04:38:d7:89:ec:9f:e6:88:16:ac:c9:df:9a:82:9e:
c3:f2:c2:84:1e:30:70:df:6d:b0:9d:60:6d:18:23:
28:90:c3:32:6f:41:e7:8d:4b:70:89:82:16:3c:43:
c4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5D:9A:0C:8A:B4:BE:72:A3:80:FD:A6:5D:DF:CF:7B:54:3A:89:08
X509v3 Authority Key Identifier:
keyid:18:F2:F0:DE:77:F2:7A:9D:98:B8:44:55:04:31:B6:88:0C:D7:36:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPLw3nfyep2YuERVBDG2iAzXNow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/461b90-2e18-42f8-94b8-66d25e139364/1/Cl2aDIq0vnKjgP2mXd_Pe1Q6iQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/461b90-2e18-42f8-94b8-66d25e139364/1/GPLw3nfyep2YuERVBDG2iAzXNow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.160.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:77:d1:c8:02:15:90:49:de:0c:20:c4:63:6b:ba:d1:84:f8:
68:6b:b3:fd:be:c4:16:f6:a4:8a:db:33:0e:85:62:1e:b3:2f:
1c:d3:19:83:73:a2:30:8f:89:c0:17:11:66:74:19:44:b4:f0:
9a:38:6a:0f:e4:93:dc:81:e5:ab:43:d4:58:c0:33:43:01:8d:
83:51:90:3e:ed:01:64:fb:ac:ec:56:ab:e2:1b:85:5c:10:42:
e6:f5:6a:1b:e2:ad:6f:a5:7f:45:a0:5b:ef:d2:23:13:08:78:
3c:25:a7:92:fc:9c:ef:5c:67:b9:f8:7b:30:f0:c9:b5:29:8e:
8f:8c:59:68:15:69:7c:75:62:a8:28:00:7b:0f:6b:d1:3a:ce:
db:ac:c8:66:4c:1f:91:64:25:b6:d4:1d:46:65:0f:bb:24:92:
ad:9e:d5:54:ac:24:85:da:bd:1e:5a:8a:70:73:71:5c:3c:cc:
79:db:60:c5:85:a7:b3:1f:f5:cb:ce:e6:1b:96:9a:a5:b5:df:
49:7b:c8:a5:fd:4b:ac:c5:df:5e:14:1f:a9:be:87:b1:9a:e0:
37:b9:3a:18:8d:f0:f2:e9:5a:6d:31:d3:12:3e:9d:7b:98:df:
11:0d:51:4a:aa:20:94:1b:93:04:fa:13:67:db:12:1f:a2:d4:
83:7f:8d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:48 2025 by rpki-client