Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/OR4KC1-Ue2HCvsJeUUc8GNLPi4w.roa
File: OR4KC1-Ue2HCvsJeUUc8GNLPi4w.roa (raw, json)
Hash identifier: Fnk1q0IDw9gdQASHSIgBZsZmN2wiT35luTSspzcQzig=
Subject key identifier: 39:1E:0A:0B:5F:94:7B:61:C2:BE:C2:5E:51:47:3C:18:D2:CF:8B:8C
Certificate issuer: /CN=43931de6e91b40f4b2bb201253e57a86741105a5
Certificate serial: 0303EECE
Authority key identifier: 43:93:1D:E6:E9:1B:40:F4:B2:BB:20:12:53:E5:7A:86:74:11:05:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Md5ukbQPSyuyASU-V6hnQRBaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/OR4KC1-Ue2HCvsJeUUc8GNLPi4w.roa
Signing time: Thu 20 Jan 2022 22:52:23 +0000
ROA not before: Thu 20 Jan 2022 22:52:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212097
IP address blocks: 185.227.216.0/22 maxlen: 22
185.227.216.0/24 maxlen: 24
185.227.217.0/24 maxlen: 24
185.227.218.0/24 maxlen: 24
185.227.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50589390 (0x303eece)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43931de6e91b40f4b2bb201253e57a86741105a5
Validity
Not Before: Jan 20 22:52:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=391e0a0b5f947b61c2bec25e51473c18d2cf8b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:30:64:93:33:d9:08:4f:9c:a3:c7:09:8f:ba:
c7:c2:97:b6:07:5a:21:49:03:01:d5:0b:87:6a:b0:
34:42:95:06:26:d2:44:12:5f:72:16:e2:cc:e5:2e:
cf:51:b9:e2:34:5b:f9:d3:0d:93:2a:37:9a:e8:bd:
a5:07:2f:14:20:79:fa:c8:23:61:d4:72:0f:cb:69:
56:fa:e3:07:80:b0:ca:a7:9f:c7:27:17:60:92:32:
03:f5:08:d0:37:ab:e0:b1:5f:6d:fe:4b:49:07:58:
be:58:3e:a2:d1:ba:44:80:0d:d7:24:58:44:a4:a0:
83:a5:2d:1b:fb:62:68:bf:f5:10:cc:63:d7:2d:97:
d6:7c:b7:49:85:bb:4c:1b:df:18:cd:14:8c:06:8d:
42:8a:6c:f6:3a:01:f8:63:0e:1f:e4:48:6f:3d:59:
89:ec:21:dc:ed:a5:35:83:87:16:1c:f7:3a:0e:68:
7b:37:69:fb:73:98:97:c9:93:89:f2:f4:da:48:df:
d7:c9:09:53:e5:e0:02:f8:6c:51:57:59:ff:40:d8:
37:8e:5a:43:fc:83:78:9c:d9:fd:e4:d6:07:bf:66:
fb:d6:be:90:b8:b4:7f:c3:8b:a0:07:90:b5:1b:34:
a5:f0:0a:77:64:30:00:da:34:9c:f1:22:0a:ed:7e:
a4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1E:0A:0B:5F:94:7B:61:C2:BE:C2:5E:51:47:3C:18:D2:CF:8B:8C
X509v3 Authority Key Identifier:
keyid:43:93:1D:E6:E9:1B:40:F4:B2:BB:20:12:53:E5:7A:86:74:11:05:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Md5ukbQPSyuyASU-V6hnQRBaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/OR4KC1-Ue2HCvsJeUUc8GNLPi4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/Q5Md5ukbQPSyuyASU-V6hnQRBaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.216.0/22
Signature Algorithm: sha256WithRSAEncryption
24:f5:7c:7c:fb:5d:d1:c0:13:c6:b4:2c:84:94:e0:d8:17:c2:
71:e2:2e:de:82:c5:4d:56:c5:c8:ce:c3:0e:f5:0a:f1:ef:45:
0c:bf:2b:64:fa:1d:54:4a:ed:2e:6b:10:15:e2:1b:cb:3a:05:
7c:8b:79:c5:9d:10:73:3b:5f:63:55:95:95:4b:2f:9b:aa:ae:
68:bd:a8:45:84:98:80:6b:e8:54:cc:ef:c5:15:66:e5:1d:2d:
3c:f6:ec:2a:6e:7a:49:a3:5b:d5:92:78:54:aa:2c:fc:60:22:
2f:75:a4:f6:71:37:9a:4c:97:88:63:24:e1:ba:78:bb:e0:42:
39:bb:c2:e4:94:3e:de:37:47:6c:77:f4:65:46:fa:10:14:ed:
9e:ac:d0:d3:c8:86:dc:2b:f6:07:3a:39:12:6b:4a:b7:6d:79:
1f:7d:4a:75:18:fa:cd:b6:c0:3a:2d:c9:a4:2b:0e:93:84:ef:
0b:81:66:c4:36:95:23:71:07:58:8e:67:8e:46:c2:0e:28:68:
48:3a:da:40:83:b7:2c:d4:16:ba:85:41:58:27:58:99:21:44:
05:92:d8:45:d0:f5:44:7e:de:18:d1:e8:cb:89:ff:a6:55:9c:
18:43:09:1d:9c:04:a9:91:6e:9a:f1:cf:4b:c7:03:7c:5d:a7:
55:15:e0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:56 2025 by rpki-client