Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/3b52CBayay8JZrY2XtZrwlCB2i4.roa
File: 3b52CBayay8JZrY2XtZrwlCB2i4.roa (raw, json)
Hash identifier: 527ZYD6cjcfDyhvxyjoEB26miT1B5oeCeeyCBz5mPaI=
Subject key identifier: DD:BE:76:08:16:B2:6B:2F:09:66:B6:36:5E:D6:6B:C2:50:81:DA:2E
Certificate issuer: /CN=1974ba0b871fff7187d3fefe66c29fc703086d2d
Certificate serial: 014EB1
Authority key identifier: 19:74:BA:0B:87:1F:FF:71:87:D3:FE:FE:66:C2:9F:C7:03:08:6D:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXS6C4cf_3GH0_7-ZsKfxwMIbS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/3b52CBayay8JZrY2XtZrwlCB2i4.roa
Signing time: Fri 01 Jul 2022 09:23:25 +0000
ROA not before: Fri 01 Jul 2022 09:23:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 185.231.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85681 (0x14eb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1974ba0b871fff7187d3fefe66c29fc703086d2d
Validity
Not Before: Jul 1 09:23:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddbe760816b26b2f0966b6365ed66bc25081da2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:48:ef:40:23:65:6c:ab:a0:71:43:6b:b5:22:
cd:ec:2f:c4:73:c2:06:26:a7:50:91:57:89:86:3d:
4f:86:69:f8:f7:d1:0d:dd:79:25:78:05:f2:48:77:
38:a9:ff:f8:9f:5e:0c:a1:f3:69:b8:b2:09:08:a4:
11:2e:34:fa:78:77:65:4d:60:27:52:2f:f1:1a:e7:
b0:4b:82:fe:ba:f5:41:7c:ba:56:00:eb:31:e7:34:
82:57:67:fb:ca:80:7a:c9:66:0f:8a:67:5e:b3:92:
6f:33:fd:c6:30:de:21:2d:35:d2:3f:dc:6f:6d:2f:
e4:12:16:28:d0:26:18:95:bc:73:9c:f6:06:c5:1b:
11:6c:1d:5f:28:a2:d3:56:e8:da:7d:cb:3f:9a:0b:
69:3f:6b:69:bb:1f:0d:03:d3:a5:33:20:ba:af:6a:
62:eb:5d:b4:ab:61:9d:7d:d5:06:e0:27:47:d2:bf:
3e:12:d9:42:5b:10:ad:bd:86:85:03:97:a5:4b:44:
dd:4e:51:ac:f6:67:b5:91:d7:1c:db:d6:0b:a8:f5:
4a:12:a5:c9:4f:10:c4:23:69:69:5f:16:23:57:31:
c3:60:cb:36:a4:73:0d:ea:d2:c0:fd:35:97:30:1a:
16:18:b4:9a:0f:95:df:d0:25:93:c9:dd:5b:c6:78:
7d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BE:76:08:16:B2:6B:2F:09:66:B6:36:5E:D6:6B:C2:50:81:DA:2E
X509v3 Authority Key Identifier:
keyid:19:74:BA:0B:87:1F:FF:71:87:D3:FE:FE:66:C2:9F:C7:03:08:6D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXS6C4cf_3GH0_7-ZsKfxwMIbS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/3b52CBayay8JZrY2XtZrwlCB2i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/GXS6C4cf_3GH0_7-ZsKfxwMIbS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.143.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:44:80:61:d4:a9:5d:67:e7:1f:a7:85:92:6a:9b:a3:ee:04:
1a:d7:9f:e7:62:9a:c4:51:61:70:5f:7a:73:a8:69:af:71:5c:
79:f7:71:60:d3:9a:4b:46:b0:61:cf:f6:27:8d:4f:f6:dd:77:
b9:cf:04:9c:ca:2d:91:77:fa:7b:9a:65:81:b8:ff:8e:7c:fd:
0e:f5:2c:4f:d1:96:09:62:ff:a1:f4:71:4c:43:ec:b1:91:a2:
94:fa:4d:df:f3:3e:26:a1:aa:08:25:1e:2a:ec:14:c6:44:e9:
d6:2f:78:ac:3b:0d:c6:aa:75:ac:b2:c3:4e:88:a4:e6:94:89:
17:2c:96:b0:4a:fd:54:ff:b9:e7:74:a1:50:e0:bb:50:8b:8d:
b9:ff:ec:7b:f8:d0:18:ee:b7:81:fc:ab:2b:8e:a4:48:95:ac:
18:f2:46:82:5b:c4:a4:20:a5:3c:f2:af:9e:ce:8b:cd:e6:d7:
86:d4:2b:35:e8:f2:87:fc:dd:74:79:76:75:cb:e9:45:26:74:
53:97:e5:cd:d6:8d:71:aa:20:75:a8:4f:f2:9b:e7:c5:8d:be:
96:d4:49:af:38:88:8b:e0:15:2a:00:0f:c8:b4:a1:f0:78:e3:
6c:d2:16:88:66:dc:bd:dc:e6:84:07:dd:25:fd:10:50:6b:6e:
01:2b:8e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:38 2025 by rpki-client