Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/57d581-3994-4d83-a1b0-968470b650f4/1/sFgf2KWcphgmdeKihJKxASKVJAw.roa
File: sFgf2KWcphgmdeKihJKxASKVJAw.roa (raw, json)
Hash identifier: sMrYg3R8an32T7wjApeSw+CFh9FL/5fuKhBF/1lg9LU=
Subject key identifier: B0:58:1F:D8:A5:9C:A6:18:26:75:E2:A2:84:92:B1:01:22:95:24:0C
Certificate issuer: /CN=ff836ed8cd29b81b8421a1dab920905e2ed76184
Certificate serial: 0411C862
Authority key identifier: FF:83:6E:D8:CD:29:B8:1B:84:21:A1:DA:B9:20:90:5E:2E:D7:61:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4Nu2M0puBuEIaHauSCQXi7XYYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/57d581-3994-4d83-a1b0-968470b650f4/1/sFgf2KWcphgmdeKihJKxASKVJAw.roa
Signing time: Sat 01 Jan 2022 02:52:19 +0000
ROA not before: Sat 01 Jan 2022 02:52:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203690
IP address blocks: 185.184.10.0/24 maxlen: 24
2a0b:2180:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68274274 (0x411c862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff836ed8cd29b81b8421a1dab920905e2ed76184
Validity
Not Before: Jan 1 02:52:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0581fd8a59ca6182675e2a28492b1012295240c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:e8:58:50:c8:67:a0:da:21:b1:f5:0e:45:
b2:37:61:c7:ab:bb:f6:cf:ca:23:ad:eb:a1:6a:27:
64:17:57:02:25:17:ed:10:fb:dd:29:54:18:fc:ed:
27:69:5d:b9:e7:5c:61:63:44:44:32:9c:a4:31:5f:
6f:e7:78:f7:2b:d9:73:c2:55:eb:ed:88:41:a1:7e:
7a:d3:5f:34:45:32:16:e5:25:e3:99:f1:11:16:47:
3d:4c:5c:c6:e7:7a:42:3b:c8:50:52:57:49:95:ad:
eb:d9:4c:4d:13:36:56:32:89:8e:06:ea:ab:27:95:
75:ab:73:ee:5e:7a:52:d0:4c:38:da:50:a6:b8:1e:
87:64:d3:06:8f:50:0d:c9:57:33:c4:81:16:cc:53:
d7:07:25:68:e9:fe:0f:85:b9:28:df:86:3a:6c:3d:
1a:00:4c:a6:1c:0e:f9:88:25:9d:83:36:9f:1a:02:
82:cc:68:4e:db:09:a7:c0:65:f3:5f:3a:4c:19:a2:
40:15:d6:13:4d:c8:cc:c7:e7:f0:5d:fe:3f:68:0f:
58:bc:74:73:58:5b:44:09:67:33:b3:df:02:b2:7b:
90:c3:e1:c4:63:ec:06:d6:c6:95:6b:bc:10:3d:d2:
58:29:0d:90:1d:1c:15:bb:1b:25:ba:0f:43:4e:27:
1e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:58:1F:D8:A5:9C:A6:18:26:75:E2:A2:84:92:B1:01:22:95:24:0C
X509v3 Authority Key Identifier:
keyid:FF:83:6E:D8:CD:29:B8:1B:84:21:A1:DA:B9:20:90:5E:2E:D7:61:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4Nu2M0puBuEIaHauSCQXi7XYYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/57d581-3994-4d83-a1b0-968470b650f4/1/sFgf2KWcphgmdeKihJKxASKVJAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/57d581-3994-4d83-a1b0-968470b650f4/1/_4Nu2M0puBuEIaHauSCQXi7XYYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.10.0/24
IPv6:
2a0b:2180:2::/48
Signature Algorithm: sha256WithRSAEncryption
65:7b:c6:ae:cc:a7:54:2b:f8:b4:cb:95:1e:68:2f:45:b6:fd:
df:b4:4d:56:0f:89:b9:25:c5:fa:22:22:f1:fe:9c:a1:c1:f1:
0c:ff:8c:c9:c6:ec:59:b3:7e:94:5f:f0:1a:d4:f3:91:7d:94:
f3:4e:da:95:de:35:49:e8:ab:81:45:08:90:0d:86:54:dd:09:
2b:ee:fb:f8:7e:3f:9c:07:2b:72:b9:27:ba:96:41:db:a2:d3:
2a:e7:1a:90:26:c6:05:44:29:c1:9b:4a:d3:a1:e1:57:8d:37:
f5:70:74:4c:7b:b6:d2:64:91:0b:07:dc:ad:d0:0f:1f:1c:8f:
e2:96:04:e3:0a:5c:54:e7:5b:2e:fd:ed:d6:a9:5c:f2:c1:c9:
24:45:73:47:0b:b8:7b:ac:28:3e:bc:92:6b:60:da:9d:c5:3d:
3f:bf:a6:34:ca:8e:35:b6:b9:dd:93:a8:49:0a:e3:84:0a:38:
01:02:19:b2:99:6e:da:e6:a6:53:7b:be:d6:6e:4b:71:db:ce:
8d:dd:12:a6:05:68:7c:4f:79:5e:2f:3d:7a:07:45:ac:76:31:
73:ee:32:d7:8e:de:7f:bb:64:dc:cd:35:8b:22:1e:94:c2:e4:
b4:7c:07:0e:db:27:46:69:e9:c6:97:eb:33:30:5d:0d:0b:2b:
66:c8:e0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:46 2025 by rpki-client