Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4b8090-fa5d-4ab7-a4ca-2e9d9fd29340/1/269pBW3juvEWRJHRqXO0LiQ4epg.roa
File: 269pBW3juvEWRJHRqXO0LiQ4epg.roa (raw, json)
Hash identifier: PEd3A4qiTv8e0ZBX6g2l0Rb+HYl5cbm12a1Nu8Jg+8s=
Subject key identifier: DB:AF:69:05:6D:E3:BA:F1:16:44:91:D1:A9:73:B4:2E:24:38:7A:98
Certificate issuer: /CN=a435d043cab8e5091f41546e848006eae83ccdad
Certificate serial: 01876139FA65CF5DF6926CF2D07D85E2B760
Authority key identifier: A4:35:D0:43:CA:B8:E5:09:1F:41:54:6E:84:80:06:EA:E8:3C:CD:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDXQQ8q45QkfQVRuhIAG6ug8za0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4b8090-fa5d-4ab7-a4ca-2e9d9fd29340/1/269pBW3juvEWRJHRqXO0LiQ4epg.roa
Signing time: Sat 08 Apr 2023 14:16:42 +0000
ROA not before: Sat 08 Apr 2023 14:16:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48108
IP address blocks: 185.235.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:61:39:fa:65:cf:5d:f6:92:6c:f2:d0:7d:85:e2:b7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a435d043cab8e5091f41546e848006eae83ccdad
Validity
Not Before: Apr 8 14:16:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbaf69056de3baf1164491d1a973b42e24387a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f9:ac:b8:18:9a:18:b2:f4:34:f1:97:99:03:
cf:0f:48:3a:8b:3c:5c:54:21:b0:40:2b:71:4b:56:
a7:3c:45:53:ec:37:ee:2c:08:82:b6:90:f8:b8:73:
d4:ad:99:5d:64:92:00:e5:64:ec:4e:35:2a:92:09:
43:d3:b5:63:ab:0c:c0:5d:67:6c:f1:41:56:d7:d4:
68:dd:43:ac:49:3a:28:29:29:e9:8b:5d:a0:ea:f1:
23:eb:ad:d0:b7:a7:98:15:3e:2f:25:15:e4:9c:8e:
87:d8:4a:2a:1b:a4:a5:f7:ed:da:9e:5a:42:b4:19:
0f:41:12:bd:c0:68:a6:5c:06:68:d4:2a:36:b2:c6:
bb:65:9d:aa:02:93:5a:f8:04:69:f3:66:f5:4d:67:
03:90:75:47:ec:03:81:ce:81:24:ee:67:53:1e:e6:
d2:f3:df:e3:39:7b:be:c1:0b:39:58:6b:1d:17:0e:
63:1f:a1:9a:97:4a:74:8b:fc:e1:eb:6f:56:20:d7:
28:5d:9d:b7:a3:58:1e:8f:a2:0a:66:c3:91:f7:b6:
3f:15:0f:06:2a:f3:f8:57:1b:84:44:88:c3:b7:58:
fc:a3:58:7d:ec:c1:1f:57:3e:5a:eb:ef:63:f4:9d:
b3:ed:01:7a:c8:d7:97:b0:18:fe:39:47:53:4a:08:
c3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AF:69:05:6D:E3:BA:F1:16:44:91:D1:A9:73:B4:2E:24:38:7A:98
X509v3 Authority Key Identifier:
keyid:A4:35:D0:43:CA:B8:E5:09:1F:41:54:6E:84:80:06:EA:E8:3C:CD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDXQQ8q45QkfQVRuhIAG6ug8za0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4b8090-fa5d-4ab7-a4ca-2e9d9fd29340/1/269pBW3juvEWRJHRqXO0LiQ4epg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4b8090-fa5d-4ab7-a4ca-2e9d9fd29340/1/pDXQQ8q45QkfQVRuhIAG6ug8za0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.230.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:e8:45:24:fc:56:b6:70:5d:c3:73:2b:5d:f4:44:83:ad:92:
79:ef:55:55:97:87:c5:a6:31:0d:27:68:ae:12:c0:4f:32:38:
fb:95:10:ab:6f:f4:9b:8d:cc:2c:0f:31:19:44:9f:5d:59:52:
35:99:93:40:06:cd:fd:f3:4c:01:c0:32:f3:a6:eb:1d:27:fd:
c5:e3:11:fa:49:da:c2:f1:4b:49:67:b1:6f:09:5f:b2:fd:47:
4c:ab:7a:a4:97:c0:4b:bc:15:9b:ea:ec:4e:a5:20:73:31:1d:
45:92:69:17:3e:02:d1:ed:0d:1d:95:0a:d5:59:38:68:58:9f:
9d:a1:17:28:2d:f6:99:a4:73:88:16:f0:40:a1:33:99:dc:6e:
5b:97:d2:4c:f3:f3:d9:8b:fd:7e:fc:a6:96:1d:41:d2:b5:64:
c7:d9:ff:50:3c:9d:eb:bc:fc:77:ff:b8:79:9e:ce:6f:26:e2:
54:1d:31:00:0c:01:ed:c7:5a:ef:a9:77:5e:a3:d1:b7:4b:04:
cb:04:00:e8:89:9f:51:64:5a:cc:b7:87:47:b8:fb:e1:04:02:
ac:6c:e3:44:5e:67:c7:3b:cb:64:9f:26:3c:5e:83:ea:af:1d:
d9:b1:fe:de:5c:c6:3b:7d:e8:28:23:f8:31:2d:a4:06:a5:94:
eb:b5:b3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:49 2025 by rpki-client