Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/760816-91fb-498b-a393-bda87e1274b8/1/qI_5m98U6xqfLjS8tv3elDCyIWE.roa
File: qI_5m98U6xqfLjS8tv3elDCyIWE.roa (raw, json)
Hash identifier: hCXvKgFqEm/cBOJraSqbLugktr0zrEKFeF9zLEYKxo8=
Subject key identifier: A8:8F:F9:9B:DF:14:EB:1A:9F:2E:34:BC:B6:FD:DE:94:30:B2:21:61
Certificate issuer: /CN=737f9e60b386f68dca02cd82076b7c0066d2d230
Certificate serial: 0156F1CC
Authority key identifier: 73:7F:9E:60:B3:86:F6:8D:CA:02:CD:82:07:6B:7C:00:66:D2:D2:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3-eYLOG9o3KAs2CB2t8AGbS0jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/760816-91fb-498b-a393-bda87e1274b8/1/qI_5m98U6xqfLjS8tv3elDCyIWE.roa
Signing time: Tue 21 Jun 2022 13:33:44 +0000
ROA not before: Tue 21 Jun 2022 13:33:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14478
IP address blocks: 185.230.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22475212 (0x156f1cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=737f9e60b386f68dca02cd82076b7c0066d2d230
Validity
Not Before: Jun 21 13:33:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a88ff99bdf14eb1a9f2e34bcb6fdde9430b22161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:cb:1c:89:dd:c2:0b:29:cc:b8:13:8f:6a:
2d:d4:e6:66:81:11:37:27:e8:67:47:62:50:d3:9c:
2b:fb:cd:9f:be:45:96:de:9f:5c:c9:7a:25:de:03:
48:65:42:95:64:f8:27:dd:90:de:d8:05:5c:68:90:
04:78:c9:1d:d6:64:6e:e0:df:3f:b4:6a:b1:81:5f:
92:c0:93:d1:a0:54:cc:62:8d:ee:42:d4:38:e6:0f:
d9:fe:28:6e:a4:79:8c:f0:fc:83:b2:93:97:20:a4:
3f:22:cd:f6:8d:f3:3e:90:97:6b:91:d4:ce:9e:34:
c9:b7:a4:a8:fc:03:9d:35:b5:23:21:91:bd:10:e1:
f8:3b:bc:6f:ae:8c:0d:cc:70:3f:d3:d3:79:ec:7e:
b6:0b:49:9a:ca:ab:0a:69:ea:a0:c9:96:a9:87:19:
28:13:e6:61:d1:91:ca:a8:61:1d:3a:dd:d4:1d:3c:
a2:fd:e5:f4:65:d6:5f:b8:2f:bc:a4:17:9b:e1:1d:
15:53:5c:1d:87:93:9b:a0:d2:2e:c5:42:e9:14:db:
4c:e0:66:f6:e4:3e:89:2a:b6:8d:4e:f9:08:ac:42:
55:78:fd:82:44:87:64:27:92:58:e4:c8:86:5b:ef:
92:3b:79:8b:05:a3:eb:40:84:c1:00:54:b8:25:86:
74:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8F:F9:9B:DF:14:EB:1A:9F:2E:34:BC:B6:FD:DE:94:30:B2:21:61
X509v3 Authority Key Identifier:
keyid:73:7F:9E:60:B3:86:F6:8D:CA:02:CD:82:07:6B:7C:00:66:D2:D2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3-eYLOG9o3KAs2CB2t8AGbS0jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/760816-91fb-498b-a393-bda87e1274b8/1/qI_5m98U6xqfLjS8tv3elDCyIWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/760816-91fb-498b-a393-bda87e1274b8/1/c3-eYLOG9o3KAs2CB2t8AGbS0jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.222.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d0:82:da:72:38:74:eb:9a:d3:04:ce:32:53:4e:53:1b:20:
07:17:a5:6e:44:5e:bc:11:e4:3e:f2:a5:60:e8:5c:e7:1e:ee:
3f:d2:ec:65:e6:1d:7b:00:65:6f:14:d3:d3:d1:68:c4:fb:7b:
bb:b6:28:83:64:86:3f:9d:52:71:b7:48:e3:36:1a:7c:46:00:
45:65:92:6b:19:a0:96:ca:4e:02:9d:87:59:c3:49:e3:48:fa:
ee:b1:5b:6c:c3:de:bc:71:f0:17:ba:b9:66:1a:2e:41:a2:c1:
66:70:ea:f2:06:3a:f3:75:bc:aa:75:05:c2:b9:73:4f:79:3a:
d9:f5:49:eb:53:aa:7a:80:61:0d:a7:33:c4:ec:41:ef:51:54:
67:21:d0:00:e4:d2:27:b0:22:c7:27:c6:61:57:c1:8f:89:f3:
7c:db:c4:28:a7:cd:41:57:fa:66:2d:94:6c:7d:a4:c6:ca:9d:
52:70:b5:de:19:9e:68:e4:6f:8a:4a:72:f2:d4:cf:5a:3a:1e:
e6:f3:af:0d:33:21:d1:08:d1:ea:8c:75:94:5b:8b:05:95:18:
a4:9a:aa:5c:0a:eb:46:e0:33:99:e6:01:21:6d:f6:e6:fa:71:
c3:34:f1:d5:3c:c4:53:51:32:9b:d5:91:93:d4:1e:bc:13:c9:
f4:3a:48:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:37 2025 by rpki-client