Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c26f1f-e427-4470-8902-654458a493a5/1/SSlDC9oITaFN8XbsoroLuF6emaM.roa
File: SSlDC9oITaFN8XbsoroLuF6emaM.roa (raw, json)
Hash identifier: uoQ0omlu4b8tVD3L+fAy7RYSTe8VkMq2zgqtit3csGw=
Subject key identifier: 49:29:43:0B:DA:08:4D:A1:4D:F1:76:EC:A2:BA:0B:B8:5E:9E:99:A3
Certificate issuer: /CN=19ef82fc25d73135525f2bc0f8226455cf9e5b30
Certificate serial: 05C42F7E
Authority key identifier: 19:EF:82:FC:25:D7:31:35:52:5F:2B:C0:F8:22:64:55:CF:9E:5B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge-C_CXXMTVSXyvA-CJkVc-eWzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c26f1f-e427-4470-8902-654458a493a5/1/SSlDC9oITaFN8XbsoroLuF6emaM.roa
Signing time: Sat 01 Jan 2022 01:51:47 +0000
ROA not before: Sat 01 Jan 2022 01:51:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207048
IP address blocks: 185.123.52.0/24 maxlen: 24
2a10:ec0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96743294 (0x5c42f7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ef82fc25d73135525f2bc0f8226455cf9e5b30
Validity
Not Before: Jan 1 01:51:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4929430bda084da14df176eca2ba0bb85e9e99a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fc:10:05:45:9c:1d:4b:60:6a:b2:f4:97:fa:
71:18:f5:76:62:d2:8d:30:dd:a8:83:25:d9:30:e1:
f2:fe:c6:bf:50:80:8c:1e:ee:98:bd:9a:ee:59:73:
81:6b:d5:cc:88:68:ab:40:f0:71:8a:a8:14:16:67:
fa:60:ef:3d:af:49:13:e0:2b:91:0c:23:ad:9e:cb:
53:e2:98:57:c1:0e:f5:98:f1:15:dc:70:67:5e:0c:
72:d3:78:a5:ed:a1:b1:d6:96:6d:77:fd:3a:09:a5:
7a:fa:7c:54:8e:47:e0:fc:6e:08:c4:18:c1:da:f0:
55:b1:6a:9f:bc:1c:b0:7d:ea:ad:83:ad:fb:ef:9b:
4f:16:7a:d9:d7:37:68:4c:99:a6:db:5d:cf:ff:63:
ac:72:63:91:70:83:57:58:40:a8:08:06:66:e2:11:
03:de:dc:b9:0e:3c:24:f9:10:ce:89:e3:61:e8:a5:
f6:6d:d0:68:11:05:e7:96:90:3d:37:d3:88:c4:2b:
b8:6f:51:b8:54:ff:ae:bd:2d:ab:3e:8a:3e:49:da:
c9:c2:cf:52:a1:9b:22:76:53:cb:1f:4c:cf:ea:58:
1d:4d:fe:ba:eb:04:19:ba:d1:e8:e5:eb:43:97:7d:
e6:fb:71:a4:cd:1c:01:76:5b:b1:97:9d:e0:cd:b1:
36:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:29:43:0B:DA:08:4D:A1:4D:F1:76:EC:A2:BA:0B:B8:5E:9E:99:A3
X509v3 Authority Key Identifier:
keyid:19:EF:82:FC:25:D7:31:35:52:5F:2B:C0:F8:22:64:55:CF:9E:5B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge-C_CXXMTVSXyvA-CJkVc-eWzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c26f1f-e427-4470-8902-654458a493a5/1/SSlDC9oITaFN8XbsoroLuF6emaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c26f1f-e427-4470-8902-654458a493a5/1/Ge-C_CXXMTVSXyvA-CJkVc-eWzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.52.0/24
IPv6:
2a10:ec0::/29
Signature Algorithm: sha256WithRSAEncryption
0e:3b:96:ef:7f:f2:c9:bb:ee:12:8c:50:7c:69:d0:99:e0:dd:
b9:b1:d1:74:8d:f1:02:d6:c6:50:2c:98:6f:7d:85:cc:4b:96:
0f:65:c0:6e:39:d2:5c:1a:28:43:3d:9e:57:45:fe:b3:4c:70:
17:c2:4f:82:e1:80:39:e2:15:fd:79:66:a9:2f:c9:4e:bd:76:
72:2a:5d:a5:4b:f8:a1:a6:65:e7:82:f9:1d:4c:03:59:62:92:
1e:06:1c:45:c8:60:56:04:67:20:b4:d0:37:b4:a5:6a:2c:35:
39:7f:df:6b:87:55:d1:aa:de:3d:0f:2d:94:1f:0f:e4:b0:45:
c7:74:b8:16:1c:16:98:bf:7b:65:ad:f1:67:3f:37:3a:ac:a0:
3a:c2:f3:5b:5e:c1:54:25:db:fe:ee:c8:3d:d9:6d:9d:de:a4:
f2:0f:0e:cb:9d:12:05:ed:60:13:16:00:82:d0:9a:df:85:d7:
5d:cd:88:b1:bc:dc:2a:49:ae:0d:da:f1:e3:c2:37:88:b8:8e:
e4:59:de:7e:f6:66:d5:8e:65:46:a4:ec:e3:9a:e0:92:45:78:
0f:d7:48:7d:c5:a5:84:b4:61:4b:ba:5e:52:69:dc:bf:bd:dd:
97:62:09:2d:5b:7d:b4:92:0a:24:b8:91:1d:e1:72:fa:f2:96:
9a:98:ec:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:35 2025 by rpki-client