Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/V3QOddhcPBmuQThGqQqqCfj40_A.roa
File: V3QOddhcPBmuQThGqQqqCfj40_A.roa (raw, json)
Hash identifier: XSniLRSkNP258hAZ9xKcKkLsAj+Kg4DkreKDUgYGLl0=
Subject key identifier: 57:74:0E:75:D8:5C:3C:19:AE:41:38:46:A9:0A:AA:09:F8:F8:D3:F0
Certificate issuer: /CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Certificate serial: 05468405
Authority key identifier: D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/V3QOddhcPBmuQThGqQqqCfj40_A.roa
Signing time: Sat 01 Jan 2022 06:04:06 +0000
ROA not before: Sat 01 Jan 2022 06:04:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47681
IP address blocks: 185.191.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88507397 (0x5468405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Validity
Not Before: Jan 1 06:04:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57740e75d85c3c19ae413846a90aaa09f8f8d3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:45:c8:92:9b:cf:50:9e:75:7e:ff:c5:e8:7a:
52:ab:63:fe:03:ba:0d:e6:82:e2:4e:5a:5b:df:e1:
2c:1a:48:0d:29:6d:67:38:21:60:70:b6:78:18:68:
3b:a1:16:31:22:74:9e:7c:3b:fc:b1:6b:19:1f:e4:
09:9c:66:d4:44:d0:07:c4:25:76:ed:07:04:94:7e:
77:f5:62:5b:b0:c4:46:aa:49:49:01:77:7a:c9:6e:
77:c9:e8:06:1b:e7:19:98:62:47:51:6b:f9:79:e8:
db:f5:93:2c:b3:03:d7:1e:39:de:d0:a8:ec:8b:94:
da:a2:47:39:7b:b3:e4:a8:7f:e3:6e:81:f4:89:99:
2e:dc:cb:d9:a5:3c:29:7f:90:1c:69:b6:08:b7:8b:
51:a5:9f:54:83:23:0c:02:21:b3:dc:cd:18:0a:ed:
e0:92:65:6a:60:01:42:dc:ca:55:a3:0e:4e:00:59:
66:e8:5d:e4:a9:a3:ae:6a:f2:32:79:a5:20:4b:b8:
3d:f0:e2:52:92:33:47:74:54:79:24:aa:d1:64:2a:
42:18:10:50:50:22:5a:59:c5:e0:39:e9:df:ba:29:
10:51:15:76:a7:4e:84:a6:8f:1a:d7:60:a6:45:f5:
a6:02:c8:94:8b:44:76:22:df:3b:0c:bd:9a:02:6d:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:74:0E:75:D8:5C:3C:19:AE:41:38:46:A9:0A:AA:09:F8:F8:D3:F0
X509v3 Authority Key Identifier:
keyid:D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/V3QOddhcPBmuQThGqQqqCfj40_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/1P8P7Ne_RBSJMXiN_n8g1npnoNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.184.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:01:2a:dd:2c:7a:76:c2:c5:dd:02:da:d0:70:bf:e6:c3:6c:
1a:d1:6c:0b:fa:84:4f:09:0f:19:ee:44:e9:93:96:d4:05:52:
e3:18:5b:20:4f:97:89:f7:c3:c2:52:55:06:6e:88:a2:7c:d0:
1f:db:ff:f5:60:59:40:3a:51:fc:27:c7:6b:1a:a5:fb:a3:b9:
fb:ae:03:b5:2e:03:95:13:1c:69:6b:87:46:68:f6:62:35:ee:
17:7f:59:79:86:49:3b:34:08:2e:5c:fd:af:5d:d9:d4:d0:e3:
ad:c0:0c:61:0c:fa:b4:78:79:d3:f0:7e:88:5a:d7:40:d1:af:
86:e5:82:75:62:56:07:c1:9e:f4:53:76:e5:bb:12:97:92:56:
57:32:36:b4:16:92:6c:19:0f:0a:90:29:6a:68:30:ea:31:52:
05:e9:f1:95:01:14:cc:77:14:a6:33:c5:21:19:a3:0c:3f:d8:
b0:d4:a5:d7:e1:1d:24:29:4e:4c:d7:ab:7e:25:a8:63:bb:6b:
4d:45:2a:21:3b:88:fe:fd:8a:92:a9:e1:5e:85:81:3d:fe:63:
9a:49:3e:dc:a6:7c:0b:30:98:f8:a1:b3:3e:dc:68:30:6a:91:
77:51:60:8a:03:57:0c:f2:57:a5:05:15:d2:cc:ee:bb:fd:6b:
1a:bc:fb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:23 2025 by rpki-client