Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f78c76-0c2b-4edf-8c72-65d74a62ab22/1/KezhjZ3Jqwccawtxwb2BpZRUNKk.roa
File: KezhjZ3Jqwccawtxwb2BpZRUNKk.roa (raw, json)
Hash identifier: I0R8PUT4sxhqw6pC79wx0RDU9LASnl4GgzLJ/FcXddA=
Subject key identifier: 29:EC:E1:8D:9D:C9:AB:07:1C:6B:0B:71:C1:BD:81:A5:94:54:34:A9
Certificate issuer: /CN=92c51555a81fd209ff79abed14369ec7917ced62
Certificate serial: 0106CE3F
Authority key identifier: 92:C5:15:55:A8:1F:D2:09:FF:79:AB:ED:14:36:9E:C7:91:7C:ED:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksUVVagf0gn_eavtFDaex5F87WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f78c76-0c2b-4edf-8c72-65d74a62ab22/1/KezhjZ3Jqwccawtxwb2BpZRUNKk.roa
Signing time: Sat 01 Jan 2022 08:00:37 +0000
ROA not before: Sat 01 Jan 2022 08:00:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 185.252.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17223231 (0x106ce3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c51555a81fd209ff79abed14369ec7917ced62
Validity
Not Before: Jan 1 08:00:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29ece18d9dc9ab071c6b0b71c1bd81a5945434a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:00:5c:74:db:a9:41:de:33:30:97:c0:7d:
5c:bc:16:5e:05:a4:53:90:d0:1c:28:f6:e8:1e:79:
93:97:d6:13:ea:96:4a:02:87:60:33:4f:5d:f7:54:
de:42:a8:c1:61:89:77:a5:d0:75:1f:e5:80:92:c2:
ed:33:0a:4f:e8:c0:4e:08:bf:02:92:e6:bc:4a:59:
e6:a1:87:1d:2c:2e:b8:c6:42:4a:85:4c:46:53:1b:
aa:ba:75:12:21:01:19:31:46:cc:40:0e:ff:43:38:
01:17:06:a9:b6:15:d3:5a:7d:d5:79:81:cf:d8:18:
e0:38:ca:dd:ca:9c:a9:53:3c:bd:63:62:09:39:c3:
51:65:e8:42:cb:15:fc:84:1d:2a:4f:27:0d:1d:79:
7b:24:18:8d:14:1b:ee:da:e5:d8:2b:34:15:e3:32:
ea:6a:f9:07:0c:54:c1:97:ba:e3:e6:2f:79:2e:42:
6a:ff:56:a1:50:e3:ee:88:aa:ef:cb:c0:30:95:7f:
f8:35:b5:f3:a7:86:f2:c9:b7:5c:21:4c:6b:7f:a7:
cb:5e:7e:df:77:76:0e:65:84:74:9b:49:f8:fb:30:
6e:8c:0f:70:7c:df:67:8b:39:6b:28:3e:94:7b:f9:
40:80:0d:4d:65:9f:ea:9c:2c:64:ab:2f:ec:8e:8d:
a3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EC:E1:8D:9D:C9:AB:07:1C:6B:0B:71:C1:BD:81:A5:94:54:34:A9
X509v3 Authority Key Identifier:
keyid:92:C5:15:55:A8:1F:D2:09:FF:79:AB:ED:14:36:9E:C7:91:7C:ED:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksUVVagf0gn_eavtFDaex5F87WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f78c76-0c2b-4edf-8c72-65d74a62ab22/1/KezhjZ3Jqwccawtxwb2BpZRUNKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f78c76-0c2b-4edf-8c72-65d74a62ab22/1/ksUVVagf0gn_eavtFDaex5F87WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.209.0/24
Signature Algorithm: sha256WithRSAEncryption
65:ec:73:95:fb:a6:50:4d:69:be:2f:5f:e9:fe:e7:e1:f8:6c:
b7:22:4f:14:94:04:75:9b:0c:b1:98:e5:84:dd:62:e7:5f:33:
df:d6:da:87:4c:32:5b:8b:04:82:ba:02:7c:b1:58:54:27:8a:
49:a8:53:dc:4c:53:cd:b0:b8:85:8e:7d:19:39:a5:c3:8a:b5:
e4:ea:43:94:ed:30:90:f7:0e:4b:18:f5:6a:b3:64:cd:a7:f9:
61:57:5b:d0:09:ce:4f:28:97:1c:c9:03:14:35:00:2d:15:d3:
7e:a3:b8:74:81:1c:11:6f:ba:38:ae:21:8a:a0:6d:c7:d1:8e:
39:4b:dd:9e:b2:61:e3:64:92:f4:e3:69:2f:83:b5:da:69:47:
91:a4:72:03:96:b3:6e:a9:8f:e1:23:5a:0d:60:22:fd:2a:b5:
e4:7c:af:41:10:f8:0d:9d:4c:82:a5:d7:e9:f9:f6:ac:7e:96:
ea:a5:90:79:d4:7b:04:70:1d:dc:c7:33:bf:12:ff:98:0e:88:
6d:f4:fe:37:ea:dc:ec:03:a2:12:3b:bf:75:16:a5:5e:5b:46:
8b:19:ff:12:ff:d2:da:d0:f0:8c:e4:82:b9:65:7e:27:2e:53:
a6:42:66:e6:40:c7:8c:5a:06:f7:23:3c:43:6a:df:03:63:67:
45:03:eb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:00 2025 by rpki-client