Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/b77b81-e5d4-48bc-be77-213771652599/1/5YFYFCBMVRT_DPBpMKFC8N_bbR8.roa
File: 5YFYFCBMVRT_DPBpMKFC8N_bbR8.roa (raw, json)
Hash identifier: Dsu7PxMOPLJXPAfW1mPX4naICeyWXI6sfA9Y++vB5Cg=
Subject key identifier: E5:81:58:14:20:4C:55:14:FF:0C:F0:69:30:A1:42:F0:DF:DB:6D:1F
Certificate issuer: /CN=ba94caab27375edf61bf8c99cc1c2b6abbafff15
Certificate serial: 01825EFA7141FFA687BBC44946C47FC1331B
Authority key identifier: BA:94:CA:AB:27:37:5E:DF:61:BF:8C:99:CC:1C:2B:6A:BB:AF:FF:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upTKqyc3Xt9hv4yZzBwraruv_xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/b77b81-e5d4-48bc-be77-213771652599/1/5YFYFCBMVRT_DPBpMKFC8N_bbR8.roa
Signing time: Tue 02 Aug 2022 14:34:07 +0000
ROA not before: Tue 02 Aug 2022 14:34:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 37594
IP address blocks: 185.94.32.0/22 maxlen: 22
185.68.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5e:fa:71:41:ff:a6:87:bb:c4:49:46:c4:7f:c1:33:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba94caab27375edf61bf8c99cc1c2b6abbafff15
Validity
Not Before: Aug 2 14:34:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5815814204c5514ff0cf06930a142f0dfdb6d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:55:45:aa:c9:f3:bc:60:0e:c1:ca:5d:45:eb:
b0:44:e2:6a:56:87:96:c9:6f:03:bd:40:20:e6:e3:
a7:e6:15:85:47:83:f3:c7:2a:bd:b0:9a:b3:ad:1f:
da:2d:27:6b:58:bf:97:27:6e:9d:56:d9:17:f2:9c:
3f:13:b9:d1:4e:7c:d7:fd:25:ab:53:c1:f9:81:78:
be:88:89:8d:e1:80:cb:28:47:9d:6a:c0:ec:a2:5a:
a0:de:bb:18:4a:a6:26:76:70:02:72:3a:36:b1:42:
11:0d:7b:c4:47:4f:bb:64:1a:49:47:2d:36:a6:5c:
8f:62:43:ea:9d:49:fd:31:c7:48:f5:51:3e:98:7c:
27:d8:33:a1:4a:30:33:5e:c9:84:cb:a1:1a:a2:17:
a8:db:af:ee:32:4c:aa:a7:5d:ed:80:63:a2:56:cd:
e7:bb:4a:49:2c:6d:e6:0a:ed:10:6c:dc:f7:aa:27:
72:cf:9f:49:22:95:c0:80:6b:72:e3:d2:31:f7:f4:
12:77:e5:01:e0:12:a0:97:29:19:9d:2d:8a:af:8e:
e5:2e:5c:04:71:ac:1e:42:33:ef:d8:16:a9:15:00:
38:dd:75:bd:f4:ed:99:d6:04:fd:dc:03:ab:5e:6e:
bf:99:0a:7c:64:8f:ab:a5:bf:03:22:60:b4:2a:a6:
d3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:81:58:14:20:4C:55:14:FF:0C:F0:69:30:A1:42:F0:DF:DB:6D:1F
X509v3 Authority Key Identifier:
keyid:BA:94:CA:AB:27:37:5E:DF:61:BF:8C:99:CC:1C:2B:6A:BB:AF:FF:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upTKqyc3Xt9hv4yZzBwraruv_xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b77b81-e5d4-48bc-be77-213771652599/1/5YFYFCBMVRT_DPBpMKFC8N_bbR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b77b81-e5d4-48bc-be77-213771652599/1/upTKqyc3Xt9hv4yZzBwraruv_xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.152.0/22
185.94.32.0/22
Signature Algorithm: sha256WithRSAEncryption
11:77:ca:a3:69:8a:3a:83:6c:57:6a:3f:00:3d:a0:6c:b4:a6:
36:86:0c:ea:52:e4:ee:9d:87:99:22:74:77:4e:c2:f8:cb:24:
bd:87:1e:7a:f4:16:60:fd:f7:9b:5b:08:c9:71:1a:11:5e:eb:
98:6a:e0:bc:2e:61:64:6e:4d:dd:33:f4:0a:31:26:d0:05:fe:
a2:04:b3:ce:3a:3e:3d:74:31:88:64:e7:68:4b:9e:b1:81:a8:
31:b4:c4:ff:fe:c0:15:c4:10:5c:d2:cb:02:90:79:6a:2d:c7:
e5:f4:07:a3:20:ad:11:78:a5:c4:fa:89:71:1c:e9:7c:b7:26:
82:d2:6a:2c:a8:f1:00:f9:fa:eb:34:95:71:1b:5f:e9:6e:cf:
46:30:e1:97:24:39:d0:49:97:d9:88:e1:1c:da:20:e8:22:1a:
cf:df:33:c2:30:93:1c:7b:f0:1c:d5:c2:4a:e4:2c:53:70:54:
fa:02:12:26:b1:d8:e1:10:8b:fe:8e:00:24:4f:75:50:53:eb:
15:5c:02:dd:13:a3:d2:75:44:20:e4:fb:fe:eb:62:f0:ae:c7:
65:36:68:0f:64:d7:a8:1c:41:b1:c2:87:de:7f:f9:ec:0d:36:
c4:7c:c2:be:36:5f:02:6b:dd:3b:f5:8e:39:56:01:49:e3:fb:
16:c4:76:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:19 2025 by rpki-client