Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1ba005-21ae-4ed1-9059-f2e6e45f4452/1/Entj_buclWgyBr2H6hWCbNn2qOk.roa
File: Entj_buclWgyBr2H6hWCbNn2qOk.roa (raw, json)
Hash identifier: xqmV4WoFRW7kGI3pLsySUYQz2Y1q5iNk3higj/vsL9s=
Subject key identifier: 12:7B:63:FD:BB:9C:95:68:32:06:BD:87:EA:15:82:6C:D9:F6:A8:E9
Certificate issuer: /CN=f9f8e49d35c47241abefd84e94c417d21795b1e1
Certificate serial: 02F9893C
Authority key identifier: F9:F8:E4:9D:35:C4:72:41:AB:EF:D8:4E:94:C4:17:D2:17:95:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-fjknTXEckGr79hOlMQX0heVseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1ba005-21ae-4ed1-9059-f2e6e45f4452/1/Entj_buclWgyBr2H6hWCbNn2qOk.roa
Signing time: Sat 01 Jan 2022 12:59:03 +0000
ROA not before: Sat 01 Jan 2022 12:59:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212036
IP address blocks: 185.226.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49908028 (0x2f9893c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9f8e49d35c47241abefd84e94c417d21795b1e1
Validity
Not Before: Jan 1 12:59:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=127b63fdbb9c95683206bd87ea15826cd9f6a8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:7f:51:3b:62:58:b8:2a:02:ed:01:04:cf:
9b:be:d6:b6:56:1c:8f:5f:ad:20:98:e2:b7:6f:0b:
d4:a3:60:86:b2:97:f8:35:72:31:2c:04:f0:d6:64:
10:a9:0b:d8:1c:52:5c:13:30:da:7e:6d:8b:11:d5:
6b:b0:49:7c:75:92:79:e4:2c:12:65:fc:ff:9a:b0:
56:6f:58:43:5c:c9:4f:8c:85:db:0a:4f:de:ac:9b:
71:76:08:95:36:d0:92:6d:5b:27:65:dd:63:a5:01:
98:d5:de:03:71:2f:13:22:57:6d:e7:8c:e4:c7:42:
aa:fc:63:4c:2c:82:41:b2:53:2e:1a:51:91:81:1b:
64:d3:ac:07:df:1b:e9:35:ab:cf:de:69:1e:88:df:
44:17:4d:4d:4c:8c:65:15:a9:2a:61:98:0b:3a:09:
78:8c:69:e5:6f:29:bc:fe:13:bd:88:85:5c:a8:0c:
24:17:20:4c:33:29:e3:2d:9a:81:ae:2c:0f:2c:6b:
c7:17:f3:ea:7f:50:33:63:02:bc:3c:d2:07:6a:76:
df:60:23:3a:ba:45:df:e1:d8:86:01:70:3f:8c:ef:
b3:3b:fd:32:4d:37:f1:30:82:d4:32:18:90:c4:3a:
7a:56:0f:06:71:e7:46:56:57:21:7a:c3:c4:10:c8:
7d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7B:63:FD:BB:9C:95:68:32:06:BD:87:EA:15:82:6C:D9:F6:A8:E9
X509v3 Authority Key Identifier:
keyid:F9:F8:E4:9D:35:C4:72:41:AB:EF:D8:4E:94:C4:17:D2:17:95:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-fjknTXEckGr79hOlMQX0heVseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1ba005-21ae-4ed1-9059-f2e6e45f4452/1/Entj_buclWgyBr2H6hWCbNn2qOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1ba005-21ae-4ed1-9059-f2e6e45f4452/1/1-fjknTXEckGr79hOlMQX0heVseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.97.0/24
Signature Algorithm: sha256WithRSAEncryption
24:45:53:d5:0b:f4:93:7e:66:3e:3a:fc:c7:df:a7:83:34:ea:
ec:12:04:e9:28:61:96:b5:c0:bb:c6:90:27:18:c8:4b:3b:5e:
66:c7:af:90:d9:04:67:21:5e:19:e9:98:f1:18:7f:46:0d:f6:
6c:09:b1:9f:45:00:ac:06:a6:0b:ff:b0:46:24:fa:bf:32:46:
a1:c1:88:93:f7:e4:08:b3:8e:e0:dc:1a:ad:dd:ca:5e:f9:d5:
e6:2f:6c:14:01:a4:cb:2a:44:4a:8b:4c:87:12:c9:27:ce:fa:
e4:cb:32:43:f0:d9:75:ee:66:6b:60:85:1a:c6:af:dd:f5:18:
00:8f:d5:55:17:33:8e:a7:f4:d3:5b:04:fd:e6:fc:bc:8b:f6:
99:e9:55:6e:84:f6:c2:10:fc:2f:58:96:0a:eb:73:43:9f:23:
79:f6:48:f1:f1:14:7a:9a:50:8b:1c:5d:e0:89:7e:b4:99:c7:
68:e9:8e:7e:de:1d:c9:a1:0e:b5:de:f3:a1:55:4e:78:ff:82:
df:28:0b:78:3f:0f:cc:3e:da:4b:d7:7b:d4:bb:c0:98:af:d8:
ce:fc:b5:54:59:a7:61:30:d9:9f:90:ef:e7:69:2e:25:32:a2:
61:2d:df:4b:e6:b6:46:eb:a5:c3:7b:b8:3d:82:56:83:91:54:
18:77:89:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:46 2025 by rpki-client