Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/2a22e1-ebef-41d8-9346-521a2531c22a/1/utXK1WE9beMlP2gKYeOSmxBJSP4.roa
File: utXK1WE9beMlP2gKYeOSmxBJSP4.roa (raw, json)
Hash identifier: Pc1LNJiAmaTALc/6BybnmXKdNZ7EAUny0vDQRn3BAs4=
Subject key identifier: BA:D5:CA:D5:61:3D:6D:E3:25:3F:68:0A:61:E3:92:9B:10:49:48:FE
Certificate issuer: /CN=0bf0b3626b73b11eca157ae9153a38b4d433cd8b
Certificate serial: 17DA1F24
Authority key identifier: 0B:F0:B3:62:6B:73:B1:1E:CA:15:7A:E9:15:3A:38:B4:D4:33:CD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_CzYmtzsR7KFXrpFTo4tNQzzYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/2a22e1-ebef-41d8-9346-521a2531c22a/1/utXK1WE9beMlP2gKYeOSmxBJSP4.roa
Signing time: Sat 01 Jan 2022 09:06:09 +0000
ROA not before: Sat 01 Jan 2022 09:06:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62038
IP address blocks: 185.50.32.0/22 maxlen: 22
2a04:bd40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400170788 (0x17da1f24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf0b3626b73b11eca157ae9153a38b4d433cd8b
Validity
Not Before: Jan 1 09:06:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bad5cad5613d6de3253f680a61e3929b104948fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:9e:e7:b8:14:2e:7e:67:e7:5f:a7:4d:04:
be:5e:b8:82:40:8f:1c:13:1d:9f:a3:be:38:72:91:
a2:9c:62:aa:a5:5e:a1:6b:1b:66:d2:53:c7:a6:d2:
01:f2:d7:b8:3a:78:14:07:9f:8e:e9:f7:d4:aa:a3:
62:66:25:42:09:ea:9f:03:6f:16:77:94:08:9d:04:
c8:53:b2:2e:c9:0f:4d:f3:bf:73:b6:20:d7:95:c2:
23:fb:09:c7:d6:50:da:ad:c7:87:87:07:fa:e1:05:
02:56:c9:15:77:57:ec:ea:df:19:63:bf:67:c9:5b:
ae:73:51:57:88:11:c0:13:d8:9a:d1:8f:b9:eb:7f:
95:cd:09:84:71:a2:58:1c:c3:3a:e8:e5:1c:b8:c6:
a5:32:cb:0f:8d:18:ad:d0:e1:7d:50:88:88:15:bd:
e3:79:24:da:4d:80:6f:22:e3:09:40:b7:82:81:20:
57:cc:36:14:a6:aa:43:c8:20:a0:06:72:83:79:77:
91:9c:35:08:ee:20:11:2b:d9:e6:d6:07:f9:cb:74:
5c:32:ea:a1:6c:0f:ec:31:e8:d9:4f:5e:5f:ab:bf:
7d:c6:d2:8e:3b:7a:ce:23:ca:7e:bc:fb:dc:d0:33:
01:1e:7f:76:e2:50:aa:36:94:ce:6c:d8:b5:7a:2e:
70:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D5:CA:D5:61:3D:6D:E3:25:3F:68:0A:61:E3:92:9B:10:49:48:FE
X509v3 Authority Key Identifier:
keyid:0B:F0:B3:62:6B:73:B1:1E:CA:15:7A:E9:15:3A:38:B4:D4:33:CD:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_CzYmtzsR7KFXrpFTo4tNQzzYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2a22e1-ebef-41d8-9346-521a2531c22a/1/utXK1WE9beMlP2gKYeOSmxBJSP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2a22e1-ebef-41d8-9346-521a2531c22a/1/C_CzYmtzsR7KFXrpFTo4tNQzzYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.32.0/22
IPv6:
2a04:bd40::/29
Signature Algorithm: sha256WithRSAEncryption
09:82:d0:78:89:bd:eb:ec:e9:0d:c1:40:c4:b4:02:0b:d4:54:
d5:4a:87:86:3b:8e:3c:27:e3:cb:ee:51:18:67:b8:bc:90:00:
df:29:37:e6:92:7a:c1:84:20:82:43:c1:ed:59:96:ec:99:40:
1d:a3:b1:2d:54:44:a4:c6:93:bc:e2:21:53:ea:84:de:97:63:
21:9e:c8:8c:18:b1:29:55:a8:59:14:88:1d:f9:38:c7:02:3c:
1c:60:34:1d:d1:a6:c4:6f:df:90:ba:ec:35:d5:6b:5b:87:10:
6c:56:6b:34:fe:6a:81:dd:ee:32:03:05:d0:5e:e6:8e:ac:f8:
ca:8d:ec:ff:d4:a9:e8:a5:8d:bd:7c:c7:74:76:10:1d:d4:b3:
be:69:09:71:44:94:58:02:26:ae:3b:76:61:db:a1:3a:05:51:
a1:1a:4b:ef:90:a5:c2:50:8d:55:75:c5:66:77:9a:17:46:28:
da:d9:3f:4c:b1:ff:1f:e6:39:41:09:ca:86:5e:f0:78:29:fe:
1f:36:2b:74:69:4d:b3:0c:77:92:1c:df:1a:53:e2:58:50:0e:
ff:57:c1:00:8e:61:1b:95:70:77:03:a4:11:d0:da:bc:d2:52:
81:27:10:28:11:b4:61:bd:14:5f:a4:ff:bd:f6:74:eb:b6:2e:
c2:16:bc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:51 2025 by rpki-client