Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7c3cec-c7d2-45cb-b72c-26ccfcc744e5/1/B698_tHclZyBD_jJBW-_odJVpAw.roa
File: B698_tHclZyBD_jJBW-_odJVpAw.roa (raw, json)
Hash identifier: Q6dZ47B6xfFSKSncf9Lx4YFBxXgyL1NAnBSzEgQ/dI8=
Subject key identifier: 07:AF:7C:FE:D1:DC:95:9C:81:0F:F8:C9:05:6F:BF:A1:D2:55:A4:0C
Certificate issuer: /CN=bcc36b3a0a55beb529e407328588963d86786cbf
Certificate serial: 0A55D984
Authority key identifier: BC:C3:6B:3A:0A:55:BE:B5:29:E4:07:32:85:88:96:3D:86:78:6C:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMNrOgpVvrUp5AcyhYiWPYZ4bL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7c3cec-c7d2-45cb-b72c-26ccfcc744e5/1/B698_tHclZyBD_jJBW-_odJVpAw.roa
Signing time: Sat 01 Jan 2022 04:58:56 +0000
ROA not before: Sat 01 Jan 2022 04:58:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205836
IP address blocks: 185.157.129.0/24 maxlen: 24
185.157.130.0/23 maxlen: 23
185.157.130.0/24 maxlen: 24
185.157.131.0/24 maxlen: 24
185.157.128.0/22 maxlen: 22
185.157.128.0/24 maxlen: 24
185.157.128.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173398404 (0xa55d984)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc36b3a0a55beb529e407328588963d86786cbf
Validity
Not Before: Jan 1 04:58:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07af7cfed1dc959c810ff8c9056fbfa1d255a40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9a:56:2a:67:66:ce:97:48:81:c2:4d:a9:d4:
1b:57:c7:c8:32:f7:70:34:d6:d4:cf:f4:32:1e:8a:
8f:08:02:e0:a6:4c:12:94:42:02:81:3f:ee:70:5a:
fd:12:fa:60:8c:09:fc:57:b1:40:12:1f:13:4d:38:
06:41:6c:5d:64:99:10:ef:5d:68:0c:74:ed:31:f1:
7b:3e:79:00:4e:95:d5:50:59:5e:a5:e8:df:1f:25:
9b:65:f0:56:49:6d:1a:4d:dd:53:32:6e:d1:f6:20:
e4:b4:05:e3:f5:5d:98:b6:cb:95:a8:b0:04:93:33:
54:ac:17:79:0a:39:1a:1c:7d:a4:a7:40:b6:e0:d6:
53:c5:d8:3a:32:25:8e:8f:6e:c1:69:95:d7:88:b9:
cb:e4:5c:09:1e:97:6c:05:f6:58:6b:5f:94:52:bc:
d0:27:af:7c:26:6d:74:48:f2:90:d5:66:08:92:f5:
1f:2d:ef:36:b5:0d:c0:f4:d4:f8:5b:6a:c0:9f:e6:
36:02:1b:4a:99:08:95:09:6f:bf:6a:d1:68:09:62:
4f:15:32:61:28:79:94:5d:ee:e6:10:2f:a3:cc:7b:
15:95:51:d2:d6:dd:66:47:b4:f1:8c:81:74:60:46:
da:35:3b:8b:fd:18:25:f1:21:78:11:3e:8b:bc:b8:
cd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AF:7C:FE:D1:DC:95:9C:81:0F:F8:C9:05:6F:BF:A1:D2:55:A4:0C
X509v3 Authority Key Identifier:
keyid:BC:C3:6B:3A:0A:55:BE:B5:29:E4:07:32:85:88:96:3D:86:78:6C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMNrOgpVvrUp5AcyhYiWPYZ4bL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c3cec-c7d2-45cb-b72c-26ccfcc744e5/1/B698_tHclZyBD_jJBW-_odJVpAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c3cec-c7d2-45cb-b72c-26ccfcc744e5/1/vMNrOgpVvrUp5AcyhYiWPYZ4bL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.128.0/22
Signature Algorithm: sha256WithRSAEncryption
89:17:52:d6:ff:99:de:ef:85:c0:5a:96:05:ef:36:35:37:c0:
9f:04:b9:91:30:15:6a:71:46:31:a1:79:d5:2f:27:af:5d:59:
f8:a7:ec:d8:06:06:80:43:c4:06:15:ff:97:a5:c2:52:79:36:
f0:39:49:3b:9e:fa:43:08:81:f9:e5:bd:cd:06:8a:fc:f0:79:
ee:2b:40:cf:92:0a:fa:c3:ff:e4:80:3b:b0:a5:7c:18:1c:3e:
f4:d0:41:9b:19:a4:e6:7b:a6:bc:28:e6:f6:eb:2c:e1:77:45:
19:a4:38:39:b9:ff:79:a5:b7:5c:8f:15:a7:b4:95:89:f6:07:
81:21:0b:d9:dd:56:ee:3d:af:7b:1b:9a:fd:92:0c:b2:22:6e:
92:cc:4c:7d:f1:9e:77:78:58:ae:4c:60:ee:67:1d:5f:81:70:
f8:62:86:75:0b:53:fd:7a:33:e1:fb:9e:b5:2f:eb:9c:72:e5:
2f:85:6e:a4:01:19:cb:c0:0a:0d:4d:9d:6c:66:11:78:b2:b4:
b4:85:e4:3b:3c:5b:b2:20:e9:d6:7d:71:80:f9:4a:5c:cf:ef:
69:f8:3f:94:cc:a1:97:b1:e3:07:00:62:f8:a9:4e:19:88:35:
b1:57:2d:e7:0a:04:48:44:5a:7d:3c:0a:ca:43:ae:e7:df:48:
34:b0:09:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:33 2025 by rpki-client