Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1c8b45-829b-49fb-ba5b-eb30da51dcb7/1/Qs33Qmz0eegLN-OuhKCHy2upy_8.roa
File: Qs33Qmz0eegLN-OuhKCHy2upy_8.roa (raw, json)
Hash identifier: PcFfDj6+iglUwpy8PPGUdoJvzmrxvlGbcQKSucaJYJk=
Subject key identifier: 42:CD:F7:42:6C:F4:79:E8:0B:37:E3:AE:84:A0:87:CB:6B:A9:CB:FF
Certificate issuer: /CN=15916ff0bb78cce4a37c42bc16b3eebac78f6250
Certificate serial: 018C90BFCE088784A4D2947C719B0C8D83DD
Authority key identifier: 15:91:6F:F0:BB:78:CC:E4:A3:7C:42:BC:16:B3:EE:BA:C7:8F:62:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZFv8Lt4zOSjfEK8FrPuusePYlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1c8b45-829b-49fb-ba5b-eb30da51dcb7/1/Qs33Qmz0eegLN-OuhKCHy2upy_8.roa
Signing time: Fri 22 Dec 2023 08:58:58 +0000
ROA not before: Fri 22 Dec 2023 08:58:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35153
IP address blocks: 185.212.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:90:bf:ce:08:87:84:a4:d2:94:7c:71:9b:0c:8d:83:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15916ff0bb78cce4a37c42bc16b3eebac78f6250
Validity
Not Before: Dec 22 08:58:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42cdf7426cf479e80b37e3ae84a087cb6ba9cbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:bb:80:01:a5:6b:69:b9:82:a2:1d:45:da:
06:7d:e5:df:f1:d4:e1:1c:3f:c3:92:0c:b3:6f:8f:
30:9d:e0:ea:cb:8c:2b:db:a1:dd:f2:53:dc:61:90:
a6:44:82:40:3b:71:07:eb:d4:f3:10:89:a2:72:8a:
e9:24:55:8f:00:d9:23:ce:fb:78:65:56:64:ff:5f:
a5:1d:76:78:fd:de:c4:6e:22:8e:d2:39:d0:14:cf:
20:99:f7:41:61:99:58:a9:1d:b8:48:f4:16:26:30:
19:b8:d8:58:87:3b:ee:f0:22:9b:08:9d:6d:8f:7e:
f1:b2:b3:df:ca:dd:c9:2e:2f:2c:a2:8e:ce:ba:0c:
42:c6:cf:08:8c:05:16:6f:df:61:5a:2d:de:c6:29:
3b:f5:be:40:0b:bf:e5:17:a2:9d:7c:38:8d:b2:a7:
a0:9d:57:af:3a:4d:09:00:b5:85:ae:fa:e6:46:f5:
e6:5f:85:69:45:83:02:61:2e:20:96:a9:c5:94:70:
36:fa:4d:ba:bc:ce:6d:50:e5:95:73:b9:09:d5:22:
f3:41:cf:b3:71:f3:f5:1c:2e:63:06:07:e3:92:e7:
5e:5a:c3:ac:e1:a9:fe:b9:e8:87:96:31:6f:26:63:
3c:43:2f:30:a0:3d:31:1f:74:77:fb:5f:65:b9:00:
1f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CD:F7:42:6C:F4:79:E8:0B:37:E3:AE:84:A0:87:CB:6B:A9:CB:FF
X509v3 Authority Key Identifier:
keyid:15:91:6F:F0:BB:78:CC:E4:A3:7C:42:BC:16:B3:EE:BA:C7:8F:62:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZFv8Lt4zOSjfEK8FrPuusePYlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1c8b45-829b-49fb-ba5b-eb30da51dcb7/1/Qs33Qmz0eegLN-OuhKCHy2upy_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1c8b45-829b-49fb-ba5b-eb30da51dcb7/1/FZFv8Lt4zOSjfEK8FrPuusePYlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.136.0/22
Signature Algorithm: sha256WithRSAEncryption
24:47:a3:6e:21:14:8f:b5:b5:f4:d0:93:f4:22:f3:62:0b:32:
80:05:12:13:e7:ef:51:62:dc:8d:2d:0f:34:de:7c:d3:f1:9f:
e5:ca:84:92:16:e3:11:90:c4:ec:d7:3d:b0:fd:0b:6d:ad:24:
ff:2d:ef:ac:ec:2b:3f:bd:ba:bb:b5:25:d7:47:7b:dd:5e:37:
f4:9e:af:68:24:3e:1d:73:8b:b0:4a:92:cf:0f:6a:df:c2:ec:
68:c4:04:68:d1:4e:82:de:48:92:bd:5b:0f:aa:85:e6:83:46:
41:b5:fb:51:78:8c:9f:a4:ef:4f:82:20:72:12:27:7c:09:8f:
f2:cd:51:f7:e2:bc:01:71:06:71:4f:bc:95:ec:14:49:ca:ff:
c6:5e:b2:34:dd:ee:20:c0:65:bf:73:7d:b7:d3:0b:fa:3c:d1:
e9:bf:2d:51:e4:40:37:32:6c:39:77:3b:c4:5e:f5:e4:64:60:
33:95:cf:12:d1:e1:b7:5e:42:1d:2a:16:7e:8a:0e:07:45:47:
bd:03:d8:fe:1a:f7:5e:ba:92:1e:98:f1:56:dc:39:d8:d3:cf:
4b:35:66:c5:16:24:bd:7a:03:ff:20:0d:a0:7e:0d:23:20:1f:
fc:5d:3f:78:74:47:d4:5a:23:7c:4d:c9:51:4a:14:36:4c:83:
6a:ea:71:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:17 2025 by rpki-client