Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/afIJaRbnJg_yGkMMGCqcARDDTkM.roa
File: afIJaRbnJg_yGkMMGCqcARDDTkM.roa (raw, json)
Hash identifier: XtA1NPynHpTSxADwC3F3IDlAJJaiEwtLTXjimIEoDbI=
Subject key identifier: 69:F2:09:69:16:E7:26:0F:F2:1A:43:0C:18:2A:9C:01:10:C3:4E:43
Certificate issuer: /CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Certificate serial: 011D56AA
Authority key identifier: 99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/afIJaRbnJg_yGkMMGCqcARDDTkM.roa
Signing time: Wed 05 Jan 2022 14:17:19 +0000
ROA not before: Wed 05 Jan 2022 14:17:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206352
IP address blocks: 185.188.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18699946 (0x11d56aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Validity
Not Before: Jan 5 14:17:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69f2096916e7260ff21a430c182a9c0110c34e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:67:10:94:26:63:05:c9:51:3e:fd:19:5a:
48:1e:de:92:fa:57:11:33:08:a4:6f:05:3f:fc:52:
e6:80:34:2a:66:78:85:c0:9f:7a:67:13:90:d7:e8:
da:17:df:e5:88:b2:3e:8f:90:25:ba:69:64:2b:39:
1d:9e:37:50:5b:c4:69:f1:2f:c5:1f:6c:16:40:25:
eb:c5:61:54:b2:95:45:0d:e5:32:0d:33:f8:4f:19:
97:b2:09:f7:73:f2:72:8f:d8:f1:10:2b:08:4b:8e:
72:ca:5b:a3:14:aa:ad:f9:9c:28:57:45:e9:52:62:
16:ed:96:a6:62:68:1e:82:b4:d0:16:e0:91:ff:a3:
a1:01:c0:af:00:2f:0e:06:be:d4:19:b5:ad:bc:33:
5a:db:13:38:71:c0:03:80:ec:f3:09:c6:7c:9e:3e:
30:b6:4b:c4:72:a0:3d:e1:65:37:43:fc:d2:f6:af:
06:32:e8:e8:92:56:9c:6c:46:c2:eb:50:ff:f7:ba:
cb:ab:c1:ee:37:e1:e0:8b:de:bc:d9:53:db:bd:18:
27:e5:72:6b:68:5f:38:5c:f5:61:8c:7c:fd:0b:b0:
3d:e9:b5:13:f2:98:ac:b9:f7:f2:fe:44:3a:32:26:
14:94:42:67:f5:a6:a4:3f:26:05:ae:6f:76:dd:92:
53:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F2:09:69:16:E7:26:0F:F2:1A:43:0C:18:2A:9C:01:10:C3:4E:43
X509v3 Authority Key Identifier:
keyid:99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/afIJaRbnJg_yGkMMGCqcARDDTkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.253.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:72:7e:4c:ad:99:ed:8d:df:99:50:c6:cd:ae:3e:92:a0:8a:
85:c1:1f:0a:ca:8a:f3:09:27:8e:f8:a8:25:3d:cf:07:64:36:
57:36:66:05:8b:b8:11:03:0d:90:35:41:9b:7a:03:6e:f1:0d:
23:eb:e0:20:ed:9b:27:de:dc:46:d8:1a:87:4b:ee:4b:a3:01:
8d:87:6d:1e:e2:ce:91:10:33:cd:d2:b6:05:84:bc:f0:7c:0e:
ef:d8:67:a4:b9:bf:5f:a0:d8:b1:2a:ca:cc:a4:46:af:00:34:
30:1f:a7:40:d4:a7:c9:d2:70:f0:ee:90:40:b5:5a:b9:28:3f:
76:e6:57:6e:0a:d6:4a:b5:68:c3:c1:3b:51:68:b5:92:be:53:
2d:a9:c4:9f:53:85:95:3c:40:4c:41:b4:f8:11:68:67:1b:02:
9e:54:5c:cd:4f:d5:e4:0f:ac:2c:7a:49:92:3d:b1:5c:62:96:
53:fb:fe:fa:01:fb:f5:b7:60:a9:1c:9d:18:a4:1c:60:6d:c4:
0d:71:69:4b:ee:29:f8:a2:9c:5b:f2:ba:cd:9d:4a:e2:2c:3a:
79:ad:64:e8:e9:49:61:c8:70:68:88:b9:42:a9:83:e6:ed:02:
23:a8:5b:a5:31:c1:ce:09:47:e5:be:f4:60:2b:b7:d4:ab:70:
25:ec:0d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:20:39 2025 by rpki-client