Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a22199-ccd5-4308-9eda-5fa0c7c96acf/1/aD1SjOjPohl9Jkq0-SBQFVbYfV0.roa
File: aD1SjOjPohl9Jkq0-SBQFVbYfV0.roa (raw, json)
Hash identifier: 6Ud2zpJHkOtyiICOc8eFfny71cLGswZFVAT9SiFZPsI=
Subject key identifier: 68:3D:52:8C:E8:CF:A2:19:7D:26:4A:B4:F9:20:50:15:56:D8:7D:5D
Certificate issuer: /CN=f3e3179a8a21762ca9dc3ffa4c2d84b839f0fb38
Certificate serial: 090D5404
Authority key identifier: F3:E3:17:9A:8A:21:76:2C:A9:DC:3F:FA:4C:2D:84:B8:39:F0:FB:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-MXmoohdiyp3D_6TC2EuDnw-zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/a22199-ccd5-4308-9eda-5fa0c7c96acf/1/aD1SjOjPohl9Jkq0-SBQFVbYfV0.roa
Signing time: Wed 23 Mar 2022 17:32:23 +0000
ROA not before: Wed 23 Mar 2022 17:32:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211114
IP address blocks: 185.250.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151868420 (0x90d5404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e3179a8a21762ca9dc3ffa4c2d84b839f0fb38
Validity
Not Before: Mar 23 17:32:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=683d528ce8cfa2197d264ab4f920501556d87d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bd:34:e3:10:18:73:3d:e8:d6:5a:f8:32:5e:
e7:3d:41:fd:28:51:28:d0:d0:2d:f0:c0:33:ce:8b:
4e:3c:4c:86:f0:5f:b9:db:b3:07:fc:fc:c9:e3:86:
3d:ac:52:b8:9c:c0:b1:19:95:9b:1f:9e:ac:77:f9:
dd:43:c3:59:5d:23:4a:f7:77:43:f5:a3:99:6f:74:
c0:6e:c2:d8:61:13:70:3c:11:3b:01:d9:53:ee:91:
31:e8:d7:98:7c:7e:ce:ab:77:b0:40:67:3d:4a:d8:
89:e2:b6:8b:e4:7b:ab:d9:52:33:81:82:e5:52:7f:
b7:a6:15:cb:aa:88:9e:c8:20:0d:c5:50:5a:24:60:
3e:90:23:3d:db:47:9b:e9:e2:ae:6c:a0:fb:da:1b:
d3:14:b7:74:b3:c2:b8:7b:b1:a5:c1:3b:25:db:93:
8d:f2:da:36:53:50:1f:33:26:da:aa:ec:91:6a:a6:
c6:34:c8:30:1c:5d:8c:36:07:47:59:20:25:3e:c0:
97:c2:c8:e9:bb:cf:bb:ab:c4:27:ac:c7:64:f2:f9:
af:a2:df:d4:2b:35:9f:bd:f3:a3:c7:f7:be:f6:c7:
c7:13:ab:89:7f:f3:f0:01:80:97:7f:5b:70:e5:28:
ca:6d:a7:f0:1c:07:be:b0:00:a8:46:a1:9c:f9:08:
9e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3D:52:8C:E8:CF:A2:19:7D:26:4A:B4:F9:20:50:15:56:D8:7D:5D
X509v3 Authority Key Identifier:
keyid:F3:E3:17:9A:8A:21:76:2C:A9:DC:3F:FA:4C:2D:84:B8:39:F0:FB:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-MXmoohdiyp3D_6TC2EuDnw-zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a22199-ccd5-4308-9eda-5fa0c7c96acf/1/aD1SjOjPohl9Jkq0-SBQFVbYfV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a22199-ccd5-4308-9eda-5fa0c7c96acf/1/8-MXmoohdiyp3D_6TC2EuDnw-zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.241.0/24
Signature Algorithm: sha256WithRSAEncryption
04:82:4b:87:0b:67:ec:a9:50:38:69:f7:15:46:b8:84:0b:86:
ba:7b:ac:05:e0:a2:de:48:2e:0d:09:b8:f6:1d:49:8a:97:81:
e5:6c:13:87:41:14:85:e1:82:f1:b0:ee:39:fe:19:31:d1:6a:
3a:d4:b3:70:f3:70:3d:3b:b7:6b:5e:dd:87:4a:74:d4:fd:6c:
38:86:13:cf:2e:b6:f8:3b:42:8f:bd:28:a3:3a:ca:83:c3:c5:
44:2a:2e:9b:0c:79:dc:f7:d4:12:dc:f6:70:c5:9c:f7:67:7d:
18:77:f1:93:2c:31:de:53:2b:9c:5f:1b:15:39:37:54:7d:96:
1d:22:23:14:69:6d:9f:02:45:1d:21:57:46:15:44:77:d7:e0:
82:ae:ff:01:77:8a:f2:b1:c0:d9:34:21:94:c0:d3:f1:58:0e:
27:81:07:c3:bf:b6:9b:af:c6:b1:77:26:bb:b0:1c:ce:85:ed:
00:80:c3:19:40:16:15:d7:a5:a3:a5:c8:10:aa:ff:2b:f9:cc:
22:1c:16:1e:0e:ab:04:e0:18:5e:b1:54:45:16:04:55:f7:de:
2c:f3:39:f5:90:c1:40:1e:60:e6:87:d7:36:c4:90:d4:88:05:
28:07:f1:97:48:1b:a6:01:e9:de:85:24:dd:70:4a:bc:91:99:
ef:c8:ca:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:02 2025 by rpki-client