Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/16f628-6b48-41e0-bad3-2754123ee6a4/1/1eYtr_PgP6NMydkdlAICMhtcKAo.roa
File: 1eYtr_PgP6NMydkdlAICMhtcKAo.roa (raw, json)
Hash identifier: 0gSRFO8Syc0h0V/zjzSEwr/Hy0BVbC6dNFxWmiH3hJE=
Subject key identifier: D5:E6:2D:AF:F3:E0:3F:A3:4C:C9:D9:1D:94:02:02:32:1B:5C:28:0A
Certificate issuer: /CN=92d3fad344a0143f4ab328e9eb5f8b7895f9d672
Certificate serial: 018570153ADC285A8CF7EFC00E8FBBFE3904
Authority key identifier: 92:D3:FA:D3:44:A0:14:3F:4A:B3:28:E9:EB:5F:8B:78:95:F9:D6:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktP600SgFD9Ksyjp61-LeJX51nI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/16f628-6b48-41e0-bad3-2754123ee6a4/1/1eYtr_PgP6NMydkdlAICMhtcKAo.roa
Signing time: Mon 02 Jan 2023 01:25:17 +0000
ROA not before: Mon 02 Jan 2023 01:25:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60456
IP address blocks: 185.231.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:3a:dc:28:5a:8c:f7:ef:c0:0e:8f:bb:fe:39:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d3fad344a0143f4ab328e9eb5f8b7895f9d672
Validity
Not Before: Jan 2 01:25:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5e62daff3e03fa34cc9d91d940202321b5c280a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:af:e9:4f:da:a4:a0:35:af:73:9b:fd:36:8c:
c1:92:9a:bf:c7:b2:08:63:c3:79:16:97:5a:d9:04:
92:1a:75:6a:69:be:6d:72:7f:76:9b:c0:00:82:09:
ee:14:9a:1f:ff:25:d5:7b:7c:42:5a:69:50:fc:37:
67:b3:e5:cc:6d:e3:55:1f:51:31:8b:ed:b5:34:fd:
23:58:87:e9:ad:66:b9:1c:d6:a7:e1:eb:76:62:72:
10:94:ae:13:de:12:c7:0f:63:4c:c0:05:b5:fb:c0:
14:fb:d4:74:44:86:bd:69:19:bb:63:72:b5:c5:e1:
3c:e3:38:75:c7:a8:b4:ac:71:99:a2:88:87:79:43:
d0:fa:c6:86:0f:1d:e5:38:9b:25:db:d1:2e:f0:fd:
bd:03:7d:2b:23:1d:87:a3:05:69:8a:b4:95:db:76:
46:29:59:0b:35:10:90:03:84:42:be:85:2a:05:ab:
35:d4:31:8c:07:92:f6:d9:64:02:fa:7d:a7:6b:5b:
a9:d8:52:e4:9d:6b:10:34:58:84:91:77:cf:c0:5f:
73:dc:6d:f4:bd:8e:6b:ef:c3:86:46:4c:b8:31:bf:
10:9c:06:86:2b:29:04:2c:02:c5:c1:02:9c:9b:ad:
c5:d2:fc:db:50:4c:46:8f:35:1b:c6:e0:7a:2b:20:
f4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E6:2D:AF:F3:E0:3F:A3:4C:C9:D9:1D:94:02:02:32:1B:5C:28:0A
X509v3 Authority Key Identifier:
keyid:92:D3:FA:D3:44:A0:14:3F:4A:B3:28:E9:EB:5F:8B:78:95:F9:D6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktP600SgFD9Ksyjp61-LeJX51nI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16f628-6b48-41e0-bad3-2754123ee6a4/1/1eYtr_PgP6NMydkdlAICMhtcKAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16f628-6b48-41e0-bad3-2754123ee6a4/1/ktP600SgFD9Ksyjp61-LeJX51nI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.168.0/22
Signature Algorithm: sha256WithRSAEncryption
56:d1:9b:23:47:5e:a9:f7:49:e7:03:a4:57:ed:cd:ce:37:0b:
36:76:11:ba:cb:d7:e5:ea:48:e9:39:60:8a:44:32:50:e1:f2:
06:20:79:27:77:80:35:ad:99:43:56:a3:bb:dc:e0:3d:b6:d1:
31:a9:27:00:5b:bf:cb:d3:6c:66:7f:42:b6:77:7d:da:2d:07:
12:ce:5c:a2:23:91:d1:32:34:a2:bf:04:89:7f:e5:e1:a4:c4:
cb:83:a2:12:a3:07:a1:e7:97:72:db:41:17:88:a3:e7:eb:05:
bf:ac:33:6b:13:dc:76:1c:d0:b7:4c:fd:c7:62:ba:52:21:d2:
28:0e:4d:8f:a0:a9:ab:76:16:0a:89:d4:8d:7c:9b:73:f0:b2:
65:ca:a6:e2:c7:6a:42:35:8e:7b:7a:3f:bc:4b:6d:24:63:e6:
ec:68:69:9a:36:72:31:16:fd:c1:28:e9:2c:c0:fd:9e:34:5a:
f9:30:be:9b:1a:84:b7:75:72:99:02:9e:de:17:35:eb:13:ed:
58:5a:87:7a:bb:11:de:91:8f:22:48:4e:69:29:e5:78:9a:34:
2e:e4:d0:b6:81:fb:c5:b7:5f:29:d2:f4:9c:ad:a5:e0:90:de:
e0:05:6a:b5:f9:28:21:fa:29:d4:a7:f5:55:86:4a:95:a2:cb:
75:2e:aa:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:54 2025 by rpki-client