Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/PaZ2mF09p2rETOfYoYIt_sl8Hk4.roa
File: PaZ2mF09p2rETOfYoYIt_sl8Hk4.roa (raw, json)
Hash identifier: /tvVhNlvNnj7cvdlpiV5W6YQiviD7iRqMX5HEHLIsmA=
Subject key identifier: 3D:A6:76:98:5D:3D:A7:6A:C4:4C:E7:D8:A1:82:2D:FE:C9:7C:1E:4E
Certificate issuer: /CN=26472cfdcd392a184f1f051320bba806a204c6cd
Certificate serial: 0182C1F02475809E308AA626ED9D6FFAD964
Authority key identifier: 26:47:2C:FD:CD:39:2A:18:4F:1F:05:13:20:BB:A8:06:A2:04:C6:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jkcs_c05KhhPHwUTILuoBqIExs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/PaZ2mF09p2rETOfYoYIt_sl8Hk4.roa
Signing time: Sun 21 Aug 2022 19:45:16 +0000
ROA not before: Sun 21 Aug 2022 19:45:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 185.124.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c1:f0:24:75:80:9e:30:8a:a6:26:ed:9d:6f:fa:d9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26472cfdcd392a184f1f051320bba806a204c6cd
Validity
Not Before: Aug 21 19:45:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3da676985d3da76ac44ce7d8a1822dfec97c1e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:90:9f:8f:72:f9:ed:ed:fc:25:0e:c3:32:
17:5c:32:46:70:2a:3c:cc:45:ac:ba:e0:86:29:8a:
6e:e3:3c:dd:e3:91:bc:78:79:a3:77:4d:a6:8b:2a:
fa:e7:35:56:fb:44:a3:a6:ef:47:c5:e1:27:9d:c4:
b2:45:92:b7:cc:3b:f3:5f:8c:5f:6a:be:54:a0:71:
b0:9f:58:a1:b8:82:38:1d:9f:19:dd:92:d5:69:a3:
bf:55:ff:6b:6d:cd:e6:1d:63:b7:30:97:4f:d3:aa:
f5:27:cb:1e:2a:2d:69:c4:7f:d8:25:9a:78:ed:18:
38:1e:57:49:31:51:ef:c2:08:a9:54:13:fe:95:88:
11:ce:f5:29:4b:d1:23:2e:ee:0e:36:ca:e6:e1:48:
70:e1:f9:9c:19:1c:a4:cb:db:c3:c3:9e:e0:c9:d1:
55:6f:10:01:95:e5:03:8f:d8:1e:93:1a:e4:07:a3:
55:c6:82:51:4f:47:ce:67:3d:e9:62:d0:0a:48:87:
14:22:fc:2d:d6:dd:c6:ff:5f:50:f7:c7:12:bd:fb:
72:e3:88:74:89:96:c0:20:5b:16:b0:95:ec:46:29:
35:e3:2b:05:4d:c4:eb:50:e2:63:ce:23:3b:b8:c3:
84:c6:d9:7b:be:da:11:3d:e4:fe:85:7a:c9:34:f4:
10:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A6:76:98:5D:3D:A7:6A:C4:4C:E7:D8:A1:82:2D:FE:C9:7C:1E:4E
X509v3 Authority Key Identifier:
keyid:26:47:2C:FD:CD:39:2A:18:4F:1F:05:13:20:BB:A8:06:A2:04:C6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jkcs_c05KhhPHwUTILuoBqIExs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/PaZ2mF09p2rETOfYoYIt_sl8Hk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/Jkcs_c05KhhPHwUTILuoBqIExs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.64.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:64:48:59:10:27:2c:f6:d2:76:d7:88:32:67:b2:61:5f:9e:
c9:e8:45:b5:ae:40:55:e0:f7:73:7e:ad:dc:64:a9:67:29:1a:
a1:65:a2:21:28:25:ac:4d:d4:db:fb:26:57:c9:c7:ff:6e:8c:
cd:86:0d:95:1e:f0:52:dd:2a:a7:d9:5a:2c:3c:7c:51:45:4a:
3a:cc:d4:2e:a1:81:37:42:75:1a:de:ed:2a:55:e5:ef:d3:80:
f3:f0:d0:41:f8:d7:c5:87:57:82:69:33:23:13:c5:94:14:e3:
33:5b:dd:66:c7:1f:48:79:ed:39:aa:55:82:a8:33:12:23:50:
37:4d:bf:3e:46:a2:0e:41:10:01:ea:4e:0a:a2:5a:71:dd:d3:
8a:b3:92:f8:23:a2:bb:6c:74:fe:75:3c:fe:f7:73:88:60:c1:
8b:94:ea:ff:8a:5e:5d:f8:b2:e5:0c:2a:88:d9:99:f6:9f:9e:
b2:2d:af:f9:5b:ad:11:83:5b:0a:f2:29:61:06:fd:a8:d2:45:
6a:e2:89:2b:32:80:83:e6:07:4a:11:18:87:d7:50:ba:0d:aa:
ac:c6:27:41:48:74:6b:01:3f:de:8b:28:d3:53:57:4d:c8:19:
c3:9c:59:23:4d:2a:35:4b:72:32:72:97:29:f3:0e:59:2f:63:
cf:f6:bc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:42 2025 by rpki-client