Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/610382-7b89-4f70-a777-71ae5fc126bf/1/19104DgPKKcU9Vb1A0RbQ85sXjU.roa
File: 19104DgPKKcU9Vb1A0RbQ85sXjU.roa (raw, json)
Hash identifier: r6w53kd1UXkEYK4t6LT+Bcmjobe9i+uPOpa4VF5NrSE=
Subject key identifier: D7:DD:74:E0:38:0F:28:A7:14:F5:56:F5:03:44:5B:43:CE:6C:5E:35
Certificate issuer: /CN=97743d346356469b4b6939463c96df2b8a39065c
Certificate serial: 69C8B5
Authority key identifier: 97:74:3D:34:63:56:46:9B:4B:69:39:46:3C:96:DF:2B:8A:39:06:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3Q9NGNWRptLaTlGPJbfK4o5Blw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/610382-7b89-4f70-a777-71ae5fc126bf/1/19104DgPKKcU9Vb1A0RbQ85sXjU.roa
Signing time: Sat 01 Jan 2022 00:55:55 +0000
ROA not before: Sat 01 Jan 2022 00:55:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204386
IP address blocks: 185.251.26.0/24 maxlen: 24
2a10:acc0::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6932661 (0x69c8b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97743d346356469b4b6939463c96df2b8a39065c
Validity
Not Before: Jan 1 00:55:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7dd74e0380f28a714f556f503445b43ce6c5e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:72:0c:83:c0:73:dd:b0:73:f3:89:97:da:
a0:2d:17:25:0d:2c:9e:47:11:79:9e:bd:fd:d6:b8:
4f:6e:8a:e6:fe:ed:79:5f:72:0a:9d:5f:ea:09:dd:
b6:e8:06:da:dc:c6:a1:58:64:9c:6b:1d:a0:4b:e9:
0d:6a:99:57:41:4b:a8:43:88:e4:f1:36:d3:57:68:
c6:15:80:87:f1:93:09:73:bd:0e:6a:d2:7e:3d:37:
70:81:7d:51:9c:a4:f0:98:0a:1f:59:f3:09:f0:cb:
ec:e1:bf:72:36:4b:f9:9c:1a:aa:94:a8:e6:33:b0:
48:cc:8a:21:4f:c4:f1:2d:dd:ba:7e:ed:32:b8:a5:
94:c4:74:04:b1:27:d7:8f:68:c4:ff:80:80:05:87:
cc:aa:30:1f:46:88:23:3b:9b:8b:54:17:b4:04:b6:
07:bc:22:39:67:0a:86:42:4b:ba:e5:c5:23:bc:f3:
2d:80:b5:60:f5:fc:93:c3:8f:f8:41:5f:9d:93:03:
d3:70:c1:c3:be:6b:2d:ba:0f:43:24:8f:fe:98:86:
52:bb:1d:78:72:55:16:b3:51:ed:89:73:5b:b4:7e:
5e:07:fb:9e:ba:41:54:0c:ec:f6:8a:a2:0b:09:d0:
53:f8:e8:f4:8b:43:18:68:56:02:db:2e:c4:4a:b1:
a5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DD:74:E0:38:0F:28:A7:14:F5:56:F5:03:44:5B:43:CE:6C:5E:35
X509v3 Authority Key Identifier:
keyid:97:74:3D:34:63:56:46:9B:4B:69:39:46:3C:96:DF:2B:8A:39:06:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3Q9NGNWRptLaTlGPJbfK4o5Blw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/610382-7b89-4f70-a777-71ae5fc126bf/1/19104DgPKKcU9Vb1A0RbQ85sXjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/610382-7b89-4f70-a777-71ae5fc126bf/1/l3Q9NGNWRptLaTlGPJbfK4o5Blw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.26.0/24
IPv6:
2a10:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
62:78:99:17:19:b0:28:25:bd:90:f3:0a:06:91:0a:47:21:1a:
9c:e0:88:c8:a7:4b:33:bb:3b:d6:41:f0:25:b5:4f:57:db:88:
62:09:0f:de:65:56:2e:05:39:95:57:ed:32:a7:b6:72:5f:82:
b8:6f:a3:00:a6:b9:a6:8f:9e:82:51:fd:e2:54:3b:81:7f:92:
ee:66:fe:ff:4b:ac:f3:bf:d7:c5:39:3e:7b:1a:9e:0e:5a:0f:
7f:64:da:04:56:04:74:2f:78:4f:b2:d9:64:20:12:79:4b:42:
a1:3e:89:a5:ce:cb:16:b9:47:18:d7:64:f0:f3:f6:da:de:b3:
d5:ed:d7:cb:09:9f:2f:32:20:60:a5:09:5a:a2:5d:25:21:04:
84:ab:5b:90:6e:b6:88:0a:83:a1:bc:19:00:96:89:a9:36:d5:
e2:88:ef:3c:26:a3:a6:03:31:d5:cf:69:ef:58:73:5d:4e:af:
60:99:03:f5:5f:84:3d:c4:71:13:58:c7:f1:d3:2e:b1:5d:ce:
ba:c7:d9:d1:31:c2:a4:9b:cd:45:79:7d:a2:0f:52:04:12:3b:
9c:e3:ea:17:1b:d1:b5:75:ae:c2:f0:e7:d7:c2:3f:ea:6e:57:
1b:29:0c:fe:af:f2:b9:e1:68:00:6c:e1:79:76:fc:b7:81:4f:
72:de:8c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:23 2025 by rpki-client