Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/ss6U2gcNaw_gTDSBtPH8m-LOJok.roa
File: ss6U2gcNaw_gTDSBtPH8m-LOJok.roa (raw, json)
Hash identifier: wPJiR9hVQtmh8IIIJiVHKgdfuatRG57DJLJD03Stf0M=
Subject key identifier: B2:CE:94:DA:07:0D:6B:0F:E0:4C:34:81:B4:F1:FC:9B:E2:CE:26:89
Certificate issuer: /CN=6abafcbb23ab01e5adeccd169a31efb7c5c3c522
Certificate serial: 0182EE8F72CF97A16118E7FE8201DC7F1786
Authority key identifier: 6A:BA:FC:BB:23:AB:01:E5:AD:EC:CD:16:9A:31:EF:B7:C5:C3:C5:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arr8uyOrAeWt7M0WmjHvt8XDxSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/ss6U2gcNaw_gTDSBtPH8m-LOJok.roa
Signing time: Tue 30 Aug 2022 11:42:34 +0000
ROA not before: Tue 30 Aug 2022 11:42:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.126.233.0/24 maxlen: 24
185.126.232.0/24 maxlen: 24
185.126.232.0/23 maxlen: 23
185.126.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ee:8f:72:cf:97:a1:61:18:e7:fe:82:01:dc:7f:17:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6abafcbb23ab01e5adeccd169a31efb7c5c3c522
Validity
Not Before: Aug 30 11:42:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2ce94da070d6b0fe04c3481b4f1fc9be2ce2689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b6:d1:b9:8d:73:75:fe:97:e5:e2:cb:b1:20:
80:f5:70:b5:c1:18:aa:be:b0:12:86:cf:de:81:a2:
f2:6f:57:aa:de:33:de:1e:87:69:fc:80:6a:df:a9:
8e:a6:9e:c9:77:86:6f:c1:21:64:28:0f:aa:1b:5a:
52:1f:f8:7e:99:17:60:6c:83:8b:67:7f:db:43:ac:
32:e4:db:b1:42:97:c0:d6:c0:bb:bb:ee:0e:cc:a9:
10:b9:1d:67:c4:15:45:68:26:57:67:92:d5:1d:82:
fd:4b:19:76:22:6e:b5:70:f5:48:dc:7e:07:f8:00:
e7:a8:10:6b:5c:63:1e:51:83:e2:ed:e3:99:bd:96:
9b:3b:3a:74:31:80:ab:bf:46:8e:c7:b1:af:ab:39:
d8:37:5a:64:9e:95:a0:89:47:4c:c9:cb:07:41:35:
98:f2:76:e9:a4:a7:a0:8f:10:9d:10:bd:4d:42:5f:
48:76:31:3f:95:2b:7a:97:69:51:a8:f3:e9:14:31:
b8:5f:a5:a1:51:1d:4f:d3:52:48:42:6f:5b:57:e9:
1a:a7:c2:fa:ec:83:57:ef:fb:2d:91:fe:64:54:95:
2a:7b:7a:a8:65:c5:b4:66:fc:f4:fc:09:1e:89:e9:
01:4c:c6:7e:bf:91:1c:0f:fb:07:33:c3:e9:9b:95:
09:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CE:94:DA:07:0D:6B:0F:E0:4C:34:81:B4:F1:FC:9B:E2:CE:26:89
X509v3 Authority Key Identifier:
keyid:6A:BA:FC:BB:23:AB:01:E5:AD:EC:CD:16:9A:31:EF:B7:C5:C3:C5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arr8uyOrAeWt7M0WmjHvt8XDxSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/ss6U2gcNaw_gTDSBtPH8m-LOJok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/arr8uyOrAeWt7M0WmjHvt8XDxSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.232.0-185.126.234.255
Signature Algorithm: sha256WithRSAEncryption
9f:f9:38:2c:73:d7:72:cc:44:5d:ab:d9:7f:dd:16:8f:e6:38:
37:be:35:97:8b:2b:8d:39:83:6d:14:f3:8d:eb:ab:d9:ac:7d:
42:bf:42:ad:2f:f1:05:2e:6f:9d:74:47:35:4e:48:43:e4:49:
7f:a8:e2:eb:f3:aa:12:35:66:4d:17:f9:65:44:e4:8a:5c:bc:
ca:f8:7b:17:2d:21:3e:39:3c:18:36:21:e8:12:1d:61:06:04:
85:35:75:90:14:35:5e:1d:0d:07:a9:0a:52:88:8b:95:4b:63:
92:4a:f8:ff:e1:1c:e3:70:e9:ca:b3:1f:7b:0a:b2:87:7b:61:
54:16:0f:d8:cd:ea:0d:61:70:c6:0a:c3:21:1b:83:18:52:31:
3a:cf:09:de:e4:1b:db:dc:6f:67:3a:95:07:32:98:91:f1:2f:
a3:fb:ad:2a:55:5e:88:9f:7f:be:26:3d:ec:b5:a3:8b:59:36:
14:77:f4:c8:3c:30:d7:42:c7:7a:ac:61:39:f3:39:65:93:cb:
74:2a:59:8d:d0:df:28:13:31:00:8a:4a:fc:5a:c7:60:95:fb:
5d:6c:e0:b4:8f:db:04:c7:c2:d9:d5:49:f2:b4:40:59:b5:17:
d7:c4:16:22:9a:47:ac:7b:4c:80:b0:0b:dd:4a:59:12:4f:b0:
2b:83:8f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:23 2025 by rpki-client