Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c19da3-7a3b-4938-b7c7-17fb64fd8250/1/NMEzSauQ26GyIXO_q7WW-4-hc_g.roa
File: NMEzSauQ26GyIXO_q7WW-4-hc_g.roa (raw, json)
Hash identifier: B1EcTxorTXDy9xyeID9Q4Pa/RYCc2A2Hrr1k3groHVk=
Subject key identifier: 34:C1:33:49:AB:90:DB:A1:B2:21:73:BF:AB:B5:96:FB:8F:A1:73:F8
Certificate issuer: /CN=084b2408adf9480e8268b7733be48127433ce4d4
Certificate serial: 01867CEFD2B3E994ACFB00F7EA9428F28F10
Authority key identifier: 08:4B:24:08:AD:F9:48:0E:82:68:B7:73:3B:E4:81:27:43:3C:E4:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEskCK35SA6CaLdzO-SBJ0M85NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c19da3-7a3b-4938-b7c7-17fb64fd8250/1/NMEzSauQ26GyIXO_q7WW-4-hc_g.roa
Signing time: Thu 23 Feb 2023 06:22:17 +0000
ROA not before: Thu 23 Feb 2023 06:22:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210439
IP address blocks: 185.235.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7c:ef:d2:b3:e9:94:ac:fb:00:f7:ea:94:28:f2:8f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084b2408adf9480e8268b7733be48127433ce4d4
Validity
Not Before: Feb 23 06:22:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34c13349ab90dba1b22173bfabb596fb8fa173f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7d:27:2f:ad:30:c5:75:11:95:00:57:3a:c1:
0a:65:d3:a5:29:e4:24:2f:3d:c3:a2:e7:dc:7a:d3:
ca:f5:90:43:bf:85:e9:1a:7d:2b:b4:c0:53:59:ab:
5b:63:b2:65:ca:90:f8:ac:dd:f1:0d:33:26:04:51:
f5:fb:8b:4e:4f:5e:62:df:5b:3e:6c:9a:8a:e9:7b:
e8:b0:e9:07:d0:34:d2:fb:f7:b6:20:8d:09:fc:c7:
db:34:47:81:ee:20:cc:1f:e0:b4:f5:17:fe:5e:70:
b7:9b:c5:99:a6:d8:67:36:55:7c:e2:66:ce:c6:9f:
16:ca:f0:d1:9d:13:65:d4:72:08:b9:d5:df:0c:d0:
26:3e:7d:b9:f4:57:5a:cd:0a:3f:e4:7f:59:f3:a9:
69:b0:a4:d0:4c:79:93:f0:92:7c:b6:2f:23:61:f0:
eb:43:6d:fb:c2:6a:d3:42:1a:42:89:34:21:49:83:
8c:f8:57:80:65:8f:b2:c9:70:da:66:cc:8d:f6:92:
23:14:c4:88:a0:75:8d:dd:61:6d:6c:47:9d:fb:07:
f8:55:ab:f9:e6:4b:15:b2:8e:54:9d:8a:cc:e9:ff:
bc:45:90:f0:3c:8d:f4:3e:1a:ca:ce:b2:17:60:2e:
f3:b1:22:f3:85:e1:b8:68:09:3c:55:57:2e:16:06:
dd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C1:33:49:AB:90:DB:A1:B2:21:73:BF:AB:B5:96:FB:8F:A1:73:F8
X509v3 Authority Key Identifier:
keyid:08:4B:24:08:AD:F9:48:0E:82:68:B7:73:3B:E4:81:27:43:3C:E4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEskCK35SA6CaLdzO-SBJ0M85NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c19da3-7a3b-4938-b7c7-17fb64fd8250/1/NMEzSauQ26GyIXO_q7WW-4-hc_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c19da3-7a3b-4938-b7c7-17fb64fd8250/1/CEskCK35SA6CaLdzO-SBJ0M85NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.224.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:d1:c6:c4:73:d6:49:2d:0d:cd:9b:62:2d:93:8a:62:ea:59:
63:b9:50:86:12:34:be:f6:46:6f:0e:17:0f:5c:e9:d3:1a:47:
10:48:1b:9a:e6:55:6b:68:70:5d:09:60:ed:07:92:d8:d3:b7:
bc:26:27:3d:e4:2b:11:21:33:7b:0a:8c:9d:f8:1b:4f:2c:2b:
5d:82:7e:4d:25:ea:d7:ed:34:06:9f:0d:e9:74:e2:d6:7c:2a:
5f:e8:16:51:22:6d:2a:21:09:d3:be:88:d5:5d:37:d9:84:0a:
8b:03:d0:90:28:05:42:f9:a2:11:c4:f7:81:6c:65:3b:4b:af:
10:e6:4c:df:34:cb:7d:64:c0:0f:a0:73:c2:2b:f0:ed:f6:0a:
91:0a:e1:d0:54:ae:f7:e0:82:90:03:7b:7a:78:74:3a:25:3d:
21:2a:64:46:02:96:09:68:ce:cf:7d:b6:7e:d2:81:d8:d7:49:
cb:38:e5:b8:db:8c:8e:50:d0:cc:11:67:6e:00:ed:63:b7:3b:
ad:e8:9c:45:ae:8f:f0:95:f5:72:f8:9a:d0:1f:09:23:13:f5:
da:33:6a:b8:f9:83:64:ac:92:a7:1c:01:67:5f:76:13:2c:f0:
d7:1e:7a:c3:61:3b:93:09:e4:45:dc:60:80:81:75:b5:93:0e:
47:15:e7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:04 2025 by rpki-client