Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/603e7e-2150-4d95-95fb-44565ae589ca/1/BEpTLG32IqZZL-uNPxMk8H28A1k.roa
File: BEpTLG32IqZZL-uNPxMk8H28A1k.roa (raw, json)
Hash identifier: WMaiwq8zUrdqOygGA8Whjoi6uOsGXe/nvzyCmtiZf0w=
Subject key identifier: 04:4A:53:2C:6D:F6:22:A6:59:2F:EB:8D:3F:13:24:F0:7D:BC:03:59
Certificate issuer: /CN=8d64eb159108e3f8a5034c196affce04c7a7246e
Certificate serial: 01856D41AC872FA6D0513CAED96AF97BEA01
Authority key identifier: 8D:64:EB:15:91:08:E3:F8:A5:03:4C:19:6A:FF:CE:04:C7:A7:24:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTrFZEI4_ilA0wZav_OBMenJG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/603e7e-2150-4d95-95fb-44565ae589ca/1/BEpTLG32IqZZL-uNPxMk8H28A1k.roa
Signing time: Sun 01 Jan 2023 12:14:58 +0000
ROA not before: Sun 01 Jan 2023 12:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15576
IP address blocks: 185.203.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:ac:87:2f:a6:d0:51:3c:ae:d9:6a:f9:7b:ea:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d64eb159108e3f8a5034c196affce04c7a7246e
Validity
Not Before: Jan 1 12:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=044a532c6df622a6592feb8d3f1324f07dbc0359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:54:b1:62:51:a7:95:47:7b:f6:c2:9c:93:4a:
65:9f:f2:34:9d:54:ad:1a:0f:9c:23:3d:d1:80:50:
b6:71:ef:7d:66:7d:fd:c3:c8:76:79:cb:0a:ff:68:
65:96:58:db:0c:76:39:59:fc:2f:3d:16:81:81:7f:
c4:2c:b6:15:56:e1:34:a8:22:ea:21:e3:44:18:38:
39:1d:3a:52:7c:5c:1d:c3:96:03:1a:bb:d4:2a:a2:
71:53:1f:66:0b:d5:14:b4:03:01:23:6a:b4:3b:71:
2c:4e:07:69:28:20:18:7e:ad:e1:93:a7:7c:38:55:
e2:7d:2a:26:c0:b4:23:27:c9:2a:87:d8:d7:ca:56:
a7:15:7b:95:35:1d:c6:19:86:d7:ed:4f:25:14:eb:
39:d0:28:83:d9:d6:1a:8a:f2:fb:b3:8f:7f:ad:08:
d3:30:9f:41:5c:8b:84:a1:9c:5c:0a:0a:23:9c:0a:
9a:02:67:33:e4:fe:67:e1:3d:e4:62:2f:e5:b2:71:
e4:d3:07:97:17:cf:62:cb:08:69:03:51:09:fb:0d:
05:97:d2:16:30:e5:21:e2:12:c3:8e:d6:07:67:6b:
9d:6d:a9:d8:7d:15:53:a7:56:f7:f0:dd:d9:15:d0:
9c:5d:b2:e3:8a:29:25:78:3d:7c:27:24:20:ef:1a:
36:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4A:53:2C:6D:F6:22:A6:59:2F:EB:8D:3F:13:24:F0:7D:BC:03:59
X509v3 Authority Key Identifier:
keyid:8D:64:EB:15:91:08:E3:F8:A5:03:4C:19:6A:FF:CE:04:C7:A7:24:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTrFZEI4_ilA0wZav_OBMenJG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/603e7e-2150-4d95-95fb-44565ae589ca/1/BEpTLG32IqZZL-uNPxMk8H28A1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/603e7e-2150-4d95-95fb-44565ae589ca/1/jWTrFZEI4_ilA0wZav_OBMenJG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.132.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:47:13:da:89:6f:4b:64:e8:a7:7b:1c:36:20:e2:47:33:04:
97:99:ca:44:3b:17:66:93:e0:ce:ca:5d:42:7c:d4:4c:16:c9:
48:c7:5e:45:d6:e4:93:a4:94:45:04:e0:9e:a4:50:df:1c:fb:
33:5e:a5:97:5c:b1:59:ea:1f:e6:53:ae:2f:99:11:7b:2c:f8:
cf:ce:b4:3b:94:ad:ab:0b:dc:4f:f6:6a:23:26:18:62:e3:39:
df:8a:04:3b:98:1a:f1:34:d4:4b:cb:57:c0:f1:ab:52:b3:03:
af:df:1f:b0:24:0f:c4:23:7f:b4:1c:f3:e4:d9:86:45:86:b0:
c9:b4:2b:9f:3c:28:31:b5:e7:78:27:ae:22:82:dc:56:ec:04:
c5:da:e2:d7:c5:5b:9d:93:e4:48:6f:07:09:d4:f4:97:1e:4e:
fe:2d:b1:56:b9:16:ae:f9:a1:93:a7:b2:f8:17:a2:29:73:53:
49:41:6d:ff:36:1a:3d:1d:f5:2b:fe:7e:1a:29:45:22:8b:c2:
e5:91:d2:22:16:a6:67:aa:89:c6:d3:c2:df:c1:db:e9:c9:c9:
6c:f4:64:b9:20:32:5d:5e:b7:54:5c:f7:0e:74:a7:a3:ba:34:
ac:55:d2:0a:97:a2:96:cd:d6:65:86:c2:db:49:f7:2e:c6:1e:
7e:91:7f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:06 2025 by rpki-client