Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/603e7e-2150-4d95-95fb-44565ae589ca/1/_dt_1XznFI_rG8AhqH41O4IAXew.roa
File: _dt_1XznFI_rG8AhqH41O4IAXew.roa (raw, json)
Hash identifier: 33fBeWC21bYcWGYjNjVcn9nF1w3xKR7ZEDNwndye5mk=
Subject key identifier: FD:DB:7F:D5:7C:E7:14:8F:EB:1B:C0:21:A8:7E:35:3B:82:00:5D:EC
Certificate issuer: /CN=8d64eb159108e3f8a5034c196affce04c7a7246e
Certificate serial: 05470020
Authority key identifier: 8D:64:EB:15:91:08:E3:F8:A5:03:4C:19:6A:FF:CE:04:C7:A7:24:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTrFZEI4_ilA0wZav_OBMenJG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/603e7e-2150-4d95-95fb-44565ae589ca/1/_dt_1XznFI_rG8AhqH41O4IAXew.roa
Signing time: Sat 01 Jan 2022 08:06:14 +0000
ROA not before: Sat 01 Jan 2022 08:06:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15576
IP address blocks: 185.203.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88539168 (0x5470020)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d64eb159108e3f8a5034c196affce04c7a7246e
Validity
Not Before: Jan 1 08:06:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fddb7fd57ce7148feb1bc021a87e353b82005dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:e1:0a:ed:bb:de:95:ac:2d:4b:c2:a4:6a:
87:65:24:a5:9d:dd:00:eb:53:92:c3:4f:b0:a0:08:
09:eb:98:0c:1c:49:f3:2f:11:3f:ff:a2:66:36:19:
27:64:2f:7d:d2:2e:39:30:2d:e7:05:d2:98:bd:c8:
bc:27:9a:19:3a:b0:11:93:fa:0b:47:9f:3c:eb:01:
bf:ef:1a:b8:65:02:a6:78:72:0a:41:6a:79:62:d7:
fa:36:73:0e:8e:e1:07:70:7b:4d:ba:28:9f:90:6e:
f4:9e:a0:d1:5f:c8:b5:55:d0:cb:70:04:d8:05:b0:
01:53:d9:57:71:7c:43:65:e2:95:06:22:a5:00:4a:
92:62:72:f1:48:02:4a:b5:5c:8e:3d:1b:6f:d7:21:
09:11:a8:c1:3c:77:fa:18:a6:be:bf:72:76:5d:22:
d6:8e:28:24:3b:73:b2:a4:8a:a0:58:9c:0e:23:87:
52:c7:2f:17:14:36:c7:3b:84:66:85:12:83:f6:d6:
0e:de:ed:e3:28:19:ac:cb:f3:5b:93:21:1c:16:ff:
7f:74:2b:72:8a:26:ef:78:a2:06:07:91:09:44:0b:
47:cd:5e:88:18:9a:90:d1:c0:5a:66:27:56:5e:be:
2b:a1:4b:80:27:de:97:b3:8d:aa:10:0a:03:49:36:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DB:7F:D5:7C:E7:14:8F:EB:1B:C0:21:A8:7E:35:3B:82:00:5D:EC
X509v3 Authority Key Identifier:
keyid:8D:64:EB:15:91:08:E3:F8:A5:03:4C:19:6A:FF:CE:04:C7:A7:24:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTrFZEI4_ilA0wZav_OBMenJG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/603e7e-2150-4d95-95fb-44565ae589ca/1/_dt_1XznFI_rG8AhqH41O4IAXew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/603e7e-2150-4d95-95fb-44565ae589ca/1/jWTrFZEI4_ilA0wZav_OBMenJG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.132.0/22
Signature Algorithm: sha256WithRSAEncryption
25:c7:ca:3e:83:39:06:ca:ac:06:b9:12:5c:7e:75:69:da:f1:
fe:ea:68:f8:ca:ef:e3:18:a6:b1:e8:88:49:73:3c:e2:b2:1a:
ed:c8:a7:f6:0a:d6:5c:01:6e:dc:fd:7d:05:02:85:9e:b4:53:
ea:17:f2:7b:81:93:c2:5b:1c:e1:2a:ec:ed:c0:1d:3a:19:ff:
a9:4b:64:ef:ce:ee:5a:f4:43:58:1c:e7:c6:8d:7d:83:a2:a6:
81:8b:37:d4:91:91:c8:a1:08:85:f7:d6:85:df:78:dc:87:95:
05:36:8b:03:c9:6b:8f:05:6f:82:41:40:e8:a0:4e:f9:83:13:
c8:85:9b:0b:54:67:60:f9:85:7e:ef:df:f3:15:b5:ff:f2:3d:
5f:fa:e3:f5:04:75:ba:35:c4:87:81:9b:42:55:62:9a:0e:d0:
c1:1b:e5:1a:11:fc:0c:85:28:71:71:fb:6d:59:44:0f:8b:ff:
22:38:c7:69:56:90:b6:16:0b:4d:e3:ee:5d:89:19:30:20:52:
d6:70:06:da:e8:24:ae:78:d6:5a:38:dc:9d:67:c4:ce:16:2e:
16:c6:d5:4a:af:db:ce:aa:ca:07:23:12:6c:ce:97:df:65:8f:
53:52:7c:c7:05:a1:7e:0c:0d:db:f4:7b:be:99:5c:45:01:13:
e2:c3:cd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:20 2025 by rpki-client