Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/085cf7-d4ec-4817-88a9-7becf292e8df/1/gMSc7ItCECcJ_dlWI9iJ_lDzs4k.roa
File: gMSc7ItCECcJ_dlWI9iJ_lDzs4k.roa (raw, json)
Hash identifier: d8Sc0FrmhBqrPHr+gIIT2aFXDtboJw3NbPsWrp9Y1uY=
Subject key identifier: 80:C4:9C:EC:8B:42:10:27:09:FD:D9:56:23:D8:89:FE:50:F3:B3:89
Certificate issuer: /CN=22fd6c153b46ee4f621da74fd572983bcaff0632
Certificate serial: 018571B101C11EBE662CF4934A2AC00F26D6
Authority key identifier: 22:FD:6C:15:3B:46:EE:4F:62:1D:A7:4F:D5:72:98:3B:CA:FF:06:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv1sFTtG7k9iHadP1XKYO8r_BjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/085cf7-d4ec-4817-88a9-7becf292e8df/1/gMSc7ItCECcJ_dlWI9iJ_lDzs4k.roa
Signing time: Mon 02 Jan 2023 08:55:03 +0000
ROA not before: Mon 02 Jan 2023 08:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.222.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b1:01:c1:1e:be:66:2c:f4:93:4a:2a:c0:0f:26:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fd6c153b46ee4f621da74fd572983bcaff0632
Validity
Not Before: Jan 2 08:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80c49cec8b42102709fdd95623d889fe50f3b389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:27:eb:7f:4f:d7:50:83:df:20:b9:c5:21:
1f:84:dd:cf:1b:8d:43:fb:d7:fb:3b:2f:54:95:f1:
26:80:17:2f:bc:e0:c8:8c:bc:c5:f9:2c:af:5b:c4:
92:d2:c4:5f:a3:60:9a:75:b4:6c:67:3d:f0:a2:8b:
24:49:15:62:15:0e:6b:9c:76:7c:12:10:80:e9:d8:
95:81:20:65:dc:2a:eb:8c:7d:25:93:a7:c7:ca:18:
79:b5:73:85:8a:6c:a3:26:80:65:3b:c4:81:4a:88:
ed:32:65:66:d3:56:ca:8a:89:3d:b5:a3:cd:19:54:
91:0f:90:41:3d:18:27:11:9a:e3:57:5b:aa:fb:10:
c9:53:1e:83:f4:cf:04:cd:a4:52:8f:e9:b0:69:25:
04:58:e9:37:9e:41:af:84:97:d9:c8:8e:cc:bb:9a:
fe:13:2d:54:62:05:ac:de:54:03:b1:c8:b6:c9:53:
55:e7:54:09:2d:0b:0d:8b:7d:e6:a2:c7:fc:99:62:
1d:d5:92:95:2e:a8:b3:7b:54:a3:a9:78:b3:d8:6b:
59:55:2a:15:46:25:6b:4d:bb:e1:49:65:7b:4f:7a:
e2:63:3b:96:0a:64:cc:b4:18:87:1d:04:17:a7:3d:
8a:c3:e5:82:a7:bb:67:1e:b1:c1:cd:36:05:3a:ce:
67:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C4:9C:EC:8B:42:10:27:09:FD:D9:56:23:D8:89:FE:50:F3:B3:89
X509v3 Authority Key Identifier:
keyid:22:FD:6C:15:3B:46:EE:4F:62:1D:A7:4F:D5:72:98:3B:CA:FF:06:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv1sFTtG7k9iHadP1XKYO8r_BjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/085cf7-d4ec-4817-88a9-7becf292e8df/1/gMSc7ItCECcJ_dlWI9iJ_lDzs4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/085cf7-d4ec-4817-88a9-7becf292e8df/1/Iv1sFTtG7k9iHadP1XKYO8r_BjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.42.0/24
Signature Algorithm: sha256WithRSAEncryption
39:b4:82:9d:db:d7:27:c0:70:47:62:1f:a1:09:0c:02:e1:3e:
ea:d2:f5:40:85:fd:d3:fb:7f:ed:6a:b1:af:0d:bc:fd:4d:52:
f0:53:9b:c3:38:ad:5f:25:c9:c0:bc:65:18:81:cd:81:6b:5d:
88:bf:bd:e9:bd:35:28:0e:c7:b7:bd:5f:e7:f3:44:b7:42:42:
b3:55:54:00:46:05:35:86:6b:d4:b8:18:fa:b4:18:0f:fc:29:
c1:47:c7:04:cf:2b:51:82:cb:77:48:ad:13:16:6f:d3:a7:0b:
31:b2:68:94:57:ff:62:23:b1:68:dc:93:9e:29:35:e6:75:27:
48:a5:90:1f:da:6e:08:86:64:3b:49:5b:b1:37:71:3c:51:9c:
ec:cb:7c:fd:8c:4f:72:b1:0d:0a:93:57:c3:9a:d2:79:e4:9d:
19:79:1e:92:90:f1:e9:a3:2d:99:9c:fe:1e:37:3e:62:62:4b:
1c:9d:c2:cc:b5:2e:8e:61:fb:0c:2b:74:7a:1c:10:95:4a:c3:
20:49:03:33:28:a5:cd:f6:20:0a:4c:eb:37:6f:71:f9:3b:19:
b2:cc:28:00:b3:7a:4a:51:4a:27:43:07:49:3d:be:ee:86:57:
2b:ef:6c:ba:87:a2:37:76:ef:a5:91:41:19:2a:fd:1f:1c:10:
1a:8a:b6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:41 2025 by rpki-client