Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c2f486-3ac9-48f3-8b7f-5958b3e64d19/1/sildmE4NJylr9PQfg33XYPssWGg.roa
File: sildmE4NJylr9PQfg33XYPssWGg.roa (raw, json)
Hash identifier: PbLrIOvYdTLRuuCvWc+EIpkqf+ZcF4DcU7J6Br0nCZk=
Subject key identifier: B2:29:5D:98:4E:0D:27:29:6B:F4:F4:1F:83:7D:D7:60:FB:2C:58:68
Certificate issuer: /CN=7c3648fb31490e5f070a329a6011e57d59d9e074
Certificate serial: 018571DE8954CC876D6A5D770F8C3E82221D
Authority key identifier: 7C:36:48:FB:31:49:0E:5F:07:0A:32:9A:60:11:E5:7D:59:D9:E0:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDZI-zFJDl8HCjKaYBHlfVnZ4HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c2f486-3ac9-48f3-8b7f-5958b3e64d19/1/sildmE4NJylr9PQfg33XYPssWGg.roa
Signing time: Mon 02 Jan 2023 09:44:47 +0000
ROA not before: Mon 02 Jan 2023 09:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57752
IP address blocks: 185.234.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:89:54:cc:87:6d:6a:5d:77:0f:8c:3e:82:22:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3648fb31490e5f070a329a6011e57d59d9e074
Validity
Not Before: Jan 2 09:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2295d984e0d27296bf4f41f837dd760fb2c5868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e8:d1:4a:6c:c5:0d:84:71:b9:84:ff:b4:87:
b9:2e:43:7a:c9:79:63:23:ad:e8:e2:3b:cd:35:84:
40:79:51:e5:97:c3:b6:c8:35:60:31:2c:6c:ee:81:
c0:16:ec:43:4b:14:93:2a:f3:e5:da:1e:10:3e:2f:
12:e9:e4:fe:08:15:92:52:42:d4:e0:bb:a8:7c:76:
b1:19:a3:8b:ee:ab:28:9f:c3:e6:7c:eb:ce:bb:45:
a1:0b:39:a1:3d:b9:05:28:e6:dd:c8:f9:14:40:d5:
b3:35:47:ce:5c:b5:6c:b4:5c:5c:0e:7b:e2:34:3d:
2b:a2:9b:0b:0d:6d:94:8f:71:2f:e3:a3:e0:1a:97:
a2:a5:4f:1a:58:1c:f5:e4:b0:c7:4d:d3:27:e2:b4:
91:74:f5:22:6e:23:d8:12:ac:2a:5e:63:cf:d5:72:
c7:01:5e:23:d2:36:86:bf:01:65:bd:00:cb:71:ce:
06:e8:32:e5:d4:99:6d:4f:27:bf:03:f7:3d:7c:14:
4b:fc:73:6f:6b:22:8f:58:f2:70:39:0d:a9:10:d7:
bb:f6:ef:d3:96:03:d0:f0:87:c9:bb:24:31:0a:9a:
65:a5:e6:a9:83:9e:f6:d1:00:74:d4:01:6b:69:30:
c1:13:84:f4:48:4b:c5:3a:cc:4a:13:bd:b5:dc:dc:
2b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:29:5D:98:4E:0D:27:29:6B:F4:F4:1F:83:7D:D7:60:FB:2C:58:68
X509v3 Authority Key Identifier:
keyid:7C:36:48:FB:31:49:0E:5F:07:0A:32:9A:60:11:E5:7D:59:D9:E0:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDZI-zFJDl8HCjKaYBHlfVnZ4HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c2f486-3ac9-48f3-8b7f-5958b3e64d19/1/sildmE4NJylr9PQfg33XYPssWGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c2f486-3ac9-48f3-8b7f-5958b3e64d19/1/fDZI-zFJDl8HCjKaYBHlfVnZ4HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.48.0/22
Signature Algorithm: sha256WithRSAEncryption
09:ae:ba:3a:2c:e0:00:72:7b:44:f9:ae:ff:69:45:85:14:9d:
bd:8e:65:12:38:8b:41:ed:39:4d:3e:cb:4e:d0:19:5f:f6:3b:
c3:f4:3f:7f:a6:ea:97:f3:bf:e6:f3:c3:67:c9:82:7a:0c:2a:
03:31:a6:ea:26:55:c5:d5:a9:50:37:b5:ad:23:f7:03:e7:e4:
d6:6f:21:13:d4:0b:76:9f:cc:54:95:c4:ae:3d:71:c7:ba:87:
48:34:19:4e:93:9b:36:58:83:fa:9a:b5:38:cf:b7:20:8d:21:
a7:5d:2a:59:16:08:20:b9:10:f0:0f:48:51:e6:13:70:e0:01:
f1:87:dd:7c:83:95:ae:f4:0b:41:26:f8:a8:5b:0a:56:75:63:
89:45:c3:01:42:89:a1:7e:c5:01:43:3b:e9:6c:73:94:b7:46:
a9:3a:1f:30:d2:b7:64:fc:e7:ab:3c:c4:c5:13:9d:27:85:e6:
c3:34:86:3f:c1:fe:25:4c:a4:cd:12:f2:79:23:30:ab:ba:98:
e3:63:b9:0e:4c:94:0e:5f:5d:11:6e:01:17:08:7e:1d:3f:0a:
3d:be:11:84:35:d8:f5:5b:83:76:c3:d1:44:bb:b2:e4:a3:89:
35:ed:6f:05:56:8e:31:ab:1b:c9:b7:f6:62:c5:a1:3d:77:e5:
2b:59:a5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:13 2025 by rpki-client