Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f3476e-9f86-4d2c-9c75-d68898b9a129/1/szaMJQiNu3tLbwMz8q8dlbVcwO4.roa
File: szaMJQiNu3tLbwMz8q8dlbVcwO4.roa (raw, json)
Hash identifier: PxzMN5ed3WEe8wkXlPqTlUYh1zNgGTJCQioaRB2Y21A=
Subject key identifier: B3:36:8C:25:08:8D:BB:7B:4B:6F:03:33:F2:AF:1D:95:B5:5C:C0:EE
Certificate issuer: /CN=e2b966f1c18b8ef78b0c3bdbc4dd47f6740b0a1e
Certificate serial: 039575D5
Authority key identifier: E2:B9:66:F1:C1:8B:8E:F7:8B:0C:3B:DB:C4:DD:47:F6:74:0B:0A:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rlm8cGLjveLDDvbxN1H9nQLCh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f3476e-9f86-4d2c-9c75-d68898b9a129/1/szaMJQiNu3tLbwMz8q8dlbVcwO4.roa
Signing time: Sat 01 Jan 2022 00:58:25 +0000
ROA not before: Sat 01 Jan 2022 00:58:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212315
IP address blocks: 185.198.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60126677 (0x39575d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b966f1c18b8ef78b0c3bdbc4dd47f6740b0a1e
Validity
Not Before: Jan 1 00:58:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3368c25088dbb7b4b6f0333f2af1d95b55cc0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:80:ca:2b:e8:56:95:0f:8f:66:7f:1f:81:2d:
a0:0a:32:70:9a:32:86:55:79:03:09:1d:09:37:66:
d6:c5:eb:6d:52:95:16:2a:14:88:cc:5c:8f:d6:2e:
a4:6d:66:00:0b:10:3b:be:09:dd:24:82:54:03:96:
25:4b:7f:3f:02:c7:00:dc:2c:d5:67:5d:60:72:d1:
df:4a:f7:3f:8f:7c:28:42:40:06:0e:0f:f4:b2:fe:
87:9a:85:14:a5:d8:36:a3:f0:f9:91:9e:46:09:a4:
4f:a9:d7:e0:42:4c:7a:55:af:4f:12:67:98:ed:26:
e6:7d:ce:8f:ed:f9:c4:42:0c:b3:a2:38:45:9b:cc:
de:ff:00:fd:0b:58:0e:a2:8a:65:b7:fe:27:39:9a:
3c:6e:f1:a6:d6:2a:e4:e2:fe:5e:e4:e0:d7:5c:97:
3f:0d:e7:dd:42:a1:c9:14:c6:7a:72:00:81:56:19:
4e:ef:cd:08:68:55:d9:36:44:3b:b3:1a:b8:9a:96:
01:2a:19:d9:0d:7f:7b:e8:59:97:52:7e:f5:cc:6c:
c1:4b:14:8a:c7:8e:30:78:32:15:88:d4:d3:ba:e8:
55:de:05:dc:f8:de:86:8b:4d:14:e5:f4:9c:7b:0a:
c5:53:92:8d:32:ca:0a:e0:10:98:49:ce:04:b6:66:
97:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:36:8C:25:08:8D:BB:7B:4B:6F:03:33:F2:AF:1D:95:B5:5C:C0:EE
X509v3 Authority Key Identifier:
keyid:E2:B9:66:F1:C1:8B:8E:F7:8B:0C:3B:DB:C4:DD:47:F6:74:0B:0A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rlm8cGLjveLDDvbxN1H9nQLCh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f3476e-9f86-4d2c-9c75-d68898b9a129/1/szaMJQiNu3tLbwMz8q8dlbVcwO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f3476e-9f86-4d2c-9c75-d68898b9a129/1/4rlm8cGLjveLDDvbxN1H9nQLCh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.15.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:93:67:ca:ab:0b:66:62:b4:32:cb:58:12:0c:10:4e:35:2e:
49:3f:63:0f:76:00:41:fe:88:d1:76:61:23:54:1b:4f:ec:3b:
4b:a0:78:9c:7e:d2:29:55:67:be:4a:c0:79:00:63:06:7f:97:
f9:8d:1d:7b:19:b9:6a:6e:4a:e0:27:40:0a:c6:da:cd:d5:93:
cc:76:d3:0d:63:ea:a9:64:d8:8b:77:55:c4:ab:28:d6:44:46:
21:1e:ca:4e:76:ff:b3:d7:14:9d:01:cc:2c:43:c7:b5:20:9e:
c0:1f:d2:a3:de:a3:7e:57:08:41:89:63:31:f8:9a:8c:b8:d4:
29:6c:9c:49:18:bc:2d:47:e7:4f:d0:e7:6c:ba:0f:24:af:3f:
7a:d0:5e:1a:39:02:7e:cc:43:7e:2d:db:35:fa:24:9f:7c:6f:
0c:84:bc:61:57:11:16:31:f8:cf:9e:6a:26:c0:59:5e:0c:30:
56:a4:7c:d7:7a:13:e6:50:1d:27:ab:c6:f0:dc:e6:78:ca:a8:
58:f4:c6:6a:8d:67:31:c8:70:3f:a8:45:9b:54:cb:31:c5:a5:
af:d1:f0:8f:e0:c7:da:96:49:6d:d4:c2:bd:c0:61:ed:86:15:
24:cb:55:c4:97:92:1b:09:01:a1:3c:0f:cc:4f:54:e6:bb:13:
43:54:46:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:37 2025 by rpki-client