Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0482c8-6fbf-481c-b5cb-a13b2f116521/1/F2rU_eBglxIgzaN4EnlaFNEyZVg.roa
File: F2rU_eBglxIgzaN4EnlaFNEyZVg.roa (raw, json)
Hash identifier: 6aIHY0bj5ADYBsj+LNUHWJwbPXKnSfgC/PGBADagUBQ=
Subject key identifier: 17:6A:D4:FD:E0:60:97:12:20:CD:A3:78:12:79:5A:14:D1:32:65:58
Certificate issuer: /CN=9e888901024e8c6b27174da9e03dc8a09dcb8833
Certificate serial: 018A0DFEF186D411883DC7251D7F2DF637CF
Authority key identifier: 9E:88:89:01:02:4E:8C:6B:27:17:4D:A9:E0:3D:C8:A0:9D:CB:88:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noiJAQJOjGsnF02p4D3IoJ3LiDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0482c8-6fbf-481c-b5cb-a13b2f116521/1/F2rU_eBglxIgzaN4EnlaFNEyZVg.roa
Signing time: Sat 19 Aug 2023 13:32:06 +0000
ROA not before: Sat 19 Aug 2023 13:32:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.248.57.0/24 maxlen: 24
185.248.58.0/24 maxlen: 24
185.248.56.0/24 maxlen: 24
2a0d:2bc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0d:fe:f1:86:d4:11:88:3d:c7:25:1d:7f:2d:f6:37:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e888901024e8c6b27174da9e03dc8a09dcb8833
Validity
Not Before: Aug 19 13:32:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=176ad4fde060971220cda37812795a14d1326558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:87:ba:6c:cc:c9:bb:66:70:e2:0f:ff:2a:e4:
96:14:2c:aa:43:d7:fe:58:2a:09:0a:39:d7:da:42:
5a:b2:c8:1c:33:25:c6:4d:c9:04:92:0d:ce:b2:17:
71:13:fa:81:e5:3b:17:c9:a3:b4:1f:02:d6:49:08:
4e:58:cb:17:b6:dc:a7:33:f1:31:f0:d9:cf:22:96:
76:23:37:15:61:c2:db:18:3a:a9:06:8b:b9:ae:35:
65:36:28:bc:10:28:28:bb:f3:cb:15:1f:f5:d7:b1:
5d:8c:d7:74:34:ab:eb:83:f9:5a:dd:f7:89:a1:3e:
d5:d9:64:7c:65:71:43:a8:af:df:b2:78:f6:ae:73:
8b:e8:36:32:e3:db:b1:fc:10:09:a8:fa:b5:d5:ea:
20:1e:2e:87:d7:f2:54:e6:2b:1e:60:90:aa:0c:fd:
f7:fb:b3:04:ad:74:f4:9d:69:af:ad:16:61:ea:ad:
76:73:44:c4:65:6d:61:2b:01:39:44:cd:6b:1d:d4:
22:7d:58:2a:de:f0:69:e5:53:5a:61:19:70:39:ed:
7d:2d:86:87:4c:66:a1:45:13:33:d2:e7:95:74:50:
ba:a3:05:4d:bc:2b:40:5e:77:52:f0:4c:8b:49:41:
22:06:eb:ff:3c:f5:3a:ab:c1:2f:c2:c8:96:4f:14:
b8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6A:D4:FD:E0:60:97:12:20:CD:A3:78:12:79:5A:14:D1:32:65:58
X509v3 Authority Key Identifier:
keyid:9E:88:89:01:02:4E:8C:6B:27:17:4D:A9:E0:3D:C8:A0:9D:CB:88:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noiJAQJOjGsnF02p4D3IoJ3LiDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0482c8-6fbf-481c-b5cb-a13b2f116521/1/F2rU_eBglxIgzaN4EnlaFNEyZVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0482c8-6fbf-481c-b5cb-a13b2f116521/1/noiJAQJOjGsnF02p4D3IoJ3LiDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.56.0-185.248.58.255
IPv6:
2a0d:2bc0::/48
Signature Algorithm: sha256WithRSAEncryption
33:06:b4:1a:40:29:a7:83:63:20:1b:8c:94:5f:f8:dd:2d:ec:
b9:12:6d:61:f6:f6:2b:36:fe:2c:5a:0d:66:3f:0c:08:3f:44:
eb:98:fb:c7:fa:22:d6:93:f6:22:c6:57:14:9a:23:46:c1:0c:
29:95:ed:88:14:c1:19:1a:6a:2a:40:ba:97:25:56:16:9f:b7:
50:69:63:5e:29:a7:b9:3e:69:4a:84:ae:0e:d6:a5:e8:b4:68:
a9:c1:46:51:a8:d1:18:7e:65:f0:bc:e0:ca:4c:d1:79:36:aa:
5b:9f:55:b7:e4:07:90:d2:1c:8e:ec:6a:53:88:5d:00:de:34:
b6:6f:84:63:f3:5f:f1:a7:79:d8:76:01:cf:d7:8f:bd:ee:61:
51:eb:fd:4f:44:4e:8b:31:e9:70:bd:ba:35:50:6c:0e:47:13:
48:91:0a:40:52:91:cc:d8:e9:60:b6:e4:c0:92:c8:68:e8:14:
2d:d3:29:c8:eb:f3:f6:8c:b1:65:eb:a2:b3:93:83:7e:09:67:
a9:8d:51:54:44:23:14:dc:58:71:2f:fe:6d:e5:b3:83:0b:9b:
f9:b7:1d:23:7c:ba:ac:de:a4:65:5b:12:db:73:32:dc:0f:7f:
73:31:6d:5e:bf:5d:a2:f4:1d:d9:b1:90:77:d4:3e:b2:26:76:
86:de:c3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:49 2025 by rpki-client