Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/4lQKvzPDqRwJKSrlsygZR3ufIcU.roa
File: 4lQKvzPDqRwJKSrlsygZR3ufIcU.roa (raw, json)
Hash identifier: 5zc5fs51sJ3qBuxLF88QEh31TV/LdaxEvzJmG3m2yKw=
Subject key identifier: E2:54:0A:BF:33:C3:A9:1C:09:29:2A:E5:B3:28:19:47:7B:9F:21:C5
Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial: 3783F36F
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/4lQKvzPDqRwJKSrlsygZR3ufIcU.roa
Signing time: Sat 01 Jan 2022 02:53:51 +0000
ROA not before: Sat 01 Jan 2022 02:53:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24953
IP address blocks: 185.34.196.0/22 maxlen: 22
185.167.240.0/22 maxlen: 24
185.213.124.0/22 maxlen: 22
2a0b:c200::/29 maxlen: 29
2001:1ad0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 931394415 (0x3783f36f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
Validity
Not Before: Jan 1 02:53:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2540abf33c3a91c09292ae5b32819477b9f21c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:d6:97:c5:66:ff:d5:2d:bc:a8:9c:99:fb:
fb:88:a0:58:21:73:65:9d:54:76:58:46:68:fa:74:
70:3f:a9:3c:ef:9d:f7:88:e6:e0:3d:c9:e8:ac:bb:
8a:20:05:43:a9:c6:f2:e9:da:66:19:2d:60:83:cc:
0a:2a:ac:e3:fc:6f:d2:1c:fc:ce:28:f7:59:25:e5:
c7:49:fe:d6:d6:a3:b7:27:2c:3a:47:04:1a:8f:9f:
9c:72:ea:82:b6:71:6b:a8:e6:98:22:d6:c0:e5:4a:
29:3e:dd:8c:54:a6:f7:8b:9a:59:ef:c0:aa:2e:dd:
02:eb:fa:85:f9:7a:ac:65:fc:61:cb:f5:8c:24:7a:
2a:4b:77:62:e0:78:14:12:87:89:80:3b:bb:5f:5a:
10:1c:83:40:71:64:e0:cf:bb:67:f4:db:2d:15:38:
57:d5:e0:2f:05:19:21:51:14:87:37:89:75:ca:9f:
24:2d:12:f6:07:06:87:25:01:ef:a9:4f:ed:4d:b4:
fd:6a:b9:2f:8b:0b:41:d5:0c:a3:ec:ba:28:4d:1f:
36:92:84:f7:57:05:56:d4:2a:d8:3d:47:e1:bf:c9:
1a:6c:86:95:49:67:f4:d6:e2:01:5e:7f:b0:58:7a:
d6:44:1b:b3:d6:5b:8d:d3:4f:a8:8d:a1:f4:c4:48:
fb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:54:0A:BF:33:C3:A9:1C:09:29:2A:E5:B3:28:19:47:7B:9F:21:C5
X509v3 Authority Key Identifier:
keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/4lQKvzPDqRwJKSrlsygZR3ufIcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.196.0/22
185.167.240.0/22
185.213.124.0/22
IPv6:
2001:1ad0::/32
2a0b:c200::/29
Signature Algorithm: sha256WithRSAEncryption
4f:5e:62:6a:4b:0b:4b:22:7f:e3:31:a3:70:bd:8c:18:d6:5f:
1c:c1:0a:74:09:2e:9c:46:f6:76:7b:6c:40:63:61:77:67:2f:
d3:f1:95:e4:c4:86:ae:c3:0e:be:c6:8f:74:7a:e8:03:96:85:
e7:e8:3c:a1:87:34:20:76:0a:8e:47:b5:95:7f:50:b4:64:3f:
5d:0f:8f:e8:96:a9:87:b7:1c:ae:2e:bf:a5:29:18:96:8d:8b:
b3:6c:96:4e:ec:35:f6:45:5d:93:7a:5c:e3:5b:e6:5e:df:11:
59:65:0c:d8:d5:fe:d5:9e:06:24:12:46:15:de:f6:15:91:cb:
6f:78:39:2f:13:bc:53:9e:fd:ad:b2:e6:d3:6e:74:b8:f9:73:
09:cf:7d:dc:ea:c5:01:38:26:07:53:94:21:d3:6c:db:a6:18:
b6:52:68:09:19:c2:03:14:d2:a2:63:5d:63:37:0f:17:14:18:
17:9e:f9:91:fd:b0:04:14:85:35:9b:6a:13:87:57:ba:c3:96:
9b:48:ed:c8:c9:dc:db:26:67:12:4e:41:66:28:0b:ee:ad:dc:
81:1a:5b:47:a7:f6:04:04:63:d0:48:c3:98:05:38:c1:7e:2a:
0d:05:79:ba:e6:77:c9:16:29:32:12:b0:44:7e:7e:2e:a9:24:
3b:1a:5f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:31 2025 by rpki-client