Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/ImFrnns93bIdhIfmOQA075iKnZU.roa
File: ImFrnns93bIdhIfmOQA075iKnZU.roa (raw, json)
Hash identifier: 8DW9crEfbWtnd5tceVh4PwxxylRjLvWJ/8vRkPp8jME=
Subject key identifier: 22:61:6B:9E:7B:3D:DD:B2:1D:84:87:E6:39:00:34:EF:98:8A:9D:95
Certificate issuer: /CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Certificate serial: 03B50654
Authority key identifier: E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/ImFrnns93bIdhIfmOQA075iKnZU.roa
Signing time: Sat 01 Jan 2022 01:55:35 +0000
ROA not before: Sat 01 Jan 2022 01:55:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 185.217.166.0/24 maxlen: 24
2a10:d502::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62195284 (0x3b50654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Validity
Not Before: Jan 1 01:55:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22616b9e7b3dddb21d8487e6390034ef988a9d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:53:c2:58:30:e8:fb:04:00:d9:05:d3:d1:
92:ba:77:41:67:db:31:08:9a:fb:cf:db:d7:15:e3:
0c:7a:f9:e8:c4:d2:99:d7:34:8b:89:ee:fd:a0:99:
c3:46:80:bc:39:48:3b:0e:0e:dc:c1:2e:df:3f:03:
26:45:00:8b:7c:96:db:11:c1:af:6a:85:a2:26:a9:
95:2b:62:87:36:1d:38:cb:3a:1b:5d:c7:38:d6:c8:
09:03:52:2a:2b:8d:e6:a5:f5:aa:a5:b0:70:02:8f:
c4:89:2b:7d:00:85:20:97:64:94:89:73:1f:b6:c9:
6f:b2:66:46:2d:76:e5:05:41:b0:24:4c:07:02:19:
29:5c:c6:e1:51:77:16:f8:cd:67:20:a8:86:5d:85:
2a:66:16:e3:c8:06:f5:39:ec:db:e0:0c:b8:75:94:
99:12:44:9a:65:ae:28:81:fd:1e:71:a4:89:5c:1f:
18:3c:6d:b1:fd:1f:12:4b:4c:29:ce:e2:6b:fe:55:
bf:2c:af:1b:1f:11:28:6b:05:a1:9b:52:8e:c6:8a:
17:10:4b:12:5a:a2:01:11:98:36:00:ed:56:d4:3f:
9a:73:3a:a9:5d:18:a6:04:75:c7:02:58:75:4f:ac:
3f:cc:57:35:33:76:ad:84:6d:8a:19:8b:89:c5:3a:
14:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:61:6B:9E:7B:3D:DD:B2:1D:84:87:E6:39:00:34:EF:98:8A:9D:95
X509v3 Authority Key Identifier:
keyid:E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/ImFrnns93bIdhIfmOQA075iKnZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.166.0/24
IPv6:
2a10:d502::/32
Signature Algorithm: sha256WithRSAEncryption
df:9c:0d:a5:e8:6e:58:6b:12:fe:f2:24:f5:4b:20:93:d6:a1:
4b:79:6c:f6:83:86:bc:30:8b:1e:c5:49:b0:25:99:1f:17:01:
60:e5:31:69:eb:68:79:b0:a9:91:0e:45:13:19:6c:06:12:f6:
62:c4:e1:4d:6e:68:59:d1:8d:5e:a9:cc:65:87:6a:a6:1a:56:
84:ee:06:15:f6:f2:7c:fd:38:99:f2:55:cf:2d:95:29:4e:40:
03:94:81:99:90:42:a7:0d:2f:db:7c:65:9f:85:df:ff:eb:7a:
36:17:74:eb:ce:8e:75:28:11:38:63:39:b6:9c:38:a4:a9:ea:
93:24:34:23:a3:f5:ba:1c:e6:3b:fe:19:ff:dc:2d:a9:18:ed:
ac:55:44:27:0c:a8:8d:43:de:82:41:fc:78:23:4a:e4:97:5c:
b8:96:19:57:26:8a:b0:4e:0e:21:dc:70:d8:99:f8:ad:ce:ef:
bb:51:db:5d:03:39:98:47:ae:74:cb:f1:c2:21:34:77:12:49:
4b:39:c0:2f:c1:d4:79:19:04:ae:09:9c:5f:af:50:a8:dc:30:
a3:cd:4c:2d:46:43:79:3c:7b:ee:b5:44:6c:fd:4a:72:d9:7d:
a3:fe:8b:cc:65:4b:f1:aa:31:aa:29:b6:84:e2:c8:5d:97:8a:
69:df:cd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:07 2025 by rpki-client