Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1875ac-a274-479e-a676-b025f4003943/1/EpstjfI8Db_HCzRNA-1Qqg4swk4.roa
File: EpstjfI8Db_HCzRNA-1Qqg4swk4.roa (raw, json)
Hash identifier: tRxUiEj6eHX3p/4mMYBTR40CnBFV9bthxDMy1dBKxnI=
Subject key identifier: 12:9B:2D:8D:F2:3C:0D:BF:C7:0B:34:4D:03:ED:50:AA:0E:2C:C2:4E
Certificate issuer: /CN=68f691e98532920b49f63cf84a509a1b3ca8c0f0
Certificate serial: 0197DFFE
Authority key identifier: 68:F6:91:E9:85:32:92:0B:49:F6:3C:F8:4A:50:9A:1B:3C:A8:C0:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPaR6YUykgtJ9jz4SlCaGzyowPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1875ac-a274-479e-a676-b025f4003943/1/EpstjfI8Db_HCzRNA-1Qqg4swk4.roa
Signing time: Sat 01 Jan 2022 11:59:06 +0000
ROA not before: Sat 01 Jan 2022 11:59:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211432
IP address blocks: 185.232.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26730494 (0x197dffe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f691e98532920b49f63cf84a509a1b3ca8c0f0
Validity
Not Before: Jan 1 11:59:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=129b2d8df23c0dbfc70b344d03ed50aa0e2cc24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:69:20:81:b2:d0:d3:56:f9:5e:35:89:52:bd:
b9:78:38:bf:23:d2:19:fb:17:78:cf:41:9c:ba:91:
2e:e9:5b:e1:8d:79:b7:28:11:f9:c1:76:9c:29:82:
78:ba:4d:f8:ad:d2:c3:e5:e5:0b:52:61:ab:7d:1a:
63:fb:4b:ae:a8:77:41:f6:41:c9:32:f3:ed:f3:e0:
5f:c1:44:d6:96:06:6d:4f:87:81:1b:0b:d4:6e:5b:
35:aa:f6:e5:f6:cf:f2:33:f6:df:b7:ac:ea:b1:74:
63:be:90:bb:3a:15:d5:87:18:eb:5b:b1:55:1d:20:
d2:27:59:bd:ce:8d:be:52:66:b6:ab:dc:fb:cd:fd:
61:16:dc:b6:31:c2:e1:70:29:00:f0:59:fa:2e:24:
b7:85:f1:c5:dc:13:6d:3b:37:c8:24:fc:9f:7c:82:
c5:9c:a0:35:33:12:c9:b5:ae:93:4b:d6:6e:dd:4c:
dc:94:2e:15:35:42:11:b2:14:64:91:9d:92:0e:8a:
53:c3:fa:c9:4d:54:24:f8:42:2c:4f:91:e2:7e:f9:
ab:b1:c3:71:68:4f:1a:10:cc:30:ca:8f:9f:f3:70:
0c:6f:95:0e:5b:d9:ac:a8:48:97:87:1e:78:41:01:
c8:a1:77:34:71:a9:df:91:c9:4b:8b:81:16:fb:f8:
be:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9B:2D:8D:F2:3C:0D:BF:C7:0B:34:4D:03:ED:50:AA:0E:2C:C2:4E
X509v3 Authority Key Identifier:
keyid:68:F6:91:E9:85:32:92:0B:49:F6:3C:F8:4A:50:9A:1B:3C:A8:C0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPaR6YUykgtJ9jz4SlCaGzyowPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1875ac-a274-479e-a676-b025f4003943/1/EpstjfI8Db_HCzRNA-1Qqg4swk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1875ac-a274-479e-a676-b025f4003943/1/aPaR6YUykgtJ9jz4SlCaGzyowPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.167.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:e3:36:c2:2e:64:95:cd:31:04:61:78:bd:6d:2a:33:8c:71:
cb:bb:d5:e1:ff:fb:b9:85:45:66:2d:98:a4:af:83:bb:22:88:
ec:58:95:b0:0f:2c:c1:51:fb:e8:ee:86:36:97:d0:9d:80:b4:
f4:71:ee:bd:f8:b0:d6:e4:c3:5e:c5:dc:78:07:24:ed:5c:b2:
f1:ce:2c:b9:16:31:b9:6c:e6:da:40:73:0c:50:c8:96:b9:72:
d6:b3:7c:87:06:a7:8a:a4:5a:f3:05:54:80:42:0c:26:8a:d2:
b1:da:e5:0e:bf:20:95:85:ec:99:58:1c:75:dd:83:a6:cf:97:
2f:d1:1d:97:bc:81:52:82:30:d2:a2:e1:8d:60:32:7f:77:fb:
4c:91:b2:dc:52:cc:5a:32:c9:88:85:ba:c5:19:72:de:f0:df:
2c:53:01:4b:64:c4:0a:50:41:12:47:b5:52:7b:ca:d8:3f:3d:
6c:15:59:e6:d6:a5:0d:7c:2f:c8:16:76:c6:25:7b:b2:9a:f7:
ec:9a:e3:79:3d:67:32:28:6e:c0:f9:df:42:56:bd:a5:c5:d8:
79:0d:d1:43:45:01:f8:0a:71:00:0c:cf:5d:45:c4:e9:1a:d5:
6f:f1:9f:5e:c8:7e:2e:fd:16:a9:92:83:d6:11:0d:29:d3:bb:
8d:b0:74:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:14:43 2025 by rpki-client