Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/ARNgURAGZdbqC5_76_zInHdAGjI.roa
File: ARNgURAGZdbqC5_76_zInHdAGjI.roa (raw, json)
Hash identifier: 0cADiS22qoabWGW3nmo/sZtIROAbEGeuiKromAHy9kI=
Subject key identifier: 01:13:60:51:10:06:65:D6:EA:0B:9F:FB:EB:FC:C8:9C:77:40:1A:32
Certificate issuer: /CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
Certificate serial: 08A4910E
Authority key identifier: FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/ARNgURAGZdbqC5_76_zInHdAGjI.roa
Signing time: Sat 01 Jan 2022 00:59:17 +0000
ROA not before: Sat 01 Jan 2022 00:59:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 185.212.124.0/23 maxlen: 23
185.212.124.0/22 maxlen: 22
185.212.126.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145002766 (0x8a4910e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
Validity
Not Before: Jan 1 00:59:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01136051100665d6ea0b9ffbebfcc89c77401a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:8d:fa:7e:c4:f9:f9:e8:04:01:89:a9:d1:
2f:60:bd:77:7c:78:ea:4f:b7:da:21:a3:b1:a2:dd:
35:30:37:11:2d:d0:55:4d:bd:19:1e:42:81:45:42:
ea:88:6a:09:7f:1b:76:70:bc:68:ac:7a:c7:9b:0a:
57:41:f1:0e:81:9d:91:52:c2:4f:ae:af:c2:5d:f4:
8e:cd:4d:b6:f1:97:f5:7b:e5:58:c8:52:64:a7:fe:
b8:f6:4a:7c:f8:b6:76:dc:3c:95:f3:46:d1:ba:1d:
8c:d2:9f:84:ef:13:d0:8f:1d:1a:e4:76:a7:61:0f:
9c:96:f0:df:f5:27:54:e8:ba:42:af:12:20:47:7b:
ee:01:1b:2f:71:9b:2a:9f:85:4b:37:fe:ad:9f:9b:
8c:07:ba:54:f4:3e:67:cf:76:c0:9a:40:04:4d:7e:
f7:74:e3:0f:c1:8f:7b:08:fe:14:90:7d:0f:65:87:
bd:e5:71:a5:f0:5c:9f:0f:ab:4f:3b:66:94:77:00:
a4:4f:83:69:34:3e:c0:26:36:61:00:cb:be:83:7d:
11:ce:1e:8d:73:86:e2:45:05:d7:19:49:39:26:75:
2a:53:f1:08:dd:09:6f:5b:54:ca:26:e2:e8:e4:f5:
89:30:41:4e:68:74:9c:d7:48:6a:8a:3d:ac:83:20:
9b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:13:60:51:10:06:65:D6:EA:0B:9F:FB:EB:FC:C8:9C:77:40:1A:32
X509v3 Authority Key Identifier:
keyid:FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/ARNgURAGZdbqC5_76_zInHdAGjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.124.0/22
Signature Algorithm: sha256WithRSAEncryption
47:3c:52:f0:2b:99:03:00:36:6c:e8:6a:68:76:00:03:48:74:
18:08:e6:80:9f:fb:f6:24:c3:71:04:1f:91:39:b9:cb:8b:0e:
30:63:b7:18:07:af:7b:95:37:7c:8d:a0:7c:de:8e:4c:e5:d4:
28:94:b2:61:7c:00:ca:61:78:97:ef:5e:c8:fc:59:48:f2:ab:
66:55:ea:65:7f:08:42:4e:2b:b9:75:8f:b5:2e:a9:36:2a:1c:
31:39:1d:53:48:be:51:89:3a:18:56:d2:f6:a0:73:13:a0:1b:
4d:6a:33:ac:a5:7d:58:e6:12:a4:44:3a:56:f3:77:01:f4:5d:
4c:00:e8:27:61:04:7e:45:d8:01:1c:3b:6b:8a:dd:14:3d:bc:
71:63:7d:05:de:bb:f5:47:2f:7e:dc:84:97:44:5b:35:69:48:
e1:1a:fe:5f:06:98:53:95:96:03:b7:d0:bb:ee:35:07:9f:88:
a0:36:07:57:ba:5f:74:98:10:01:03:86:1d:b5:f4:72:27:82:
0b:1f:67:cf:7a:08:45:dc:87:fa:11:b8:65:33:75:3d:3c:19:
3a:d8:8d:35:d3:8b:c7:04:3a:e4:61:26:ea:69:29:e7:6e:d5:
d8:5e:98:ef:39:42:2b:0c:83:13:db:52:2f:99:14:e3:84:91:
02:06:7d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:55:43 2025 by rpki-client