Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f9de18-c8c1-48fd-99ab-cfacb83fe8ed/1/tGEUbmt-CKRv8TvNthb_m8DoikY.roa
File: tGEUbmt-CKRv8TvNthb_m8DoikY.roa (raw, json)
Hash identifier: 1alvUzwUMFkaPvf01aB+R7FN60HZH2dq3ZE11pbV7y4=
Subject key identifier: B4:61:14:6E:6B:7E:08:A4:6F:F1:3B:CD:B6:16:FF:9B:C0:E8:8A:46
Certificate issuer: /CN=be9b02bb81f7b5b0fb62a1a4a3dc5a88d1cbe4ff
Certificate serial: 1243427D
Authority key identifier: BE:9B:02:BB:81:F7:B5:B0:FB:62:A1:A4:A3:DC:5A:88:D1:CB:E4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpsCu4H3tbD7YqGko9xaiNHL5P8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f9de18-c8c1-48fd-99ab-cfacb83fe8ed/1/tGEUbmt-CKRv8TvNthb_m8DoikY.roa
Signing time: Sat 01 Jan 2022 14:57:48 +0000
ROA not before: Sat 01 Jan 2022 14:57:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12390
IP address blocks: 185.199.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306397821 (0x1243427d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9b02bb81f7b5b0fb62a1a4a3dc5a88d1cbe4ff
Validity
Not Before: Jan 1 14:57:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b461146e6b7e08a46ff13bcdb616ff9bc0e88a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:99:a4:76:2e:85:2a:9a:8d:4a:c4:69:c7:
34:a7:ac:cc:92:b0:40:a3:e2:e2:7b:a6:e4:b3:75:
4a:ef:6e:d1:5e:a8:68:39:39:13:93:67:d9:87:20:
db:24:72:be:9c:25:73:cb:d6:35:5f:2a:db:6a:1c:
3e:68:75:4c:66:8f:79:ca:cd:37:66:fb:ea:18:b3:
95:74:27:5c:97:5f:8c:bd:07:45:e0:4c:1f:43:56:
31:55:02:dc:54:72:0b:8d:52:2e:c8:d8:ec:68:8a:
e4:15:5d:55:47:fb:9d:d2:ef:b5:bd:19:b3:e5:26:
f3:e4:f1:b4:e3:0c:d7:b3:3c:cd:9e:42:2f:00:9b:
4d:b0:d4:aa:6e:4a:e8:0e:97:f2:17:5a:5d:9f:65:
0a:71:36:43:30:ee:b5:e3:57:19:a5:a8:38:0d:55:
8c:54:49:c6:4c:24:7e:71:cd:1e:ac:54:41:1d:31:
50:25:05:ae:ac:80:10:83:3f:68:98:4b:d9:dc:6e:
57:f2:2b:6b:88:0e:05:b0:7c:2b:46:c9:e9:7c:18:
9b:c6:5f:cc:49:48:c6:ce:b5:f9:92:89:1c:7d:3e:
b5:c4:85:19:8a:ed:1e:a1:56:86:ba:f8:30:62:a0:
d2:dd:67:af:0b:ff:e1:af:13:95:49:42:19:27:75:
13:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:61:14:6E:6B:7E:08:A4:6F:F1:3B:CD:B6:16:FF:9B:C0:E8:8A:46
X509v3 Authority Key Identifier:
keyid:BE:9B:02:BB:81:F7:B5:B0:FB:62:A1:A4:A3:DC:5A:88:D1:CB:E4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpsCu4H3tbD7YqGko9xaiNHL5P8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f9de18-c8c1-48fd-99ab-cfacb83fe8ed/1/tGEUbmt-CKRv8TvNthb_m8DoikY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f9de18-c8c1-48fd-99ab-cfacb83fe8ed/1/vpsCu4H3tbD7YqGko9xaiNHL5P8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.56.0/22
Signature Algorithm: sha256WithRSAEncryption
28:c2:59:6f:fb:93:f8:96:fe:df:fb:59:05:75:5a:d7:c8:f3:
88:84:d2:93:3f:6a:43:a8:c7:64:9f:cb:2f:e7:eb:61:c9:21:
8b:27:19:f6:fd:1b:69:73:9f:9e:ee:60:75:5f:02:c6:c5:dc:
e0:72:15:60:65:ed:d6:8c:39:db:dc:ff:b9:6f:3f:7c:9f:7f:
19:a6:47:6e:5c:2c:a9:8c:f2:1a:53:69:66:8b:0c:18:15:88:
eb:2f:82:78:80:ff:27:da:22:fc:e8:04:ee:6c:e0:50:6a:83:
30:c5:73:18:98:b9:42:b2:78:de:6c:95:f5:0a:17:95:1f:15:
3a:b6:c8:b2:0e:69:aa:64:e5:b1:bd:c9:57:6f:5f:ac:fe:3f:
8e:a8:02:12:01:49:65:5c:fd:b6:86:cc:32:19:bd:7d:a9:83:
32:ff:9e:42:e9:6d:12:61:4f:9c:3b:e0:79:5a:0a:5d:56:c7:
e0:5d:5e:8c:01:88:6c:8a:e5:6d:b2:27:ba:40:36:30:b5:48:
eb:e5:34:9b:6d:fc:3a:0c:79:d4:17:d3:ac:95:de:29:8d:e2:
1d:b2:5b:9f:af:53:3d:a7:00:97:9e:5b:4f:86:17:d4:c9:4e:
d1:0f:f5:d0:c8:65:75:01:63:06:6b:0b:84:9c:7f:b5:a6:ba:
2e:44:ad:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:24 2025 by rpki-client