Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e3aa51-6129-493d-91d2-51751b29f8b4/1/b8T3Nh_mJiWLf2waaXZXD1acQeU.roa
File: b8T3Nh_mJiWLf2waaXZXD1acQeU.roa (raw, json)
Hash identifier: 4Ul4uhaeSIC0Gb752Zfia2FZxA+JRVXed4gGrW3LJyc=
Subject key identifier: 6F:C4:F7:36:1F:E6:26:25:8B:7F:6C:1A:69:76:57:0F:56:9C:41:E5
Certificate issuer: /CN=29878a2888c9ac3123c795ff9681f1957ca0f964
Certificate serial: 01856E14492E139FCC101EF97D0A66269226
Authority key identifier: 29:87:8A:28:88:C9:AC:31:23:C7:95:FF:96:81:F1:95:7C:A0:F9:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYeKKIjJrDEjx5X_loHxlXyg-WQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e3aa51-6129-493d-91d2-51751b29f8b4/1/b8T3Nh_mJiWLf2waaXZXD1acQeU.roa
Signing time: Sun 01 Jan 2023 16:05:01 +0000
ROA not before: Sun 01 Jan 2023 16:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50304
IP address blocks: 185.97.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:49:2e:13:9f:cc:10:1e:f9:7d:0a:66:26:92:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29878a2888c9ac3123c795ff9681f1957ca0f964
Validity
Not Before: Jan 1 16:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fc4f7361fe626258b7f6c1a6976570f569c41e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:78:88:54:d2:65:05:3e:92:e5:51:36:10:
c6:72:db:3a:db:82:3e:36:68:5e:cc:16:c2:d2:52:
1e:48:4a:b1:0e:8b:55:29:d9:9d:80:2e:16:94:d4:
ad:34:cc:fc:d2:10:5e:bf:29:c8:7b:a9:52:15:e8:
c1:ec:f8:98:a7:47:7b:38:ac:f3:fb:04:7b:d1:2b:
50:d3:cf:bb:6d:cb:47:02:8b:23:9b:6c:07:d2:1a:
59:e7:56:36:c4:cc:f6:cc:11:c0:c0:1c:dc:1c:30:
b0:f6:f8:48:83:2e:b6:4b:4b:3f:09:92:65:fa:0c:
c2:3e:1f:9d:fa:44:2f:62:fc:c6:c4:38:35:10:6b:
ce:97:12:77:b3:85:59:83:76:29:d4:27:52:c7:27:
f0:5f:80:ca:b3:64:e5:ec:4c:0b:2e:9d:f2:0f:8b:
ff:34:60:a2:94:31:9a:99:b3:36:aa:fe:60:4b:50:
f9:3d:97:46:f1:5d:76:96:86:c6:a8:12:2f:fd:8d:
42:26:6c:e1:19:0d:48:b6:16:4b:85:9b:90:d3:e8:
76:be:3d:36:03:90:88:31:36:3f:de:4d:87:5c:e8:
f3:f8:d0:5f:01:c0:82:62:f6:a6:79:c5:60:eb:ff:
b9:ea:35:e4:45:58:a7:48:1b:dc:7e:c4:1f:37:4c:
13:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C4:F7:36:1F:E6:26:25:8B:7F:6C:1A:69:76:57:0F:56:9C:41:E5
X509v3 Authority Key Identifier:
keyid:29:87:8A:28:88:C9:AC:31:23:C7:95:FF:96:81:F1:95:7C:A0:F9:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYeKKIjJrDEjx5X_loHxlXyg-WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e3aa51-6129-493d-91d2-51751b29f8b4/1/b8T3Nh_mJiWLf2waaXZXD1acQeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e3aa51-6129-493d-91d2-51751b29f8b4/1/KYeKKIjJrDEjx5X_loHxlXyg-WQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.215.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:84:d3:5d:30:87:e1:00:74:34:f4:b8:17:52:18:7f:04:68:
83:25:1f:37:bd:16:78:75:f1:dc:d2:eb:39:29:77:f0:ec:c1:
44:e3:b9:81:d0:ad:d1:0a:5b:13:87:b3:bb:70:97:84:25:51:
61:f0:93:bc:1f:57:54:e0:0e:94:f8:51:0c:35:02:be:1b:7b:
ac:9a:ba:5e:a1:00:2b:88:81:c3:04:25:ed:28:8c:90:d6:11:
76:6c:7a:56:76:27:0f:e4:02:7e:81:69:70:02:1b:22:b6:20:
ec:50:1d:6e:4d:af:41:26:35:a7:77:1a:a5:5b:93:01:84:f7:
27:5b:6a:1f:7d:3b:23:50:cd:20:dd:62:03:87:9a:3d:86:b4:
48:3e:b0:b3:2b:47:98:80:1b:e3:d8:a4:1e:9c:83:07:57:32:
15:0e:b3:04:0c:f6:21:f8:40:60:ee:a7:9e:50:c1:fb:aa:1b:
35:48:58:22:96:9a:92:95:13:91:6c:ef:cb:25:df:f2:a9:8b:
e2:62:56:6f:cb:91:61:a0:81:3a:43:00:64:5e:28:07:04:ee:
e8:b2:29:49:1a:ed:51:3a:ce:b2:30:60:90:09:30:a3:e6:50:
28:a3:b3:52:99:9a:8e:61:bb:44:d0:7d:d5:7a:60:d9:fc:3f:
bd:5f:b2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:00 2025 by rpki-client