Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/075712-beca-41bd-adb6-ab2bae1a2567/1/Cy4ndxEqlWGX2El4dQVe64a00VU.roa
File: Cy4ndxEqlWGX2El4dQVe64a00VU.roa (raw, json)
Hash identifier: sr4Il7Rs96YSwP1WykW0D57TUetMVYvDU5QHVy7Jwkw=
Subject key identifier: 0B:2E:27:77:11:2A:95:61:97:D8:49:78:75:05:5E:EB:86:B4:D1:55
Certificate issuer: /CN=5c95d5a364e30df4061abf3ee4e772237ac8ca3f
Certificate serial: 0293FA44
Authority key identifier: 5C:95:D5:A3:64:E3:0D:F4:06:1A:BF:3E:E4:E7:72:23:7A:C8:CA:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJXVo2TjDfQGGr8-5OdyI3rIyj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/075712-beca-41bd-adb6-ab2bae1a2567/1/Cy4ndxEqlWGX2El4dQVe64a00VU.roa
Signing time: Tue 26 Apr 2022 14:45:34 +0000
ROA not before: Tue 26 Apr 2022 14:45:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 185.218.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43252292 (0x293fa44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c95d5a364e30df4061abf3ee4e772237ac8ca3f
Validity
Not Before: Apr 26 14:45:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b2e2777112a956197d8497875055eeb86b4d155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:19:f9:cd:44:3b:3c:d1:5f:b7:b9:ac:3e:
90:f5:27:97:e5:fe:22:0a:aa:43:82:fa:97:af:ec:
b2:e2:fd:82:f0:d0:39:02:32:ff:51:e1:c1:c6:45:
d6:fc:15:0b:a1:96:5c:bb:8b:27:b4:65:24:a1:17:
e1:29:8c:04:19:6f:a0:b4:bc:1c:6c:a2:c0:30:8a:
24:a6:37:e7:c7:5c:d6:17:90:e0:bf:1a:ee:27:4e:
f9:f1:08:1e:e8:88:60:9b:89:69:ba:ad:06:21:71:
97:f4:8d:ec:c3:ce:5e:60:c5:a1:85:bc:67:38:e4:
a2:71:8c:9b:c8:bf:37:36:77:2f:c4:ac:73:da:26:
3a:cb:43:e2:24:42:84:9c:e8:b3:4a:ab:34:4b:30:
f8:8c:ec:e6:07:c8:54:79:86:af:24:bc:bc:ac:e4:
f8:fc:d4:31:7c:08:c1:83:50:f2:50:90:0f:f0:23:
e7:81:3b:7c:e7:1b:0e:7d:a2:d2:2e:2e:b3:d3:9a:
38:49:29:35:00:b6:92:8c:cc:99:78:8d:e1:6e:c6:
b6:1e:22:89:33:6a:05:1b:5e:c6:88:b2:d3:a1:c9:
32:c7:be:69:22:68:bc:22:d5:4c:01:78:65:11:24:
df:70:9d:18:e9:ea:13:7b:3f:c5:c8:f3:f1:c5:5b:
25:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2E:27:77:11:2A:95:61:97:D8:49:78:75:05:5E:EB:86:B4:D1:55
X509v3 Authority Key Identifier:
keyid:5C:95:D5:A3:64:E3:0D:F4:06:1A:BF:3E:E4:E7:72:23:7A:C8:CA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJXVo2TjDfQGGr8-5OdyI3rIyj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/075712-beca-41bd-adb6-ab2bae1a2567/1/Cy4ndxEqlWGX2El4dQVe64a00VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/075712-beca-41bd-adb6-ab2bae1a2567/1/XJXVo2TjDfQGGr8-5OdyI3rIyj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:7c:a6:76:91:ed:99:6f:f0:f4:d7:f9:9a:7d:3a:60:de:db:
fd:6b:b8:b7:eb:ae:96:f9:61:9d:49:10:96:b6:fc:21:c1:6f:
ee:bd:f3:02:d7:34:71:83:be:2d:45:28:b1:4d:c6:20:97:70:
42:10:55:62:5a:7c:4b:e1:1f:c4:cf:6f:f3:eb:8c:d0:63:be:
3e:16:a6:ac:29:99:ca:ab:44:e6:15:47:2a:a1:dd:fd:87:f4:
56:0a:3b:53:3d:94:14:b3:74:d0:5c:5d:e5:f5:90:bd:35:b3:
c0:ad:32:ea:45:ec:03:76:0f:28:54:77:f5:ac:f1:f3:b8:05:
76:da:1d:ea:f1:78:25:2a:d8:d9:fe:2d:ca:57:70:68:45:65:
fe:3d:b4:07:e8:ba:09:f5:ae:40:1c:8e:5e:b3:99:bb:c6:cf:
4b:e3:5d:60:04:12:42:90:40:56:d0:8c:28:d9:49:2e:0a:95:
a7:3c:74:5b:59:0e:ad:98:82:98:78:f5:f8:ea:f2:25:64:44:
e2:26:76:6c:02:43:0f:9f:85:ac:0e:b9:64:f5:d1:9a:0f:d6:
71:e5:92:7e:ad:44:ab:cd:9c:a0:c6:d9:03:f4:7e:db:62:b4:
92:d5:36:ee:58:48:53:e7:d7:4f:11:43:f8:aa:2e:58:5a:f3:
c3:a6:d4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:29 2025 by rpki-client