Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/bd886u9FbFevtmBSY-_JPOFd2wk.roa
File: bd886u9FbFevtmBSY-_JPOFd2wk.roa (raw, json)
Hash identifier: 9SfnM8V5sw9ikQVuE0Ac09erXju/af1xMCqAtAqlZ2k=
Subject key identifier: 6D:DF:3C:EA:EF:45:6C:57:AF:B6:60:52:63:EF:C9:3C:E1:5D:DB:09
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0185A15071B879B409183DD01266186A2346
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/bd886u9FbFevtmBSY-_JPOFd2wk.roa
Signing time: Wed 11 Jan 2023 14:51:21 +0000
ROA not before: Wed 11 Jan 2023 14:51:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 164.215.96.0/22 maxlen: 22
46.23.100.0/22 maxlen: 22
5.10.248.0/22 maxlen: 22
185.81.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a1:50:71:b8:79:b4:09:18:3d:d0:12:66:18:6a:23:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 11 14:51:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ddf3ceaef456c57afb6605263efc93ce15ddb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:ab:69:fe:2d:f3:c9:1f:20:3b:ca:3a:ec:
6b:b7:b4:c8:32:c8:31:29:91:f8:71:50:a4:8f:20:
ab:83:80:7b:da:11:20:62:89:e8:b1:3d:83:1c:53:
a6:cf:6a:c4:ea:d4:82:b2:7a:d3:da:f1:89:ec:95:
66:44:73:15:6f:85:03:ee:c0:3d:38:3a:0e:0e:1d:
69:e1:39:f7:a3:6b:f1:e1:c6:fb:d1:41:74:a6:7a:
0d:a9:ed:7b:26:0f:16:6f:6d:4a:f7:b6:90:c8:36:
d9:c6:af:d7:e2:9a:1d:a8:a5:1d:eb:d7:ac:0a:1c:
20:17:c2:67:6e:81:4c:7b:ea:3c:83:55:4a:2a:24:
c2:9f:6c:29:87:29:e8:61:67:de:3c:eb:21:b7:52:
48:a2:65:b2:49:50:0e:62:e0:f8:d3:8d:a7:f4:06:
dd:2e:1a:3e:33:16:d5:1e:ee:39:6a:ee:a1:45:39:
b2:00:9b:aa:2e:70:4c:b4:e7:cf:0e:a6:d4:e8:73:
89:cc:39:6c:3b:30:d8:58:49:0e:bc:1c:9a:c5:f1:
fb:26:2c:03:29:8a:dd:61:99:ab:38:76:d2:34:bc:
9e:e5:87:8f:97:90:bf:d9:9e:86:ac:96:e2:d5:81:
ba:b7:79:15:33:ba:8f:07:bf:99:0e:b8:23:2c:d9:
3b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DF:3C:EA:EF:45:6C:57:AF:B6:60:52:63:EF:C9:3C:E1:5D:DB:09
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/bd886u9FbFevtmBSY-_JPOFd2wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.248.0/22
46.23.100.0/22
164.215.96.0/22
185.81.217.0/24
Signature Algorithm: sha256WithRSAEncryption
14:1c:5f:c7:a5:ac:4a:f1:71:51:28:de:dc:44:63:41:4b:11:
95:f2:f5:19:b6:de:43:3f:fd:3e:17:cf:5e:c3:eb:ee:92:ca:
4a:7d:f6:cb:9c:bb:00:3c:96:15:c4:97:76:fd:ad:d0:13:63:
28:c2:a3:2c:f3:5d:56:8d:d7:85:97:e6:32:c5:95:00:41:1f:
bf:e7:b3:de:bc:50:a8:90:98:34:03:88:28:a7:b3:de:c4:d6:
4c:a2:40:31:06:1f:82:08:a3:e2:4d:ec:b4:e1:9c:88:5c:41:
b5:63:83:12:54:17:87:8e:e5:1a:e3:f1:35:ce:f2:63:ac:65:
73:48:74:43:b0:3b:a5:77:c9:2b:e4:e4:b9:a1:58:38:5f:f6:
14:82:ef:19:07:08:a7:3c:d8:8e:21:d5:78:8b:d2:1d:ef:c0:
35:53:b0:39:4c:af:15:b4:72:40:79:fa:a7:3d:3e:f0:b1:a8:
9e:0f:7c:99:68:c1:2a:22:25:a4:88:bd:33:fc:bd:a3:f2:d9:
99:a1:bc:4f:18:bc:0a:d6:e1:3b:05:ed:cf:11:fb:d2:c6:3b:
eb:a9:ee:47:b4:67:11:ed:da:df:3a:37:fc:5c:61:f2:28:b9:
fe:39:70:ad:db:ff:d5:3b:d0:c4:e0:90:d3:c0:09:14:1d:ce:
07:f8:f7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:45 2025 by rpki-client