Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/5d1d57-fdea-4526-ae64-82a48dfe61bd/1/bPOoyZcMg6BfgvHMWLatNAOEJ3w.roa
File: bPOoyZcMg6BfgvHMWLatNAOEJ3w.roa (raw, json)
Hash identifier: dJyWntxS7Hc7WV/xC+our8U650AgIXE+fmYcPHTp9xE=
Subject key identifier: 6C:F3:A8:C9:97:0C:83:A0:5F:82:F1:CC:58:B6:AD:34:03:84:27:7C
Certificate issuer: /CN=a1b7fffa0278ed8655ebe6482a876dfc7c9de1bc
Certificate serial: 078ECD
Authority key identifier: A1:B7:FF:FA:02:78:ED:86:55:EB:E6:48:2A:87:6D:FC:7C:9D:E1:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obf_-gJ47YZV6-ZIKodt_Hyd4bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/5d1d57-fdea-4526-ae64-82a48dfe61bd/1/bPOoyZcMg6BfgvHMWLatNAOEJ3w.roa
Signing time: Thu 03 Mar 2022 20:55:57 +0000
ROA not before: Thu 03 Mar 2022 20:55:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.218.226.0/23 maxlen: 24
185.218.224.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 495309 (0x78ecd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b7fffa0278ed8655ebe6482a876dfc7c9de1bc
Validity
Not Before: Mar 3 20:55:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cf3a8c9970c83a05f82f1cc58b6ad340384277c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:96:90:09:4c:ba:a3:a1:18:5e:02:fd:c1:54:
6f:d7:8b:07:b9:b9:34:60:3f:ed:c1:84:e2:a6:c1:
fc:30:0a:78:da:a6:b2:f3:9c:81:be:dd:69:83:c7:
be:42:b4:1e:16:d8:8a:e2:52:4b:50:40:dc:53:96:
2c:71:ab:19:fb:a4:a4:0e:3b:46:66:46:ff:84:7d:
18:d5:9f:37:21:55:53:a3:23:59:ab:1d:1d:d0:d1:
4c:da:ae:fe:97:d5:40:bf:4b:f3:50:92:12:ac:d2:
9a:46:82:c9:c0:3b:ad:e5:ec:7b:f1:77:ee:07:e1:
3b:03:8d:10:83:b0:8c:47:e9:14:77:60:d2:de:c6:
ae:1b:78:6e:26:1f:47:22:d0:fe:8a:49:b5:98:71:
44:5c:4d:3f:d8:b0:55:eb:db:a2:8d:dc:b7:e0:7b:
e1:24:eb:31:09:2d:b5:32:ef:80:b8:6c:0a:b5:73:
b5:30:35:e4:52:aa:b6:c0:22:6a:68:e2:13:d6:18:
fa:fe:37:a8:45:b5:09:59:67:30:cd:da:a0:22:7b:
3f:e9:5f:d9:a1:c8:f1:79:05:14:c4:de:4e:2c:e6:
d6:a7:55:23:93:51:2e:61:fb:ef:69:c3:8e:8a:bc:
b6:42:81:ee:fd:3d:86:ae:e9:1f:d0:32:2a:9e:13:
6e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F3:A8:C9:97:0C:83:A0:5F:82:F1:CC:58:B6:AD:34:03:84:27:7C
X509v3 Authority Key Identifier:
keyid:A1:B7:FF:FA:02:78:ED:86:55:EB:E6:48:2A:87:6D:FC:7C:9D:E1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obf_-gJ47YZV6-ZIKodt_Hyd4bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5d1d57-fdea-4526-ae64-82a48dfe61bd/1/bPOoyZcMg6BfgvHMWLatNAOEJ3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5d1d57-fdea-4526-ae64-82a48dfe61bd/1/obf_-gJ47YZV6-ZIKodt_Hyd4bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.224.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:8d:e1:68:0c:06:63:02:c6:5c:71:6f:63:28:8f:dd:6b:1f:
66:8e:44:b6:58:8a:34:cd:78:66:77:58:bc:0f:c0:47:cd:24:
48:83:ed:e0:d6:a1:39:84:59:7f:1a:97:06:02:06:8f:ed:3b:
0a:5c:b5:78:05:84:ab:17:ed:1c:1b:2b:3b:5e:89:9d:c1:c7:
23:d6:a3:75:21:f7:bf:68:d3:37:ab:bf:01:75:5b:bd:78:27:
74:18:6a:b0:eb:7a:e8:99:bb:21:22:40:1f:a8:5f:58:98:37:
a7:70:f6:50:bf:20:bf:b0:b5:c9:e5:20:27:26:70:77:f6:8c:
ce:2d:c5:61:a9:71:07:5a:65:36:dd:a0:39:f1:56:e6:ac:a3:
0f:72:91:ec:76:ed:20:8f:9a:9f:f8:99:c4:21:45:aa:1d:69:
ca:76:f4:d6:71:8b:d8:19:58:ef:a5:3b:49:84:de:72:70:92:
dc:37:fa:18:30:cb:dd:25:b2:b2:28:ea:30:a0:34:71:58:35:
99:28:e0:ce:45:f2:17:4a:87:8e:74:fd:65:ce:08:45:74:ab:
9a:26:7b:6b:82:51:74:e5:d6:fd:30:51:02:50:33:a5:d5:62:
a5:0c:9e:df:16:11:69:93:12:a8:92:b6:71:55:be:12:79:05:
e4:f7:bb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:30 2025 by rpki-client