Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/662327-bbcd-4490-8062-c55d85a23d5a/1/54WRupyy9g6qZDhvIVk8glE4nj0.roa
File: 54WRupyy9g6qZDhvIVk8glE4nj0.roa (raw, json)
Hash identifier: gpPDsuM0pjrxHxTmNysPnwXnjZhew83q7WqfiYqL9pc=
Subject key identifier: E7:85:91:BA:9C:B2:F6:0E:AA:64:38:6F:21:59:3C:82:51:38:9E:3D
Certificate issuer: /CN=f92e012e82b463a784f739d7cafc7dea87570ac0
Certificate serial: 02436527
Authority key identifier: F9:2E:01:2E:82:B4:63:A7:84:F7:39:D7:CA:FC:7D:EA:87:57:0A:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-S4BLoK0Y6eE9znXyvx96odXCsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/662327-bbcd-4490-8062-c55d85a23d5a/1/54WRupyy9g6qZDhvIVk8glE4nj0.roa
Signing time: Sat 01 Jan 2022 02:00:40 +0000
ROA not before: Sat 01 Jan 2022 02:00:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50926
IP address blocks: 185.129.250.0/24 maxlen: 24
185.129.249.0/24 maxlen: 24
185.129.248.0/24 maxlen: 24
185.129.251.0/24 maxlen: 24
185.129.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37971239 (0x2436527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f92e012e82b463a784f739d7cafc7dea87570ac0
Validity
Not Before: Jan 1 02:00:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e78591ba9cb2f60eaa64386f21593c8251389e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:25:d4:b9:2c:e2:3a:8f:45:88:3c:3d:a1:ad:
48:f7:c6:42:9e:8d:ff:b1:1d:09:92:82:b0:05:d5:
8b:e3:41:97:6d:55:e7:05:6b:f8:38:61:9c:fb:2a:
d4:37:68:2b:78:63:94:bb:53:4f:30:05:b1:4e:e1:
aa:69:85:0b:3b:56:6d:57:73:d5:ed:df:be:ee:a3:
fd:7b:d2:19:ff:93:a1:2a:06:99:a1:ec:2c:85:b0:
c3:5a:db:4e:44:49:6a:98:24:78:c8:be:70:03:0d:
5e:22:59:e7:48:25:f9:01:cc:e8:b8:9c:1d:dd:9c:
e2:28:70:c7:09:86:2a:19:74:32:13:ad:2d:aa:5c:
7f:6c:7c:18:82:e4:3c:30:26:9d:4d:b6:11:a4:d5:
2d:0f:07:1c:69:a7:7e:b3:47:2d:09:21:24:26:d3:
00:ba:dd:b4:73:f4:c3:8d:65:b7:78:48:78:90:a7:
81:59:c2:20:dc:a8:b8:42:07:3b:66:a8:8f:dc:1e:
eb:f9:02:46:dc:e0:27:7b:37:a9:f1:2a:75:34:21:
50:fa:48:de:34:5d:df:47:e5:ad:11:ad:b8:c1:fa:
55:34:7c:24:61:a5:10:21:0a:e9:b0:4c:8f:5a:5e:
c2:02:64:d9:32:b5:c0:6f:76:44:63:4c:3d:59:57:
b6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:85:91:BA:9C:B2:F6:0E:AA:64:38:6F:21:59:3C:82:51:38:9E:3D
X509v3 Authority Key Identifier:
keyid:F9:2E:01:2E:82:B4:63:A7:84:F7:39:D7:CA:FC:7D:EA:87:57:0A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-S4BLoK0Y6eE9znXyvx96odXCsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/662327-bbcd-4490-8062-c55d85a23d5a/1/54WRupyy9g6qZDhvIVk8glE4nj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/662327-bbcd-4490-8062-c55d85a23d5a/1/1-S4BLoK0Y6eE9znXyvx96odXCsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.248.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:9d:a0:e8:33:fb:71:99:a9:24:28:65:83:43:d8:fc:15:c8:
f7:f4:70:e7:60:2d:62:f7:64:e2:7b:61:56:a7:ec:60:74:6a:
76:08:5a:7a:13:27:1e:d9:e7:50:0b:a5:a5:74:67:1b:a5:df:
e4:da:81:3a:bd:5f:c8:bc:64:59:e9:73:8a:22:d8:d2:a3:6a:
f3:82:55:61:95:71:bc:69:96:76:9a:b4:2b:92:cf:46:63:ef:
9f:6e:89:09:b8:bb:64:73:8c:2f:ab:1a:3b:cf:ba:59:55:76:
a6:be:e2:ad:c7:c9:3b:cd:fc:4d:32:69:71:23:db:aa:0e:cb:
01:8f:a8:3d:55:0f:db:e9:0c:81:7b:a4:a5:29:04:d6:34:89:
2b:ce:37:54:6e:82:c1:29:3c:4a:04:dc:40:15:fd:b8:45:c8:
be:9a:27:60:31:b1:d8:77:e3:f1:78:bf:21:11:4e:d5:fb:be:
53:a8:5c:de:a8:4c:33:d5:0c:db:90:84:1e:9d:35:b1:02:18:
22:21:5d:45:9c:86:7e:d0:e7:0b:6e:80:7e:46:e2:a4:e9:83:
3e:84:f9:84:99:fe:7d:96:ef:b7:a2:ba:3c:d0:fa:17:8d:08:
05:4b:6c:eb:98:1f:40:da:d3:7c:03:fb:25:22:11:a6:53:f6:
e9:29:cf:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:57 2023 by rpki-client on console-ams.rpki-client.org