Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/Q46xf8edZuOB_6OvyVqROORTUos.roa
File: Q46xf8edZuOB_6OvyVqROORTUos.roa (raw, json)
Hash identifier: 0bNghuiU9dIUSlN84GD9wbLshEFi9FUigbo/tNVuILk=
Subject key identifier: 43:8E:B1:7F:C7:9D:66:E3:81:FF:A3:AF:C9:5A:91:38:E4:53:52:8B
Certificate issuer: /CN=191e27b29f65a24d9f94215715cd3671825a9eae
Certificate serial: 07EFF65D
Authority key identifier: 19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/Q46xf8edZuOB_6OvyVqROORTUos.roa
Signing time: Sat 01 Jan 2022 07:01:59 +0000
ROA not before: Sat 01 Jan 2022 07:01:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49544
IP address blocks: 185.102.26.0/24 maxlen: 24
185.102.24.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133166685 (0x7eff65d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191e27b29f65a24d9f94215715cd3671825a9eae
Validity
Not Before: Jan 1 07:01:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=438eb17fc79d66e381ffa3afc95a9138e453528b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ba:7f:55:10:01:8a:23:24:9a:d4:69:19:ee:
00:2f:95:13:1d:30:1c:81:1a:cb:30:bd:06:20:ce:
a9:6a:47:54:75:7e:df:9f:c8:7e:a4:70:94:21:e7:
aa:e8:b3:af:cb:4e:18:6f:77:03:39:3c:5c:ad:21:
ff:a8:4d:cf:ba:6d:bc:2e:2a:f2:ba:2c:0e:e0:b8:
35:d0:81:0c:6a:a6:96:13:67:ec:a6:c5:97:bb:db:
15:15:51:75:38:ae:29:bd:d3:ae:db:cf:0d:de:60:
57:8d:6e:2a:ee:fa:2b:a0:14:ba:a2:24:98:20:7e:
c1:5c:c5:65:f2:10:c8:d6:69:39:80:b8:75:8a:78:
fb:c3:49:97:3e:6c:7b:f3:4c:39:d7:be:6f:c3:70:
80:e3:a8:b9:48:78:0e:51:f8:87:12:f5:15:33:ef:
7b:0f:01:32:2c:2a:85:eb:5c:5a:67:2a:1f:d3:2c:
9b:12:19:f3:91:3f:c6:5b:a0:8a:79:bc:80:92:39:
48:14:60:53:21:81:9a:67:e7:90:82:52:b1:8f:38:
21:b4:6c:93:e5:cf:27:69:a1:2e:2a:27:17:3b:79:
82:19:a6:1e:1e:41:51:94:9d:4a:cc:14:8c:a1:45:
d1:ef:c5:52:3b:66:5d:3a:3d:1f:14:2e:eb:bf:01:
1e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8E:B1:7F:C7:9D:66:E3:81:FF:A3:AF:C9:5A:91:38:E4:53:52:8B
X509v3 Authority Key Identifier:
keyid:19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/Q46xf8edZuOB_6OvyVqROORTUos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.24.0-185.102.26.255
Signature Algorithm: sha256WithRSAEncryption
83:7c:13:7a:d3:29:e4:c1:86:1b:2f:3a:15:a1:0a:8e:c6:b9:
63:5d:6f:7c:e1:c7:6e:1a:17:8b:61:8c:7a:e4:ee:8d:15:e5:
bd:6e:bc:ac:af:02:29:e2:4e:87:4b:b7:08:68:c4:8e:c3:b5:
55:5f:18:20:df:f1:3c:82:69:22:56:6c:2f:01:f4:da:29:32:
ff:45:23:5f:c2:f9:40:7e:28:cb:78:40:01:22:f2:3b:27:2d:
2e:59:25:c4:82:8d:cb:b2:82:2e:b9:0a:1b:1d:12:72:38:6e:
bd:8d:93:e1:c4:f6:c4:ec:03:19:7f:f4:51:87:43:cb:06:2f:
50:b4:27:6d:98:76:97:52:02:0d:a0:b1:f3:98:9d:f4:54:fc:
19:f2:30:9f:de:be:d0:39:eb:7d:2c:de:08:37:5a:a9:58:bc:
1a:18:02:e0:f8:21:3a:9a:c1:69:49:02:14:d8:bc:72:c3:05:
cc:b1:ee:b2:0d:fd:27:ee:b8:23:3b:8b:f6:98:5a:f5:07:d6:
b0:11:c4:53:59:8a:4a:9e:fa:c4:89:45:77:4a:cc:94:9f:07:
91:3d:32:88:11:6d:9b:f4:d6:77:15:07:9e:3c:a0:6f:7c:6d:
3b:f4:16:ba:52:a0:ba:5b:e3:ab:99:59:aa:42:05:18:98:fa:
71:36:43:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:19 2025 by rpki-client