Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c71dd4-27ce-4925-9f8a-08ffa7c5ae03/1/FdjJ4xoBk0Reen8osotM47t9OLA.roa
File: FdjJ4xoBk0Reen8osotM47t9OLA.roa (raw, json)
Hash identifier: +/z3bfDdDXDczqLktonln5tK4JUz+3IjeknDeZsqK2E=
Subject key identifier: 15:D8:C9:E3:1A:01:93:44:5E:7A:7F:28:B2:8B:4C:E3:BB:7D:38:B0
Certificate issuer: /CN=cdf60ebe1ab3ef190fd17b308ef08a93dbaf1cd4
Certificate serial: FC2367
Authority key identifier: CD:F6:0E:BE:1A:B3:EF:19:0F:D1:7B:30:8E:F0:8A:93:DB:AF:1C:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfYOvhqz7xkP0XswjvCKk9uvHNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c71dd4-27ce-4925-9f8a-08ffa7c5ae03/1/FdjJ4xoBk0Reen8osotM47t9OLA.roa
Signing time: Fri 11 Feb 2022 12:54:36 +0000
ROA not before: Fri 11 Feb 2022 12:54:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.188.9.0/24 maxlen: 24
185.188.8.0/24 maxlen: 24
185.188.10.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16524135 (0xfc2367)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf60ebe1ab3ef190fd17b308ef08a93dbaf1cd4
Validity
Not Before: Feb 11 12:54:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15d8c9e31a0193445e7a7f28b28b4ce3bb7d38b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a9:22:70:93:b2:88:00:87:7d:c9:f1:03:96:
de:69:ee:88:89:c2:69:a5:db:fa:56:26:e0:04:2b:
31:f1:49:37:1a:1d:85:01:84:24:f5:e1:1a:00:3a:
68:9e:c3:fb:37:23:20:74:09:be:47:bf:9c:81:55:
6e:96:30:fd:e2:a3:cb:0c:a7:7d:c5:08:25:f2:0f:
44:ea:92:b2:64:c0:2d:cd:d3:9a:37:0f:18:67:78:
e6:27:d5:80:2a:15:a5:8a:4e:11:c1:7e:02:f6:00:
c4:79:50:16:70:4c:74:99:81:34:c6:a5:09:9f:62:
56:b0:18:19:70:11:f9:e1:e9:07:64:98:57:77:87:
f4:fc:98:2f:d9:dc:42:94:c5:33:35:93:ee:0d:00:
c5:17:c5:c9:8e:96:db:61:19:e9:43:11:b4:ae:67:
95:ff:a7:b9:20:ed:a6:5d:4e:42:40:f5:cb:4a:83:
0c:66:c5:1c:55:e1:49:ac:dc:d0:c6:53:35:8f:ea:
77:7f:00:0a:ca:5b:ae:3f:a5:19:9d:5d:e6:ee:e8:
24:47:b6:b8:ab:80:6c:af:e4:56:8f:78:5d:e8:74:
8b:23:7b:06:1b:04:db:8e:2a:74:7e:f6:de:e2:7d:
77:52:4b:2f:5b:ac:4a:12:e1:0d:b4:46:a0:ad:c8:
43:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D8:C9:E3:1A:01:93:44:5E:7A:7F:28:B2:8B:4C:E3:BB:7D:38:B0
X509v3 Authority Key Identifier:
keyid:CD:F6:0E:BE:1A:B3:EF:19:0F:D1:7B:30:8E:F0:8A:93:DB:AF:1C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfYOvhqz7xkP0XswjvCKk9uvHNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c71dd4-27ce-4925-9f8a-08ffa7c5ae03/1/FdjJ4xoBk0Reen8osotM47t9OLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c71dd4-27ce-4925-9f8a-08ffa7c5ae03/1/zfYOvhqz7xkP0XswjvCKk9uvHNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.8.0/22
Signature Algorithm: sha256WithRSAEncryption
37:e1:61:e2:fd:d6:71:e3:bb:a0:14:44:76:8c:26:3b:ad:8d:
55:d6:96:d5:5f:6c:b8:4e:f3:6c:cf:0c:12:f8:d2:79:19:78:
9b:e7:12:f4:5e:ab:c3:c6:42:73:ce:b8:4a:a5:95:49:d6:eb:
df:f3:a2:15:8d:f6:e9:96:a0:40:f4:0f:5f:c9:ac:eb:04:dd:
46:33:7c:87:11:51:02:4d:90:3b:45:53:96:a3:1c:06:3f:3d:
45:0e:22:03:d8:78:3f:2e:13:ca:b4:ba:7a:19:6f:b5:85:82:
4e:95:8a:c2:2b:6d:96:7c:fc:33:54:87:ec:e0:5a:06:47:92:
1c:c6:7b:07:65:63:fc:39:c4:c3:25:5e:5e:93:03:2a:0e:4f:
e8:8c:7b:ef:ea:1f:9c:27:6d:dc:42:15:8b:a6:4a:27:37:3c:
e6:aa:ba:31:18:e6:2b:59:4b:4b:f5:ec:ff:ac:49:51:ec:b8:
a9:8c:76:d2:83:86:03:a1:82:f1:d2:ab:9e:ff:d0:5a:1a:f0:
92:a2:00:80:a1:a2:75:dc:d9:a4:63:2a:a2:b1:3e:dd:b7:8d:
64:c5:3c:d2:02:c0:99:2f:5a:68:b9:49:32:6d:b9:99:73:05:
b3:ff:3f:3a:0e:2a:41:31:54:cb:4d:6d:75:19:52:0d:8e:a9:
e2:0c:b6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:15 2025 by rpki-client