Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c71dd4-27ce-4925-9f8a-08ffa7c5ae03/1/V4VtgQc8TWC2CMUMJn_EkR9WgkE.roa
File: V4VtgQc8TWC2CMUMJn_EkR9WgkE.roa (raw, json)
Hash identifier: DZzkwDCmqabnnetzzIdwQc9qC3I+CUl3RSzWpBZwvFk=
Subject key identifier: 57:85:6D:81:07:3C:4D:60:B6:08:C5:0C:26:7F:C4:91:1F:56:82:41
Certificate issuer: /CN=cdf60ebe1ab3ef190fd17b308ef08a93dbaf1cd4
Certificate serial: 99551E
Authority key identifier: CD:F6:0E:BE:1A:B3:EF:19:0F:D1:7B:30:8E:F0:8A:93:DB:AF:1C:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfYOvhqz7xkP0XswjvCKk9uvHNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c71dd4-27ce-4925-9f8a-08ffa7c5ae03/1/V4VtgQc8TWC2CMUMJn_EkR9WgkE.roa
Signing time: Sat 01 Jan 2022 02:56:01 +0000
ROA not before: Sat 01 Jan 2022 02:56:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.188.10.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10048798 (0x99551e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf60ebe1ab3ef190fd17b308ef08a93dbaf1cd4
Validity
Not Before: Jan 1 02:56:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57856d81073c4d60b608c50c267fc4911f568241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:ac:c1:3b:0d:58:f3:58:dc:79:8a:c5:fb:
09:e3:91:ff:84:f6:60:59:88:9d:dc:78:94:dc:6a:
9e:25:e4:a1:23:58:f8:12:aa:39:39:f0:f3:a8:f8:
fc:ea:ed:23:47:1d:6b:7a:fc:93:4a:6b:be:45:15:
c4:6e:3c:5e:09:18:27:e8:31:33:8f:78:28:e7:52:
cb:8b:6a:1c:fa:1a:42:ef:eb:6c:6d:96:04:5e:49:
05:e4:e3:97:4e:bf:2c:9f:0e:8e:58:ea:9e:73:a2:
91:3e:11:98:66:ec:de:24:da:88:b4:01:56:73:0f:
96:bf:9c:cb:5a:7b:d0:82:0f:fa:a5:6f:59:8c:58:
bf:bd:4a:f7:0e:84:a7:b9:19:7e:58:99:58:e5:44:
0a:7c:c3:0d:ee:e4:da:b4:56:66:0e:a2:d8:3e:1b:
d5:ee:0a:3e:b4:3a:4b:be:53:6e:13:04:6e:92:5a:
6e:95:04:06:ab:a2:b3:8e:92:7e:68:30:24:0c:24:
53:18:58:5c:49:61:18:b6:7a:0a:a6:ac:2a:95:0b:
12:a8:69:a3:a1:7b:50:ac:3b:18:ce:c5:6c:3c:14:
77:dd:bc:0f:cc:bd:93:96:fc:e1:9f:db:5d:8d:80:
bd:67:72:17:b8:3f:b0:c8:5f:c1:c6:18:26:13:87:
99:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:85:6D:81:07:3C:4D:60:B6:08:C5:0C:26:7F:C4:91:1F:56:82:41
X509v3 Authority Key Identifier:
keyid:CD:F6:0E:BE:1A:B3:EF:19:0F:D1:7B:30:8E:F0:8A:93:DB:AF:1C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfYOvhqz7xkP0XswjvCKk9uvHNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c71dd4-27ce-4925-9f8a-08ffa7c5ae03/1/V4VtgQc8TWC2CMUMJn_EkR9WgkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c71dd4-27ce-4925-9f8a-08ffa7c5ae03/1/zfYOvhqz7xkP0XswjvCKk9uvHNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.10.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:ea:12:44:2c:8f:fb:2a:01:48:e0:54:fd:fd:95:5d:c2:aa:
b2:97:86:c5:97:22:e6:84:5f:57:b5:74:89:9c:7a:bd:7d:51:
b4:c5:35:be:b3:25:c3:2d:18:bd:07:88:53:ff:93:16:4b:a9:
78:27:a0:ad:e3:73:9a:9c:62:36:cb:2f:d0:42:50:8e:9d:8f:
50:a2:4b:df:66:89:aa:cd:d4:b6:2f:af:33:b5:b9:c6:3e:46:
20:da:4b:68:4f:b1:5f:2f:b3:19:0b:75:78:c3:05:30:b8:a4:
16:b0:c6:dc:0d:e5:4f:8a:4c:70:05:5f:e7:65:50:7e:28:0d:
c2:a9:f8:63:22:eb:38:75:51:aa:a8:bb:ad:6b:40:19:4c:87:
ee:10:dd:e4:7a:a4:b1:d2:a4:fa:72:ee:7d:c8:18:be:a4:a2:
2c:81:d7:25:89:c0:58:4b:58:cd:03:60:b1:82:67:51:ec:c5:
cb:89:1f:70:b1:f0:65:b6:98:59:16:e9:61:85:c0:83:fc:78:
e7:9c:27:d1:63:75:c0:25:9a:52:5c:c3:2c:23:f0:5c:b4:4d:
40:f4:20:de:9a:7e:ba:07:41:6a:8e:e8:9f:9b:be:d8:ef:21:
a1:88:46:41:11:2b:ab:3e:c8:06:dc:a5:c3:28:ca:fd:6e:d3:
80:97:2f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:01 2025 by rpki-client