Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2663fb-f421-4055-961c-e1ce38cd644f/1/rJRF57TVF9uOUtnF1zsqChxYBxE.roa
File: rJRF57TVF9uOUtnF1zsqChxYBxE.roa (raw, json)
Hash identifier: icI3fP9DvMSSjEwhlX98Fss1xXQk8TDvtHa2im/eHzs=
Subject key identifier: AC:94:45:E7:B4:D5:17:DB:8E:52:D9:C5:D7:3B:2A:0A:1C:58:07:11
Certificate issuer: /CN=b2d3f596ec50232eb092690a3586e835cf51b02e
Certificate serial: 01932C203A8B5E45B6AD8824A6396943BFA1
Authority key identifier: B2:D3:F5:96:EC:50:23:2E:B0:92:69:0A:35:86:E8:35:CF:51:B0:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stP1luxQIy6wkmkKNYboNc9RsC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2663fb-f421-4055-961c-e1ce38cd644f/1/rJRF57TVF9uOUtnF1zsqChxYBxE.roa
Signing time: Thu 14 Nov 2024 19:22:09 +0000
ROA not before: Thu 14 Nov 2024 19:22:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34380
IP address blocks: 185.162.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2c:20:3a:8b:5e:45:b6:ad:88:24:a6:39:69:43:bf:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d3f596ec50232eb092690a3586e835cf51b02e
Validity
Not Before: Nov 14 19:22:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac9445e7b4d517db8e52d9c5d73b2a0a1c580711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5c:cc:e9:9f:8d:6f:ee:ed:62:38:bc:67:f3:
3f:42:1a:fb:01:de:0d:9b:a6:63:3a:08:33:8a:0d:
b7:00:cb:1c:72:10:ec:3d:35:3e:a4:58:8b:d3:c7:
93:08:84:51:f6:cc:08:93:19:08:70:05:fa:b6:72:
c3:c9:15:e9:21:48:4c:68:bc:35:56:5c:f1:ac:20:
7b:f5:39:a4:2f:74:d6:2f:79:0e:28:c0:17:3a:59:
c5:b8:b3:f6:48:da:4e:0a:5b:31:af:48:2f:04:ed:
18:ac:16:c6:c4:d6:0f:dc:18:35:de:8d:b4:79:f7:
42:cf:33:46:d1:1f:4b:1e:c2:b9:58:86:db:0c:4f:
fe:8c:d3:f0:9c:6e:1b:3a:3b:6e:32:44:ae:f7:95:
13:aa:b5:d3:9f:d9:68:8f:54:80:72:1c:79:f9:9c:
1a:3f:e3:5d:9c:64:a1:b3:2e:ee:8c:c9:a7:6f:90:
b8:f6:a5:10:8d:85:2c:de:53:4f:89:36:b9:9e:65:
1f:cf:c7:51:c2:09:b0:aa:f5:98:19:95:6e:63:77:
c6:e7:c5:85:ee:f5:32:ac:8c:bb:cb:2b:dc:cf:4e:
c5:43:2f:61:a2:08:84:3c:eb:85:c9:30:0c:e5:39:
7c:43:06:01:f3:e8:68:a5:7b:ca:dd:40:92:16:54:
ca:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:94:45:E7:B4:D5:17:DB:8E:52:D9:C5:D7:3B:2A:0A:1C:58:07:11
X509v3 Authority Key Identifier:
keyid:B2:D3:F5:96:EC:50:23:2E:B0:92:69:0A:35:86:E8:35:CF:51:B0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stP1luxQIy6wkmkKNYboNc9RsC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2663fb-f421-4055-961c-e1ce38cd644f/1/rJRF57TVF9uOUtnF1zsqChxYBxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2663fb-f421-4055-961c-e1ce38cd644f/1/stP1luxQIy6wkmkKNYboNc9RsC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.148.0/22
Signature Algorithm: sha256WithRSAEncryption
96:0b:d2:c4:55:98:56:6c:bd:a4:b4:b5:9e:34:5a:17:0f:d1:
f3:41:93:c4:84:a3:2a:5a:f9:79:3b:96:93:3b:be:2b:d7:1e:
27:87:35:bd:69:62:4e:6a:73:9f:91:a3:37:a9:d9:c3:4d:5b:
e1:ff:0e:f4:bb:4f:f4:32:6c:ac:44:2f:cc:5c:d4:a7:60:91:
9f:15:75:5d:fb:97:11:8c:46:93:c4:75:f4:ef:4f:4b:3f:cb:
d3:e8:95:43:91:b3:ba:be:e5:68:9b:35:62:71:0b:e7:0f:69:
ea:d9:66:cd:ad:20:be:2a:88:85:9e:53:aa:0a:61:38:a2:91:
be:4f:b4:a2:16:4a:e7:f1:2d:b1:76:9e:3f:70:2b:8c:92:f9:
59:68:26:50:ca:9f:e4:8b:71:6e:0d:2d:c0:4f:c0:56:d4:82:
f0:25:7c:1f:b7:35:ba:d1:a0:9f:f8:44:6c:b8:5c:75:10:8f:
21:a6:98:dc:0c:3f:28:f9:74:81:78:9a:8c:9e:cc:7c:26:76:
09:9b:d1:1d:dd:49:20:d4:dc:18:95:33:0a:2f:5c:29:31:ca:
16:60:83:c7:a5:ae:da:e3:be:91:68:d2:ae:18:09:e5:4c:71:
06:2d:0b:c4:c1:23:94:2b:c7:be:8c:e0:21:29:aa:23:39:07:
d6:b5:81:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:19 2025 by rpki-client