Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7381f5-1f6a-4c58-8257-3db2fadf79a2/1/2BwlPJ-uQXt7JQjuKbJM_axILo0.roa
File: 2BwlPJ-uQXt7JQjuKbJM_axILo0.roa (raw, json)
Hash identifier: 9+J7bmWYU5FfdcKSKjp55wnCg+ipaIXBj6Kq27HUDiE=
Subject key identifier: D8:1C:25:3C:9F:AE:41:7B:7B:25:08:EE:29:B2:4C:FD:AC:48:2E:8D
Certificate issuer: /CN=2438ddc494485192dc1791e5da4a9590234ede9c
Certificate serial: 8D6CF7
Authority key identifier: 24:38:DD:C4:94:48:51:92:DC:17:91:E5:DA:4A:95:90:23:4E:DE:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDjdxJRIUZLcF5Hl2kqVkCNO3pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7381f5-1f6a-4c58-8257-3db2fadf79a2/1/2BwlPJ-uQXt7JQjuKbJM_axILo0.roa
Signing time: Sat 01 Jan 2022 01:03:27 +0000
ROA not before: Sat 01 Jan 2022 01:03:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34356
IP address blocks: 185.33.112.0/24 maxlen: 24
185.33.113.0/24 maxlen: 24
185.33.114.0/24 maxlen: 24
185.33.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9268471 (0x8d6cf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2438ddc494485192dc1791e5da4a9590234ede9c
Validity
Not Before: Jan 1 01:03:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d81c253c9fae417b7b2508ee29b24cfdac482e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:b4:df:7f:31:8c:ef:b7:0a:24:06:7f:c0:
19:bc:22:65:fd:d0:ed:02:b1:4a:c6:2b:ca:50:70:
0e:d1:c0:7d:6b:69:9d:81:a7:b0:40:7c:8f:cb:67:
ee:eb:bd:08:bb:d4:4e:5d:7e:bf:f4:52:08:9e:25:
5a:c0:6d:53:a2:19:66:49:f6:b7:48:80:06:69:22:
a8:c4:2d:fe:a7:9a:79:9f:82:0d:d7:78:c0:f5:63:
52:5a:3d:0b:01:4d:9a:7f:10:bd:b3:1b:93:4a:69:
cc:6a:21:4e:d5:38:4c:20:6a:a0:ec:a6:54:93:c9:
3d:ef:99:ab:83:91:89:bb:f8:23:79:8d:50:20:9a:
56:21:21:eb:d7:bc:e7:76:88:82:5d:3a:ac:af:5d:
e0:3f:87:9d:a4:48:4b:a8:2e:fe:49:84:78:cb:25:
5a:f6:e0:f1:8a:0c:90:7b:00:bc:bb:de:86:e8:8c:
1e:2d:e1:1b:e7:5b:ce:17:c3:2b:cf:e6:79:50:47:
2f:0e:52:1d:7c:4d:37:21:04:27:9e:22:e3:aa:d1:
94:73:9d:be:22:77:f3:16:00:e2:2d:bf:e1:3d:d9:
ef:6e:58:77:94:20:b6:c6:ad:ab:d9:0d:85:10:8b:
ed:e0:aa:01:52:44:df:9e:40:98:ec:6c:0e:58:a1:
8b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1C:25:3C:9F:AE:41:7B:7B:25:08:EE:29:B2:4C:FD:AC:48:2E:8D
X509v3 Authority Key Identifier:
keyid:24:38:DD:C4:94:48:51:92:DC:17:91:E5:DA:4A:95:90:23:4E:DE:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDjdxJRIUZLcF5Hl2kqVkCNO3pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7381f5-1f6a-4c58-8257-3db2fadf79a2/1/2BwlPJ-uQXt7JQjuKbJM_axILo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7381f5-1f6a-4c58-8257-3db2fadf79a2/1/JDjdxJRIUZLcF5Hl2kqVkCNO3pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.112.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:1b:10:a3:ba:39:a2:96:fd:9a:52:5a:0c:0e:07:9b:e2:c7:
91:e8:f4:49:01:17:79:8a:78:26:40:ac:da:40:2c:3a:c2:1a:
b5:74:07:17:e2:62:4e:be:21:3e:b0:d3:67:20:99:1b:25:43:
1c:85:19:b9:8a:98:7c:14:8c:2f:68:85:d6:80:4d:5e:63:80:
a6:4c:81:cd:56:aa:d5:c2:98:13:ad:bb:0f:82:8d:5f:05:0e:
17:92:3c:ea:c0:8f:8d:94:ec:ad:de:f0:40:14:b7:1f:41:6d:
c0:91:22:8d:82:b6:cb:e1:46:8c:8c:0e:21:cb:4c:63:88:33:
63:4e:13:00:8a:ea:5f:b3:7e:96:6c:bc:20:6f:bc:60:87:80:
b3:19:65:66:87:42:88:e3:c0:37:07:73:04:24:c9:71:f9:65:
e3:4b:1d:4a:9f:dd:aa:b3:a3:db:2e:d9:aa:17:c5:d7:27:c1:
39:67:c8:42:b5:79:5c:04:7d:8a:df:45:56:3c:c7:0b:bb:c7:
a9:e3:dc:0f:71:d7:77:3d:ee:ea:90:94:b1:0d:38:47:6e:a7:
fd:6e:0e:d2:2f:e1:8f:cf:34:09:16:8c:0e:91:5e:5d:d7:7e:
87:7c:5d:f0:16:f6:40:88:d8:66:d2:95:1e:a9:f4:a3:e0:c8:
10:38:df:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:32 2025 by rpki-client