Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/212b85-f9a9-4319-ae99-e5298dd21dd8/1/5DGAwKhEBwjczlUmcxjZb5yGlzY.roa
File: 5DGAwKhEBwjczlUmcxjZb5yGlzY.roa (raw, json)
Hash identifier: PwjuI1X9vbdXHsHkoAjzti9lkwsinOvQp+ytXzIu4j4=
Subject key identifier: E4:31:80:C0:A8:44:07:08:DC:CE:55:26:73:18:D9:6F:9C:86:97:36
Certificate issuer: /CN=3399d963acba4e87705d114a0835db4e4f59007c
Certificate serial: 01839B32E906D8A30E80D9BA1D139CA0E149
Authority key identifier: 33:99:D9:63:AC:BA:4E:87:70:5D:11:4A:08:35:DB:4E:4F:59:00:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5nZY6y6TodwXRFKCDXbTk9ZAHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/212b85-f9a9-4319-ae99-e5298dd21dd8/1/5DGAwKhEBwjczlUmcxjZb5yGlzY.roa
Signing time: Mon 03 Oct 2022 00:15:48 +0000
ROA not before: Mon 03 Oct 2022 00:15:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209529
IP address blocks: 185.228.220.0/22 maxlen: 22
185.248.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9b:32:e9:06:d8:a3:0e:80:d9:ba:1d:13:9c:a0:e1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3399d963acba4e87705d114a0835db4e4f59007c
Validity
Not Before: Oct 3 00:15:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e43180c0a8440708dcce55267318d96f9c869736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:90:8a:53:65:f1:4a:f1:f5:cf:f1:2b:21:d7:
be:62:50:ef:7a:9b:ab:08:30:ed:0b:52:ed:91:3b:
e5:e2:a2:ac:a8:6a:46:49:bd:c0:b7:48:f6:48:83:
c1:26:93:00:0a:63:a6:e7:0d:7c:b6:d4:9a:50:59:
18:9d:c0:d2:e9:16:c9:07:02:c7:6c:79:d1:a8:3b:
7b:4b:f9:f3:98:1b:77:36:a2:06:66:1d:8a:a0:7f:
db:bf:11:15:64:ed:1d:f6:44:80:ba:12:18:df:38:
59:8e:9c:df:3a:35:3e:fa:57:61:67:d0:fc:e0:fd:
2b:93:a2:90:c1:4c:9b:22:78:86:1c:f6:98:14:07:
a6:b6:aa:3b:be:77:62:b2:4e:e7:dd:bf:e9:3a:9b:
72:ee:78:13:36:08:3d:1d:aa:4b:9d:aa:48:72:91:
cf:06:aa:c5:09:8e:75:fd:11:03:93:50:58:57:52:
56:5a:fc:5c:23:4c:a0:c6:25:64:f3:43:f5:50:c2:
d4:f4:ad:06:3e:ae:66:f6:86:3f:cb:73:23:cd:6f:
d9:08:08:c7:40:1f:7e:5a:23:0f:47:8e:c0:3a:9c:
e0:6d:03:b2:1c:ea:f6:bd:fd:1e:59:16:2a:ac:83:
c4:92:d5:ea:8c:1c:cd:dc:35:e7:c8:95:34:99:78:
10:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:31:80:C0:A8:44:07:08:DC:CE:55:26:73:18:D9:6F:9C:86:97:36
X509v3 Authority Key Identifier:
keyid:33:99:D9:63:AC:BA:4E:87:70:5D:11:4A:08:35:DB:4E:4F:59:00:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5nZY6y6TodwXRFKCDXbTk9ZAHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/212b85-f9a9-4319-ae99-e5298dd21dd8/1/5DGAwKhEBwjczlUmcxjZb5yGlzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/212b85-f9a9-4319-ae99-e5298dd21dd8/1/M5nZY6y6TodwXRFKCDXbTk9ZAHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.220.0/22
185.248.72.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:c7:7b:14:e0:88:80:90:95:56:4a:69:f3:4e:44:bd:12:0a:
f4:fd:33:fd:a8:03:4c:7b:eb:26:a6:8f:95:7d:35:3c:9b:83:
79:ba:d1:79:30:6f:0d:3f:65:10:5f:70:4a:9b:41:52:c0:1a:
ff:66:8f:9d:2c:f7:63:6a:9e:6d:a5:7d:5c:c7:c7:0c:9a:31:
d3:c6:d2:98:f7:9a:b4:68:84:82:f4:ad:3f:b7:5b:1a:41:24:
22:b6:04:24:4e:bf:d4:b3:72:97:9d:84:e5:e5:93:05:3e:11:
95:4d:5c:32:de:89:67:28:fb:26:70:b1:55:de:2f:5e:c8:2a:
73:39:5f:a8:25:ad:b0:ba:2b:b9:e7:78:4b:0e:81:30:2e:56:
45:49:24:2c:1c:d0:07:a3:8e:e0:36:57:88:3a:7b:df:af:fa:
f1:5a:92:52:c0:af:da:8d:bc:dc:0b:84:1d:be:37:16:05:61:
ba:a5:dd:c6:9e:18:8c:2d:a9:3b:49:be:a3:88:9c:56:4c:6c:
9c:2e:51:74:c7:7f:68:0e:15:0c:c6:5b:39:d8:36:60:b4:80:
65:8d:af:a3:84:d0:dc:93:99:d8:37:d5:6d:ca:c8:77:64:88:
4a:03:33:2b:f2:59:1e:7b:12:12:00:41:e7:66:f0:8c:a8:0b:
2d:60:00:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:41 2023 by rpki-client on console.sobornost.net