Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/7ihzWhkEXIQhtZ1hq17V_bMH1pA.roa
File: 7ihzWhkEXIQhtZ1hq17V_bMH1pA.roa (raw, json)
Hash identifier: ryPgxC5Osd47cQl9uovFvgS3PeLQ/Sj7d3K4tsy//C8=
Subject key identifier: EE:28:73:5A:19:04:5C:84:21:B5:9D:61:AB:5E:D5:FD:B3:07:D6:90
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 05D55AB4
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/7ihzWhkEXIQhtZ1hq17V_bMH1pA.roa
Signing time: Wed 23 Feb 2022 10:09:57 +0000
ROA not before: Wed 23 Feb 2022 10:09:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44592
IP address blocks: 37.228.149.0/24 maxlen: 24
193.56.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97868468 (0x5d55ab4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Feb 23 10:09:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee28735a19045c8421b59d61ab5ed5fdb307d690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1b:72:c4:5d:99:2f:64:b4:d3:4d:01:7f:5d:
8e:bb:9e:49:37:9c:23:09:ae:4d:6f:44:70:90:c1:
63:6e:07:12:a8:02:db:e9:08:34:b4:35:66:c2:66:
83:0a:04:0c:a3:c6:85:8f:70:79:ba:a9:12:9b:3e:
f6:b8:09:e2:d6:9b:7e:c9:c9:48:07:c2:c2:2a:de:
fa:ad:83:8f:ca:7c:5b:40:c5:35:62:9e:f3:d2:39:
98:53:b5:37:eb:35:62:9c:1e:e8:a8:4d:9f:80:64:
8f:43:b0:06:e2:da:0b:6a:70:dc:84:92:cf:cb:1f:
83:a7:26:2a:3f:00:1f:a0:a3:13:75:62:1b:73:a2:
c6:53:2b:90:d1:c3:d4:c3:db:0f:8d:d2:ad:2a:35:
30:50:43:71:d7:a1:02:04:67:a2:cc:e8:18:62:3b:
dd:25:83:4a:02:9e:38:aa:8e:53:cc:13:ad:41:9d:
a3:2a:bf:e1:62:c2:06:d0:ee:f0:af:87:b6:ad:e2:
72:d5:50:51:75:cb:79:36:5c:08:97:c6:ea:40:72:
b5:ac:7e:3e:56:f4:4d:f5:71:8a:3d:b8:a6:4b:66:
d0:ed:49:26:d8:62:56:de:c8:55:96:34:43:d5:d1:
41:b0:68:bf:a1:a3:c7:e3:27:cd:93:17:27:d9:e4:
c6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:28:73:5A:19:04:5C:84:21:B5:9D:61:AB:5E:D5:FD:B3:07:D6:90
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/7ihzWhkEXIQhtZ1hq17V_bMH1pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.149.0/24
193.56.129.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:f3:35:06:92:8a:bc:83:ea:e1:65:16:d9:9c:70:5f:44:34:
54:c5:11:27:fc:84:e9:88:da:9c:56:8c:bd:65:46:07:c2:4f:
e0:c3:74:3b:dd:30:18:e5:ea:77:f6:be:01:3d:68:92:20:65:
c3:39:00:2c:65:0b:6f:12:44:85:8a:d9:91:9f:73:91:0a:c7:
94:f1:d9:6f:d7:5c:67:3c:44:4f:f5:cf:2d:23:df:b8:6b:15:
df:9a:05:21:23:0a:0f:f5:90:a0:75:69:7e:73:e8:f9:85:d8:
a7:e0:19:37:b9:97:88:0b:29:c1:cb:82:e9:ac:09:d7:7c:6f:
56:01:71:9a:15:7d:90:a6:77:77:19:89:90:71:c6:eb:7a:96:
8b:7a:89:59:b7:68:02:58:76:da:05:fa:37:7b:3c:27:94:0d:
84:1a:04:f5:24:84:e5:10:88:e8:c6:72:7c:fe:66:cb:0e:99:
f0:49:7b:35:f3:5d:b5:87:fa:c2:99:53:69:20:81:74:9f:7b:
29:6f:f1:a3:81:18:3f:11:85:a7:cb:ba:87:f5:f8:32:7e:c3:
f2:05:e9:fe:ee:73:30:13:85:ec:3a:4e:54:11:fb:de:87:0e:
73:d7:17:20:f6:db:ae:2b:54:03:27:d3:b1:e5:47:94:7c:f7:
ec:7f:7c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:05:11 2025 by rpki-client