Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/pJiwFvT-1fLgCFDmypA7XTej6pU.roa
File: pJiwFvT-1fLgCFDmypA7XTej6pU.roa (raw, json)
Hash identifier: AZuIz9oajUYV9KlPMGfdNq7/+Gx0qm+qNpdvszgEEeQ=
Subject key identifier: A4:98:B0:16:F4:FE:D5:F2:E0:08:50:E6:CA:90:3B:5D:37:A3:EA:95
Certificate issuer: /CN=680121b199b291de7763d8c1caa7b3cdc3561810
Certificate serial: 142285
Authority key identifier: 68:01:21:B1:99:B2:91:DE:77:63:D8:C1:CA:A7:B3:CD:C3:56:18:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAEhsZmykd53Y9jByqezzcNWGBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/pJiwFvT-1fLgCFDmypA7XTej6pU.roa
Signing time: Wed 16 Mar 2022 16:56:07 +0000
ROA not before: Wed 16 Mar 2022 16:56:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 185.128.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1319557 (0x142285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680121b199b291de7763d8c1caa7b3cdc3561810
Validity
Not Before: Mar 16 16:56:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a498b016f4fed5f2e00850e6ca903b5d37a3ea95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:f8:27:7a:75:bd:47:b7:74:46:7e:c9:75:
93:6a:e8:cb:d8:dc:7a:2b:2d:c8:84:bc:b8:53:4e:
cc:08:93:20:51:c5:9e:75:b3:92:76:4c:f0:78:f5:
ba:64:e4:ee:7c:9d:22:ec:a3:da:a6:d8:b1:5d:03:
fd:41:31:0f:dd:40:bb:8c:1f:3c:3f:72:7f:3a:3b:
00:de:8c:aa:26:90:d4:25:b4:d3:4d:80:ec:17:63:
7d:f8:97:16:06:53:f9:b7:dd:0a:69:f0:2f:d3:b0:
5a:d3:6b:ec:7d:49:4a:09:ec:7a:c4:9b:12:6d:1b:
35:3d:b4:0e:0c:71:7a:da:94:33:ad:c8:af:39:e2:
ff:94:19:84:e9:5d:59:ca:a0:2f:52:04:6c:c6:60:
bd:62:2a:33:24:23:a3:2d:f8:68:20:eb:dc:87:75:
4c:76:a6:87:cc:dd:07:a4:7a:07:3c:3f:24:15:09:
44:20:28:6e:0d:3c:b3:35:89:98:b6:32:ae:13:a6:
ab:d2:97:c8:ff:4c:81:fb:4d:f8:b6:73:45:37:93:
45:e0:b1:64:97:2b:d7:e1:88:8a:e5:0d:99:02:47:
b3:d2:27:41:8d:bc:03:50:8a:dd:fe:97:7a:da:5a:
6b:1d:de:35:51:3f:16:63:d9:b9:29:8a:30:85:b8:
2f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:98:B0:16:F4:FE:D5:F2:E0:08:50:E6:CA:90:3B:5D:37:A3:EA:95
X509v3 Authority Key Identifier:
keyid:68:01:21:B1:99:B2:91:DE:77:63:D8:C1:CA:A7:B3:CD:C3:56:18:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAEhsZmykd53Y9jByqezzcNWGBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/pJiwFvT-1fLgCFDmypA7XTej6pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/aAEhsZmykd53Y9jByqezzcNWGBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.226.0/24
Signature Algorithm: sha256WithRSAEncryption
86:0e:b8:32:dc:b5:f9:20:70:63:d4:67:f0:45:4c:86:ef:19:
f6:ca:9d:d5:32:e8:30:2b:c9:12:47:64:2a:46:5a:b1:d3:0d:
25:e5:fa:59:97:11:0c:73:5e:ae:38:88:63:65:89:92:bc:53:
b7:e0:7f:34:35:6a:d3:00:50:ed:48:0e:2d:e2:7d:0a:98:fb:
63:ce:86:31:ce:ad:2a:f4:e4:7a:f0:31:da:02:17:d9:93:58:
99:b7:f8:92:f1:c7:28:37:f5:fb:c7:34:a7:ee:5b:7e:06:d3:
b5:ca:02:22:d2:1b:5f:a5:fa:7c:93:4d:cd:7f:29:64:41:80:
21:69:1d:b9:73:c7:7d:a8:6f:7d:4e:71:99:c1:97:a4:2e:1a:
db:7f:dd:dd:2f:c5:6e:50:54:18:fd:2b:f2:c2:15:c2:70:a4:
0a:7d:bf:a1:6f:19:0f:4c:38:ea:ed:de:1d:27:d1:a3:bc:e3:
f5:a2:1e:4c:62:bb:61:68:7b:8b:09:ee:28:c6:a5:c7:2c:82:
6e:de:d6:1e:7b:f9:5f:fb:e0:69:49:06:51:1e:fd:45:59:1b:
18:8c:95:3e:73:1a:7d:60:26:75:89:10:29:0c:67:14:68:94:
72:27:39:f5:d5:39:4e:b2:09:41:84:cf:65:f2:e5:bd:6f:dc:
13:b0:c6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:41:11 2025 by rpki-client