Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/uOhV0mPaZP_0zBX6C2OPhC7ox38.roa
File: uOhV0mPaZP_0zBX6C2OPhC7ox38.roa (raw, json)
Hash identifier: 8Cg/ec7j4C8tudfiYalEsEqdt1o+UqKVcHRmg+yoj3E=
Subject key identifier: B8:E8:55:D2:63:DA:64:FF:F4:CC:15:FA:0B:63:8F:84:2E:E8:C7:7F
Certificate issuer: /CN=680121b199b291de7763d8c1caa7b3cdc3561810
Certificate serial: 01864D7667AF4A55CEB44F826D37F8D1431E
Authority key identifier: 68:01:21:B1:99:B2:91:DE:77:63:D8:C1:CA:A7:B3:CD:C3:56:18:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAEhsZmykd53Y9jByqezzcNWGBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/uOhV0mPaZP_0zBX6C2OPhC7ox38.roa
Signing time: Tue 14 Feb 2023 01:07:30 +0000
ROA not before: Tue 14 Feb 2023 01:07:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206446
IP address blocks: 185.128.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4d:76:67:af:4a:55:ce:b4:4f:82:6d:37:f8:d1:43:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680121b199b291de7763d8c1caa7b3cdc3561810
Validity
Not Before: Feb 14 01:07:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8e855d263da64fff4cc15fa0b638f842ee8c77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:57:77:09:5b:43:01:08:6e:10:26:b0:5e:
6f:db:ba:91:90:35:a1:4f:2b:d4:b0:19:51:dd:52:
94:59:73:eb:09:37:15:bb:22:d5:b6:44:8c:a9:99:
14:f0:be:58:fa:76:9d:6c:64:af:15:f9:af:f3:ab:
fc:48:69:44:cc:9d:45:99:e7:b1:ce:e5:01:e8:25:
e4:f1:28:04:e7:77:79:c3:05:13:1b:f9:49:e4:d2:
af:ac:f4:ff:74:0d:a2:32:84:7b:17:93:ac:8e:e9:
6e:94:3c:15:2c:94:4c:2b:f5:2c:3b:23:10:5b:9a:
54:15:6e:0b:99:c5:ef:bd:6c:81:80:78:3e:18:0c:
e0:f0:81:52:48:4f:59:e3:bd:ce:14:32:70:37:70:
da:e0:2f:b5:6c:5d:68:18:80:8a:d4:c0:2d:df:60:
1f:28:fb:f0:e7:c9:7d:1f:32:84:27:b1:33:2c:7c:
b6:22:91:48:c2:f0:92:fd:55:45:f2:45:5c:f0:af:
84:21:cd:59:03:95:78:5c:ba:dc:0f:e1:27:90:37:
2e:cb:38:8d:1e:a3:4b:c5:a6:cf:a5:6e:ff:46:46:
b5:0a:e7:8e:b6:14:e1:ca:a7:c2:04:06:6e:3f:ce:
9f:4c:36:50:15:f0:f8:fe:58:5c:48:8a:58:5a:c4:
66:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E8:55:D2:63:DA:64:FF:F4:CC:15:FA:0B:63:8F:84:2E:E8:C7:7F
X509v3 Authority Key Identifier:
keyid:68:01:21:B1:99:B2:91:DE:77:63:D8:C1:CA:A7:B3:CD:C3:56:18:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAEhsZmykd53Y9jByqezzcNWGBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/uOhV0mPaZP_0zBX6C2OPhC7ox38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/aAEhsZmykd53Y9jByqezzcNWGBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.226.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f5:b8:0e:60:3b:2d:86:73:f3:b8:30:6c:da:21:df:81:ea:
19:8d:ea:2c:e2:5b:5b:db:94:93:f9:71:13:db:b2:f1:e9:b0:
28:e5:c6:a3:f0:87:c4:6f:57:6b:a7:fe:f0:4a:f8:4c:94:3f:
7c:7b:93:0c:06:ed:14:41:7d:ac:83:ac:07:a3:c7:77:31:47:
9c:c7:e6:f7:a7:7f:65:47:7c:a8:8d:fb:65:fe:61:4a:0e:ed:
ae:13:f1:e2:a0:0e:83:dd:8e:46:32:29:24:5d:ec:e9:68:e1:
9f:4f:30:ae:4f:b8:ec:4d:1c:f5:8e:06:bc:ef:67:00:73:47:
5c:ae:b4:d7:f5:09:49:a1:04:0f:a4:dc:17:ff:c1:53:f0:d0:
71:b2:09:7e:40:33:a4:be:17:15:89:99:c4:b5:29:4e:6d:53:
d9:11:9e:3b:98:17:76:04:c4:68:79:45:70:82:f4:8d:f9:db:
1d:d6:c0:d8:7c:9c:df:42:e1:09:36:5f:63:34:8b:5c:b2:cd:
05:1f:43:29:d3:0a:9c:d1:fb:d4:0a:b7:4d:ee:bb:a9:b4:0a:
52:10:1d:a3:85:af:19:c5:87:94:bd:ef:a6:2e:83:38:87:1c:
11:53:62:62:89:2e:f5:5f:88:48:0f:ef:fa:90:d3:ed:13:d0:
f8:f0:4d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:46:28 2025 by rpki-client