Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/19715a-631f-4149-89ca-f951642d61c8/1/oUuAUynL3sKNYvQFKNBtfHLKHk0.roa
File: oUuAUynL3sKNYvQFKNBtfHLKHk0.roa (raw, json)
Hash identifier: IfhyLucrpr+51bONDbfKGiTiSpfg67Rz3SnBam5VjXE=
Subject key identifier: A1:4B:80:53:29:CB:DE:C2:8D:62:F4:05:28:D0:6D:7C:72:CA:1E:4D
Certificate issuer: /CN=eeb9ba19b9eccc4aee0f81115af2439a7979f31b
Certificate serial: 013EE9
Authority key identifier: EE:B9:BA:19:B9:EC:CC:4A:EE:0F:81:11:5A:F2:43:9A:79:79:F3:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rm6GbnszEruD4ERWvJDmnl58xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/19715a-631f-4149-89ca-f951642d61c8/1/oUuAUynL3sKNYvQFKNBtfHLKHk0.roa
Signing time: Tue 25 Jan 2022 12:45:52 +0000
ROA not before: Tue 25 Jan 2022 12:45:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57878
IP address blocks: 185.207.212.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81641 (0x13ee9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb9ba19b9eccc4aee0f81115af2439a7979f31b
Validity
Not Before: Jan 25 12:45:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a14b805329cbdec28d62f40528d06d7c72ca1e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b7:da:61:ee:5c:6c:f6:c6:fc:51:a9:5e:32:
28:2f:3d:89:9b:cd:ad:b0:51:cd:5d:ed:28:b1:7b:
d2:e7:34:f0:1e:d4:8f:43:b7:62:18:e3:02:8c:43:
83:a0:60:07:fa:74:80:aa:61:f6:fd:4b:ee:3c:6c:
33:54:2b:ad:23:13:a4:2e:56:23:60:bf:f3:ab:83:
4f:88:b2:1c:e9:dc:9e:54:cb:41:c1:39:fe:a2:d7:
c0:13:8c:a1:63:9b:4e:86:b2:39:d1:ab:ea:45:c1:
84:7a:d7:d0:37:22:08:3f:c5:1b:c2:e8:7d:05:30:
8d:d4:3c:2c:25:5c:13:a1:3a:6c:ed:17:8f:30:bd:
8e:ad:ab:4d:b4:37:99:ea:89:e0:eb:c3:93:29:3d:
0e:dc:70:51:1f:ce:e4:57:e3:4d:7d:af:c9:d8:ab:
d7:c9:07:f4:81:6d:b8:75:c0:e0:de:46:d8:49:e1:
5b:79:3f:6e:91:62:20:c2:23:4d:70:de:de:b7:30:
4e:c6:e2:27:1a:fb:35:6a:9b:12:4e:c9:5d:b0:2d:
fb:ce:f6:b1:99:a7:62:6b:20:42:86:6a:2b:47:da:
8c:74:37:8f:48:9b:37:b2:7e:79:a5:1b:dd:c4:af:
b9:83:e6:bb:b0:c4:0f:06:78:1f:7a:a2:bf:c4:c5:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4B:80:53:29:CB:DE:C2:8D:62:F4:05:28:D0:6D:7C:72:CA:1E:4D
X509v3 Authority Key Identifier:
keyid:EE:B9:BA:19:B9:EC:CC:4A:EE:0F:81:11:5A:F2:43:9A:79:79:F3:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rm6GbnszEruD4ERWvJDmnl58xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/19715a-631f-4149-89ca-f951642d61c8/1/oUuAUynL3sKNYvQFKNBtfHLKHk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/19715a-631f-4149-89ca-f951642d61c8/1/7rm6GbnszEruD4ERWvJDmnl58xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.212.0/24
Signature Algorithm: sha256WithRSAEncryption
72:24:97:dc:c6:fa:69:37:84:d7:97:a7:bd:ce:59:3a:00:bf:
8f:d1:4b:92:40:9b:e4:40:c7:d5:57:3a:82:26:76:8f:e2:99:
5c:60:36:f5:c3:77:64:3f:b5:5c:42:c4:67:09:2b:fb:58:ed:
0e:20:1b:3f:17:07:3f:ed:33:c0:7d:e6:74:03:23:51:b6:09:
48:36:cc:79:c4:00:2b:91:ce:d8:e3:3c:25:f5:9d:16:1f:64:
3c:22:0e:8a:97:bd:95:5d:56:9f:fd:3e:e8:67:0c:a6:9b:a0:
3f:aa:1d:ba:16:7d:2e:d8:9a:95:6c:52:05:a8:ab:d1:79:42:
95:b7:f6:bc:b8:da:60:73:cc:12:82:fd:fd:6a:a6:02:4e:9d:
e7:7a:46:1b:40:18:3e:4d:4e:e1:09:27:fe:3a:7e:da:82:e8:
c7:1c:7e:3b:72:09:de:6e:69:44:96:4f:25:44:ea:1b:9b:e2:
c9:ea:ec:3f:45:81:c4:c2:5d:8b:b3:bc:3a:ce:9d:84:c7:d4:
24:64:62:9c:94:12:bb:13:42:aa:2c:2b:f4:b4:73:99:f8:93:
62:db:25:02:dd:c6:8e:65:a3:bd:d7:8c:de:c7:a5:d1:12:4b:
7f:0d:5d:2e:2c:2c:de:f1:08:9c:1e:63:b2:bd:b4:a4:20:f2:
89:72:e6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:03:34 2025 by rpki-client