Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/Ku1dA__rE_RlK4GBHcXaUSs5afE.roa
File: Ku1dA__rE_RlK4GBHcXaUSs5afE.roa (raw, json)
Hash identifier: ZqM3xPzDFteLBuB6AcR9oqx0qbO8H882izN9eOt+0wo=
Subject key identifier: 2A:ED:5D:03:FF:EB:13:F4:65:2B:81:81:1D:C5:DA:51:2B:39:69:F1
Certificate issuer: /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial: 018A459320DD9FA469F5896F9C29F15DBC12
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/Ku1dA__rE_RlK4GBHcXaUSs5afE.roa
Signing time: Wed 30 Aug 2023 08:33:04 +0000
ROA not before: Wed 30 Aug 2023 08:33:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210906
IP address blocks: 185.47.92.0/22 maxlen: 22
185.7.236.0/22 maxlen: 24
185.211.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:45:93:20:dd:9f:a4:69:f5:89:6f:9c:29:f1:5d:bc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
Validity
Not Before: Aug 30 08:33:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2aed5d03ffeb13f4652b81811dc5da512b3969f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:62:94:10:24:8b:3c:9f:7a:98:28:85:c7:d5:
98:aa:d9:fe:5e:3a:66:34:e7:6e:c3:ae:22:9c:74:
88:1f:a0:70:bb:24:50:e2:dc:19:89:c4:ed:29:fa:
c2:50:34:01:ac:0e:f9:33:48:59:e6:29:09:54:96:
a9:8e:0c:8a:ba:1a:72:75:47:9b:f6:11:8f:1f:ff:
95:8b:82:b6:b7:9d:20:e2:16:2a:6c:2f:66:1c:4d:
cc:65:dd:82:bc:ff:3a:08:89:88:f8:4d:e5:10:63:
43:71:93:62:77:e8:a1:77:72:6d:5b:06:da:b5:dc:
9f:b1:7e:69:23:77:c3:49:ca:ac:e8:dc:b0:f5:f8:
1c:6a:c3:ef:5e:a0:4d:0d:cd:9c:89:a5:d2:24:18:
04:db:1b:b0:55:de:20:b4:bb:89:6d:1b:95:b4:01:
48:29:02:44:5d:cc:90:29:7f:94:8a:4a:c3:96:b1:
2f:5d:02:47:fb:9a:a7:2b:1f:d8:f5:c3:a9:28:c7:
62:f4:91:30:ed:e7:33:e4:23:a3:3b:fa:13:65:b0:
89:14:95:53:66:de:2d:7c:9e:3b:59:92:b9:38:e0:
35:55:3e:fd:7a:4e:e5:d6:0e:49:ba:e6:b1:1c:4b:
cb:66:a3:db:04:cd:76:bd:52:a5:14:b5:df:24:f6:
f0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:ED:5D:03:FF:EB:13:F4:65:2B:81:81:1D:C5:DA:51:2B:39:69:F1
X509v3 Authority Key Identifier:
keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/Ku1dA__rE_RlK4GBHcXaUSs5afE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.236.0/22
185.47.92.0/22
185.211.96.0/22
Signature Algorithm: sha256WithRSAEncryption
73:33:28:9e:16:b9:4d:85:8c:5c:12:29:7b:cc:4f:c4:1a:d0:
3c:78:c8:7d:bc:3d:6b:ce:84:d2:1b:14:68:18:2d:92:bb:96:
ca:ff:16:66:3e:84:82:4b:42:b8:a7:9f:97:c6:26:b9:04:b5:
9e:66:0c:f8:4f:db:3c:1b:78:f7:bc:2f:ac:78:e9:5e:61:c5:
bc:6d:2f:cd:a8:82:ee:4c:0f:20:11:0b:2c:dd:b8:dd:c8:4a:
8e:ee:7f:46:38:74:e9:74:b0:58:de:f8:f5:fc:cf:6d:96:51:
3e:a3:d2:b6:4b:be:31:ca:07:16:df:2c:5f:96:1a:f0:25:49:
40:ca:9d:49:cd:5d:f2:7d:55:ae:59:0f:5b:30:b7:4c:a7:da:
d1:3f:d0:07:d7:73:f3:58:8d:4b:52:50:b6:68:6b:49:f7:4b:
06:7f:bf:f9:a3:4f:7f:44:63:80:6b:10:fc:49:15:8a:2c:d8:
fc:da:28:0b:09:8b:80:d1:56:76:fb:42:68:86:89:90:aa:92:
6f:dc:c6:d7:c3:f3:81:8d:de:97:ff:36:d5:52:7a:55:b6:a7:
d2:81:3c:66:1e:95:93:f1:3b:96:fc:9f:e5:cd:20:18:33:3d:
aa:3b:9a:e0:90:42:39:47:4c:ab:6e:0c:2f:85:2d:a1:8d:f7:
ca:5b:57:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:48:19 2025 by rpki-client