Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/965bf3-e86c-4078-8f92-0c9198be2669/1/kB_UV-VIpHZ3qpM2a7ANBAn2T-c.roa
File: kB_UV-VIpHZ3qpM2a7ANBAn2T-c.roa (raw, json)
Hash identifier: 6THrQ/JqPOobIIVbQKldITxRkipFImd01Sn9aQy1DGI=
Subject key identifier: 90:1F:D4:57:E5:48:A4:76:77:AA:93:36:6B:B0:0D:04:09:F6:4F:E7
Certificate issuer: /CN=b05e6a6417457576b9ac5a06944a9fe2ac46277d
Certificate serial: 04A5244A
Authority key identifier: B0:5E:6A:64:17:45:75:76:B9:AC:5A:06:94:4A:9F:E2:AC:46:27:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF5qZBdFdXa5rFoGlEqf4qxGJ30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/965bf3-e86c-4078-8f92-0c9198be2669/1/kB_UV-VIpHZ3qpM2a7ANBAn2T-c.roa
Signing time: Sat 01 Jan 2022 00:56:04 +0000
ROA not before: Sat 01 Jan 2022 00:56:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58212
IP address blocks: 185.94.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77931594 (0x4a5244a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05e6a6417457576b9ac5a06944a9fe2ac46277d
Validity
Not Before: Jan 1 00:56:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=901fd457e548a47677aa93366bb00d0409f64fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c3:57:db:01:e3:c5:41:2e:ba:d1:53:af:0e:
de:bc:75:26:c9:38:0e:f0:0e:2f:f9:9a:a8:cd:c8:
70:2b:27:ad:23:ac:bd:d8:d2:af:30:1a:1c:9d:0a:
18:99:50:b0:56:50:b8:1e:b8:cf:e0:5e:cd:5e:c0:
53:8d:6f:ec:08:3c:4e:80:ea:5c:8b:85:49:25:05:
64:76:8e:98:7e:97:df:a5:b5:55:a7:59:08:94:0e:
10:06:c4:31:d0:61:e2:1a:d8:8f:a2:7e:c4:06:8f:
7d:66:aa:10:e9:22:92:fb:c2:4f:07:fc:bf:61:05:
a6:49:07:bf:50:1b:c9:d6:c1:3c:6d:4b:f1:1f:3a:
04:68:eb:ee:17:3d:f0:49:18:58:ea:37:f5:8c:7e:
89:74:da:97:ed:24:62:4f:04:b2:d8:5c:72:80:ae:
99:ec:dd:85:98:c8:36:9d:53:f6:0c:a5:f0:4b:3e:
fd:59:6a:7f:b1:b5:97:a9:41:36:f0:86:17:c8:0c:
1d:a1:29:53:ce:a1:41:70:ac:99:21:76:5c:cf:b1:
87:f2:81:9d:13:9f:cc:61:15:03:b3:c9:ad:37:0d:
b8:44:09:5f:e7:ae:14:b1:fe:fb:d0:81:7a:5f:24:
56:a3:2e:5c:3d:91:90:4d:25:64:d7:b6:17:5f:5a:
b1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1F:D4:57:E5:48:A4:76:77:AA:93:36:6B:B0:0D:04:09:F6:4F:E7
X509v3 Authority Key Identifier:
keyid:B0:5E:6A:64:17:45:75:76:B9:AC:5A:06:94:4A:9F:E2:AC:46:27:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF5qZBdFdXa5rFoGlEqf4qxGJ30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/965bf3-e86c-4078-8f92-0c9198be2669/1/kB_UV-VIpHZ3qpM2a7ANBAn2T-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/965bf3-e86c-4078-8f92-0c9198be2669/1/sF5qZBdFdXa5rFoGlEqf4qxGJ30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.29.0/24
Signature Algorithm: sha256WithRSAEncryption
09:15:3c:09:72:6a:c8:c1:4d:d4:2f:79:30:70:14:10:cc:9f:
2d:99:8e:37:bf:57:6d:ea:d0:0e:23:9a:b9:0f:89:78:60:17:
97:02:5b:9f:55:98:48:14:43:6a:a3:02:cc:8b:68:8c:bf:9c:
10:17:82:7b:a1:8d:9a:4c:fb:bf:95:5e:9a:4f:43:dc:c9:4e:
da:cb:02:e9:37:31:32:78:ce:7e:55:57:70:e0:57:28:e5:e7:
f0:83:b4:c7:df:f3:0c:2f:8d:49:2e:38:60:86:b3:16:f1:d5:
bf:2b:78:fa:f3:e8:97:f2:fc:84:10:54:23:34:e4:61:82:61:
3d:19:78:27:a4:6c:4c:74:0b:39:81:d3:31:cf:b4:54:83:41:
94:66:cd:19:67:6a:5a:18:73:95:87:ad:78:d2:de:22:3a:7a:
5b:de:2f:de:7d:14:90:a9:48:63:ac:31:0d:04:5c:b4:88:7d:
06:9d:dd:15:33:67:6c:31:31:98:32:7c:83:d4:49:6c:08:b3:
3a:7a:4f:06:7e:23:8b:d0:70:85:e6:54:b8:13:b0:ba:89:8a:
77:43:50:c2:18:2a:45:7d:9d:79:79:b7:f9:dc:02:90:48:d8:
46:4e:1b:2e:47:b9:13:78:e0:62:8f:76:f3:62:d8:73:02:c7:
c0:4e:eb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:28:40 2025 by rpki-client