Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/d50dRBvgFONJ-3omrLG3ehx7IiU.roa
File: d50dRBvgFONJ-3omrLG3ehx7IiU.roa (raw, json)
Hash identifier: g3oTlCWv/N664PLd9RaxKHNy416AqReIchzhTzU+ofc=
Subject key identifier: 77:9D:1D:44:1B:E0:14:E3:49:FB:7A:26:AC:B1:B7:7A:1C:7B:22:25
Certificate issuer: /CN=5324defbaade93e998e13a942029dd593b8b2ea3
Certificate serial: 0182A3D8885AE421A573256F4266177AE16F
Authority key identifier: 53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/d50dRBvgFONJ-3omrLG3ehx7IiU.roa
Signing time: Mon 15 Aug 2022 23:30:53 +0000
ROA not before: Mon 15 Aug 2022 23:30:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 185.118.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a3:d8:88:5a:e4:21:a5:73:25:6f:42:66:17:7a:e1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5324defbaade93e998e13a942029dd593b8b2ea3
Validity
Not Before: Aug 15 23:30:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=779d1d441be014e349fb7a26acb1b77a1c7b2225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d9:fe:d3:e5:75:2c:5f:63:16:a3:f4:af:a0:
77:63:cb:7a:6c:cf:33:d5:83:3e:97:90:4f:ad:5b:
f4:b6:94:42:1e:d3:db:31:21:85:a6:59:8d:d7:90:
25:6d:3b:31:33:83:9f:e7:7b:3f:2d:4f:ff:20:ce:
2c:ed:a5:74:b6:42:c5:e7:87:8c:25:fb:50:3b:40:
4f:56:32:35:4a:f3:b6:01:52:cf:dc:ec:c9:0c:c5:
0a:95:59:4c:80:5e:21:49:84:ca:c8:35:6c:45:4a:
83:a4:6c:8b:4c:12:cc:ca:76:8d:06:a6:80:b9:49:
d1:c3:ea:b9:15:8f:65:1c:45:f7:38:80:53:ec:3f:
16:f2:04:0a:a8:d8:99:13:68:86:f9:b2:f0:b9:2a:
e6:5c:da:6b:82:45:65:c2:1f:20:1d:60:02:1f:a6:
16:fe:e2:f9:88:31:89:f4:fc:12:5d:99:98:55:3e:
ec:c7:59:f2:19:85:38:fb:e3:81:64:84:5c:74:da:
db:fb:44:17:50:a9:85:27:96:83:f9:5a:49:f2:8d:
81:2b:89:ad:39:19:47:65:de:0b:54:8b:99:f0:17:
a9:ad:74:5a:59:2e:4e:ad:71:f5:e9:49:a8:52:ac:
d5:64:6f:f3:d5:53:dc:a2:a8:0f:bf:05:77:89:e8:
da:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9D:1D:44:1B:E0:14:E3:49:FB:7A:26:AC:B1:B7:7A:1C:7B:22:25
X509v3 Authority Key Identifier:
keyid:53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/d50dRBvgFONJ-3omrLG3ehx7IiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.141.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:30:62:27:e4:89:0c:da:82:bd:a4:8c:06:19:fd:20:b4:80:
80:fe:39:4f:ee:80:d3:85:be:49:93:09:56:1e:cb:91:e7:13:
ab:db:03:5f:6e:88:e3:84:ce:7e:a6:5f:1c:f0:25:47:ea:73:
a2:e8:7e:79:e3:03:cc:e3:6b:75:b0:c9:6c:45:3e:ed:50:35:
9e:8c:2f:b3:a8:ad:cb:20:ad:81:dc:d4:75:cb:60:48:85:c1:
10:1b:6a:87:9c:6d:44:59:ea:4a:28:41:a6:68:6a:73:40:87:
2d:40:85:fc:7d:72:a3:cc:e1:93:14:31:e1:c0:6f:c7:8b:3d:
36:18:95:2c:b4:e8:0c:e7:4a:9a:7d:73:c9:f4:8d:cc:8b:07:
30:dc:15:5e:4d:53:ec:fd:ac:01:29:92:73:61:3d:db:5a:4d:
c1:d6:32:ff:b5:25:23:05:76:4f:84:a8:b2:73:b9:7f:76:e7:
36:98:8f:a9:5e:09:a2:95:28:46:fe:6e:71:b4:44:9b:fe:89:
0b:45:5d:b3:6f:30:cc:63:84:f5:22:1e:04:b0:ef:1d:6b:d9:
64:85:05:7b:ed:9f:b1:f5:f8:f9:9d:fe:2e:40:61:b3:95:25:
b9:e6:af:16:fd:68:e5:06:70:83:09:ae:cb:fd:da:fe:c3:7e:
33:95:02:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:02:50 2025 by rpki-client