Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/P8AhFOh0aiFH_5C4WFQLssGR6dQ.roa
File: P8AhFOh0aiFH_5C4WFQLssGR6dQ.roa (raw, json)
Hash identifier: auNm86KXCUL1NyWtdjJzMjTk7P+xx0h3fIk7BgeCn38=
Subject key identifier: 3F:C0:21:14:E8:74:6A:21:47:FF:90:B8:58:54:0B:B2:C1:91:E9:D4
Certificate issuer: /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Certificate serial: 05CEFC6D
Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/P8AhFOh0aiFH_5C4WFQLssGR6dQ.roa
Signing time: Fri 08 Apr 2022 14:05:37 +0000
ROA not before: Fri 08 Apr 2022 14:05:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13768
IP address blocks: 185.239.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97451117 (0x5cefc6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Validity
Not Before: Apr 8 14:05:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3fc02114e8746a2147ff90b858540bb2c191e9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4f:68:e7:95:73:08:a8:09:93:0f:d6:0d:fe:
ae:17:37:5a:be:cf:47:ba:7b:2d:cc:7c:3f:be:5a:
28:a1:b5:ec:fd:f1:e8:d6:24:fd:c1:58:d0:a4:6e:
33:c8:50:ab:92:71:dd:50:82:6e:be:ad:c2:dd:88:
43:35:eb:b6:51:d0:f8:e0:59:99:a4:e4:e7:1c:8b:
b1:1f:70:8a:2a:22:a9:14:71:97:e7:c6:bb:45:a1:
b0:cb:1e:5a:4f:83:04:9c:6e:dd:84:74:63:1d:0c:
4c:70:f9:91:70:3c:e5:ec:36:e1:2d:cb:6b:09:0c:
5a:23:d3:74:43:08:f1:6b:1d:59:99:2a:3a:3d:72:
2d:ea:f6:f0:fe:70:f5:37:7d:33:86:ed:c1:da:cc:
fe:3d:0b:6a:7c:a2:70:94:34:19:ef:93:af:f7:f4:
61:a5:6d:99:25:81:a0:c4:75:58:98:8a:ea:cc:93:
23:e8:5f:59:30:d0:1c:9c:09:bf:e6:21:f2:c4:59:
51:07:58:46:90:d5:d5:9f:04:e5:39:05:70:b9:2c:
48:dc:f2:3b:69:dd:eb:a2:15:c7:88:a3:0a:79:a3:
15:b6:c5:2b:5d:9e:1e:92:b8:7d:fe:e3:2d:ac:cf:
49:c5:57:59:47:ee:82:64:5a:45:8b:54:6e:06:8b:
48:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C0:21:14:E8:74:6A:21:47:FF:90:B8:58:54:0B:B2:C1:91:E9:D4
X509v3 Authority Key Identifier:
keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/P8AhFOh0aiFH_5C4WFQLssGR6dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.148.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:8c:b9:cb:8d:ac:d3:ce:95:5c:ab:b7:e6:1b:03:3e:ba:4a:
65:d3:5f:e3:15:d7:62:93:08:8c:98:dd:1c:ba:5c:06:f2:83:
3d:b3:07:98:ee:42:bb:bd:13:66:68:9a:41:fe:22:00:0a:a8:
48:fb:75:90:84:84:da:91:20:97:0b:9a:23:64:0e:7c:88:17:
67:a6:e5:d3:e8:71:e5:12:4d:91:b0:04:43:62:fd:b2:3f:2d:
05:77:bc:e8:a7:1d:50:76:6e:2f:df:02:7d:74:5a:c3:77:f0:
a8:85:4f:3d:27:db:4b:97:71:78:20:70:b9:e8:78:56:77:fb:
80:7c:91:46:9d:8a:68:22:f9:15:4f:37:43:e5:88:36:55:93:
99:54:d2:36:bf:1b:51:e2:46:02:67:19:a1:4f:22:19:79:d6:
95:a6:f3:ee:ab:74:7c:07:7a:7d:c8:f1:09:67:e8:25:6e:6d:
ad:df:5b:d4:f7:14:70:cc:6d:3f:a6:f9:4e:20:0e:40:83:d9:
52:2b:ab:10:88:f2:a2:dc:48:f5:50:81:fd:c7:62:b7:e6:9f:
4a:00:15:40:08:3e:30:64:02:a3:e6:6e:7a:30:a6:33:c4:0f:
cf:22:a6:16:37:55:72:cf:67:80:b9:80:8f:10:34:bb:97:97:
7f:01:f0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:22 2025 by rpki-client