Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/R526zZbAg7CHvFwfr4p5vT3eNYY.roa
File: R526zZbAg7CHvFwfr4p5vT3eNYY.roa (raw, json)
Hash identifier: y8Mfcq+1E0AZqXc3eynd8kFMawzh8z8QymbgFx16V9Y=
Subject key identifier: 47:9D:BA:CD:96:C0:83:B0:87:BC:5C:1F:AF:8A:79:BD:3D:DE:35:86
Certificate issuer: /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Certificate serial: 01856E82074CB0E9B4B2F6A59D07F286E247
Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/R526zZbAg7CHvFwfr4p5vT3eNYY.roa
Signing time: Sun 01 Jan 2023 18:04:53 +0000
ROA not before: Sun 01 Jan 2023 18:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13768
IP address blocks: 185.239.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:82:07:4c:b0:e9:b4:b2:f6:a5:9d:07:f2:86:e2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Validity
Not Before: Jan 1 18:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=479dbacd96c083b087bc5c1faf8a79bd3dde3586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:2c:41:ec:f5:5a:2a:6d:61:35:0e:a1:fa:
9f:14:ba:06:1d:30:2d:68:86:11:4e:bd:96:90:a7:
a8:f0:4c:a6:c4:ab:b5:ac:d7:d2:af:bf:72:c5:b3:
bb:c5:97:6c:e9:db:43:82:2a:d8:5c:13:63:c4:28:
a1:40:25:47:f4:80:9b:66:be:b2:ee:d1:96:0c:48:
91:07:aa:48:b2:3e:95:95:4c:d8:0f:11:c1:74:38:
46:a7:1f:78:cc:51:fd:23:c6:d3:30:b7:be:d3:99:
5e:3a:e1:bc:88:1b:06:df:59:16:54:4d:5a:52:de:
5d:c9:77:b9:53:fc:1b:07:9a:ea:5d:49:01:d4:57:
23:ce:11:7a:0a:66:22:e0:74:d2:86:26:6b:dc:ea:
23:1e:64:58:a0:61:ca:66:39:73:29:1b:4d:b2:2c:
6c:15:94:04:50:a7:c6:cd:36:b0:4b:19:2c:46:99:
40:4c:40:07:73:12:58:b9:b6:9c:ca:db:99:fc:99:
cb:3e:58:d1:51:88:a6:de:e1:7f:99:97:a2:4f:6f:
32:c4:18:b2:d7:11:5a:fb:60:c2:48:e9:34:45:ee:
25:f1:f7:13:c7:1f:04:29:db:0c:88:e6:8f:fe:d5:
09:a9:d6:a5:a1:6b:6e:b0:24:f5:3e:77:cb:8d:14:
6f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9D:BA:CD:96:C0:83:B0:87:BC:5C:1F:AF:8A:79:BD:3D:DE:35:86
X509v3 Authority Key Identifier:
keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/R526zZbAg7CHvFwfr4p5vT3eNYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.148.0/22
Signature Algorithm: sha256WithRSAEncryption
89:b4:0a:6e:0f:d3:78:c5:0b:2a:15:84:77:b8:da:f4:89:6e:
15:cf:06:fb:aa:41:c7:91:cb:88:fc:e1:e2:6a:00:ea:45:62:
49:de:e9:aa:4a:0a:7c:80:94:fa:0c:71:6e:11:16:99:99:ae:
32:50:1b:31:a7:12:4f:5e:ea:90:91:ea:24:02:7d:7e:74:77:
d5:33:ce:0d:63:b4:6b:15:50:95:ac:7b:bf:70:52:8c:ae:6e:
53:b8:96:2c:d7:25:65:1d:a1:59:da:d2:4f:a9:e1:b4:9e:34:
a6:0d:4d:d1:bd:bf:58:b9:03:ae:a7:f1:48:b0:73:70:9d:97:
4c:ea:59:53:be:3f:1d:56:3f:f1:fa:04:72:61:f0:ae:a6:12:
a9:2a:7a:2c:23:c6:74:b8:1b:d1:05:84:db:dd:ce:a5:29:a4:
70:7d:90:dc:94:d3:0a:89:e0:f1:8e:0f:5f:22:36:0b:72:9c:
64:b6:f0:19:0c:71:c3:de:c6:3a:1c:58:97:28:1f:1a:9d:c2:
ec:36:3c:d0:f9:50:45:a4:b1:b6:b4:0a:88:86:dc:94:88:65:
4b:e0:fd:b8:8d:e9:45:23:97:71:fb:b4:b9:68:59:1d:a2:31:
a9:28:a2:9c:2a:36:1d:54:7b:85:61:5e:09:c9:6e:95:15:48:
4e:a8:95:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:27:31 2025 by rpki-client