Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/788_6eQ_xFNLe9_wIK-pQKXpCzE.roa
File: 788_6eQ_xFNLe9_wIK-pQKXpCzE.roa (raw, json)
Hash identifier: LF8TeWNVGROo8mUa/fN3lL86dQZtL7W6m2p1cv4RWDU=
Subject key identifier: EF:CF:3F:E9:E4:3F:C4:53:4B:7B:DF:F0:20:AF:A9:40:A5:E9:0B:31
Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial: 0194236A02019486B0F394EA93ACBB3CBF6A
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/788_6eQ_xFNLe9_wIK-pQKXpCzE.roa
Signing time: Wed 01 Jan 2025 19:48:57 +0000
ROA not before: Wed 01 Jan 2025 19:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202922
IP address blocks: 185.150.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:02:01:94:86:b0:f3:94:ea:93:ac:bb:3c:bf:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
Validity
Not Before: Jan 1 19:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efcf3fe9e43fc4534b7bdff020afa940a5e90b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ca:fa:c1:d6:d9:a2:6c:a4:ce:b6:25:54:f2:
c4:3c:55:8a:ee:e3:89:6d:4f:07:2e:af:1f:b8:b5:
37:05:3f:b7:3b:c5:95:86:d8:7c:a0:c7:a6:52:2d:
cb:3e:08:1c:07:3a:af:c5:87:8a:42:bb:1f:4c:06:
b8:61:0d:8b:6f:a7:2a:fc:b9:bd:1b:c2:3e:d5:e6:
07:da:9b:8f:ba:ba:ec:08:28:fe:55:1f:30:96:bd:
b3:5b:8d:99:f9:c8:d3:74:4f:4d:b6:6b:59:7a:9a:
19:e7:99:dc:52:5e:4a:15:83:f6:60:2e:cf:52:f4:
4e:b1:10:36:73:41:6b:e6:7f:09:36:a2:a3:4c:6a:
d9:61:39:89:d7:85:9b:e0:9c:c8:1a:44:e7:16:25:
18:1f:6c:a4:22:b8:d5:cc:94:08:f7:bb:bf:a0:c4:
ad:b3:8f:c6:34:41:77:fe:f7:dc:3d:a5:48:6d:be:
96:a2:ca:64:22:73:2f:e7:9b:e6:4d:4b:8a:7e:8a:
a1:d7:0b:5f:2c:17:51:2d:c6:15:72:dc:59:63:13:
77:e1:ce:1b:01:a0:4d:54:b1:32:6a:dc:44:db:ff:
a7:e4:99:79:1f:81:f3:e9:69:69:70:5a:e4:b5:f7:
6b:33:01:bc:49:80:54:0f:77:7f:ec:84:da:47:01:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CF:3F:E9:E4:3F:C4:53:4B:7B:DF:F0:20:AF:A9:40:A5:E9:0B:31
X509v3 Authority Key Identifier:
keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/788_6eQ_xFNLe9_wIK-pQKXpCzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.112.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:fb:ed:e5:5a:4f:dc:8b:4e:59:dc:83:32:71:0a:71:40:c9:
c7:3c:2a:90:65:4d:f4:b2:4d:5f:d8:56:d8:4e:c7:48:f7:09:
5b:cf:11:30:fc:0b:a3:48:51:a4:87:86:e1:c3:51:5f:4b:50:
33:14:80:00:e4:37:f2:48:81:17:40:4f:9c:a9:ee:53:51:99:
62:e7:99:85:23:52:bc:be:36:69:7a:ba:a1:18:0d:7b:57:d9:
63:2b:46:d2:a0:97:d5:de:b0:6d:4b:53:ad:f3:3b:ae:14:1d:
56:96:97:37:57:d1:e2:3b:84:6b:9a:00:b9:58:3f:b2:62:6f:
b4:a5:52:7f:22:52:fc:b2:62:1e:f8:b2:3e:2f:62:f5:6e:55:
78:61:18:f3:3c:f9:69:7f:0e:43:89:51:70:68:ab:3d:f2:8c:
ca:28:60:11:29:8a:ad:4c:d8:2b:76:ae:1c:8b:b5:71:e1:6e:
25:46:f7:d8:ff:7f:66:2a:d8:d4:ca:c9:c7:94:d0:b0:78:7f:
80:10:0b:9d:e6:82:dd:65:9f:c4:80:9a:ea:5f:cd:ad:0d:9c:
2a:d7:72:25:3d:53:e0:9e:f0:a6:2d:71:91:3f:dd:3f:6b:9a:
5c:80:68:28:4a:4f:61:e9:0b:44:66:3d:b6:f1:9a:0c:cf:43:
a6:82:7b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:27 2025 by rpki-client