Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/02279e-9c48-4cf4-a2fa-9d66beb0e4c4/1/3KB45vexJwMwVAQOF8-5OBrTvfQ.roa
File: 3KB45vexJwMwVAQOF8-5OBrTvfQ.roa (raw, json)
Hash identifier: +u8+66yTH39pi2viZh9QjTMaFE2muo/iycEdgJ9RNQw=
Subject key identifier: DC:A0:78:E6:F7:B1:27:03:30:54:04:0E:17:CF:B9:38:1A:D3:BD:F4
Certificate issuer: /CN=21001d34d7cfadd22889a7e50db731d8a9071c25
Certificate serial: 061A7CFA
Authority key identifier: 21:00:1D:34:D7:CF:AD:D2:28:89:A7:E5:0D:B7:31:D8:A9:07:1C:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQAdNNfPrdIoiaflDbcx2KkHHCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/02279e-9c48-4cf4-a2fa-9d66beb0e4c4/1/3KB45vexJwMwVAQOF8-5OBrTvfQ.roa
Signing time: Sat 01 Jan 2022 09:55:34 +0000
ROA not before: Sat 01 Jan 2022 09:55:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205512
IP address blocks: 185.93.120.0/22 maxlen: 24
185.120.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102399226 (0x61a7cfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21001d34d7cfadd22889a7e50db731d8a9071c25
Validity
Not Before: Jan 1 09:55:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dca078e6f7b127033054040e17cfb9381ad3bdf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:9f:05:a4:a4:5b:b7:0d:e5:64:93:5a:d0:
32:83:42:d6:27:4b:71:b0:52:55:a6:ee:74:9b:2d:
a1:a1:87:19:2d:72:08:18:32:92:7c:d2:64:d4:77:
92:61:67:e3:5b:d0:2b:6b:2e:24:85:29:8c:a7:d0:
e1:fb:b5:47:f6:83:23:0d:ec:9a:ae:b5:92:ab:61:
54:b9:5e:d8:55:23:8a:c5:0f:11:da:43:f0:14:3a:
fc:99:9b:f7:56:e8:d1:58:e3:62:61:e6:6d:15:af:
6d:10:35:00:60:f4:02:37:11:62:23:a4:c5:4f:45:
6e:2d:0d:b9:bb:ce:cc:ee:52:e3:72:e7:a2:83:d3:
ed:cd:ee:19:24:af:f2:50:7a:97:96:27:46:c7:70:
52:8c:dc:a6:85:4c:d8:57:9a:0e:80:b5:ef:66:2b:
2f:3a:04:c8:d3:23:38:2f:9f:dd:22:95:8c:52:02:
e0:5a:3d:24:66:a4:5d:6c:61:03:c7:21:45:14:d3:
4a:10:44:93:1e:ea:2c:f9:00:5d:9b:2b:64:9b:85:
a7:32:42:97:47:07:5a:c3:d7:2f:a8:35:ad:21:82:
4c:b2:3f:3a:2d:e0:c0:62:40:92:08:e3:45:a4:a3:
88:63:55:a7:a0:eb:b2:a7:ce:d9:db:9a:9f:73:90:
b5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A0:78:E6:F7:B1:27:03:30:54:04:0E:17:CF:B9:38:1A:D3:BD:F4
X509v3 Authority Key Identifier:
keyid:21:00:1D:34:D7:CF:AD:D2:28:89:A7:E5:0D:B7:31:D8:A9:07:1C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQAdNNfPrdIoiaflDbcx2KkHHCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/02279e-9c48-4cf4-a2fa-9d66beb0e4c4/1/3KB45vexJwMwVAQOF8-5OBrTvfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/02279e-9c48-4cf4-a2fa-9d66beb0e4c4/1/IQAdNNfPrdIoiaflDbcx2KkHHCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.120.0/22
185.120.44.0/22
Signature Algorithm: sha256WithRSAEncryption
71:21:70:60:82:09:d1:22:ec:e7:21:c3:7b:ee:ce:32:b1:0a:
f8:20:ad:30:d6:bf:b1:18:3e:18:50:d3:a2:c2:1d:aa:da:26:
4d:6c:64:f5:77:99:dd:24:6b:9b:4e:47:39:a8:6d:7f:91:17:
ca:16:f0:e1:d0:b5:c6:2e:79:7f:ec:f4:96:42:c9:c0:b4:46:
e9:4f:68:df:a2:97:50:ca:2a:1a:e6:11:87:9f:81:5f:ba:d7:
56:62:8d:a0:9e:c4:f3:97:05:3e:63:08:b7:53:54:d9:80:a9:
e5:3b:a3:66:40:bf:47:7c:4c:fc:26:ad:44:a2:5d:55:94:a5:
2a:23:26:fc:b0:59:47:b2:27:7e:05:2e:cb:e3:b0:50:d7:3c:
a5:33:ff:71:9a:51:2c:fc:76:5d:be:84:d5:31:b1:4d:46:bb:
b3:f3:ac:aa:94:df:d0:5a:ab:ed:bf:a7:ed:a8:4d:22:bc:ee:
d7:52:5e:ee:16:5a:aa:32:25:8b:1d:92:9c:6e:98:0b:75:69:
2a:8d:9c:44:b9:29:10:ec:fe:7f:0a:8d:e3:9c:ba:37:49:32:
e8:1a:1c:36:c9:be:45:d4:95:16:7e:0f:b5:8c:3b:58:ec:6a:
07:de:7d:ee:5d:62:8b:b6:d9:30:fb:35:03:b8:97:47:77:aa:
46:44:b8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:05:36 2025 by rpki-client