Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/7t4m4Yq4Kf7bc6zJjOeATyOWVus.roa
File: 7t4m4Yq4Kf7bc6zJjOeATyOWVus.roa (raw, json)
Hash identifier: 5v4s9lZeSMOOz/sD2T2eoQzpHwhcRdaNTyDmFBKN0hQ=
Subject key identifier: EE:DE:26:E1:8A:B8:29:FE:DB:73:AC:C9:8C:E7:80:4F:23:96:56:EB
Certificate issuer: /CN=19193b6e4d0be89035e79939b5002fc5c16c9bcc
Certificate serial: 04CBB3C7
Authority key identifier: 19:19:3B:6E:4D:0B:E8:90:35:E7:99:39:B5:00:2F:C5:C1:6C:9B:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRk7bk0L6JA155k5tQAvxcFsm8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/7t4m4Yq4Kf7bc6zJjOeATyOWVus.roa
Signing time: Sat 01 Jan 2022 16:02:26 +0000
ROA not before: Sat 01 Jan 2022 16:02:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12586
IP address blocks: 185.55.240.0/22 maxlen: 22
2a09:8700::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80458695 (0x4cbb3c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19193b6e4d0be89035e79939b5002fc5c16c9bcc
Validity
Not Before: Jan 1 16:02:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eede26e18ab829fedb73acc98ce7804f239656eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c0:3c:a9:97:06:d1:af:d3:1d:c3:7e:58:c8:
ce:63:70:ae:96:15:bb:a5:69:69:21:d3:fb:98:27:
5b:b5:b4:81:49:54:8e:60:b4:ae:7c:c6:73:21:75:
49:86:51:78:5d:6a:2b:5f:83:9e:12:86:89:5b:de:
af:c3:64:56:4c:2e:49:10:4b:ac:c2:df:1a:b2:f4:
70:ea:8e:05:bb:60:cb:a3:bc:7d:57:c8:a2:ab:5b:
40:40:e5:5b:d1:db:87:4d:ac:bd:13:9e:fd:79:f3:
34:37:1b:eb:30:a3:f6:7f:7e:53:f1:89:8a:cb:07:
f5:8e:31:33:64:79:bc:0c:ae:5a:16:eb:67:35:98:
09:f6:ae:d3:62:6d:8b:bd:da:4a:34:39:7e:6c:0b:
c7:68:1b:1f:28:72:6b:f8:59:40:26:c0:2f:df:37:
7b:7f:19:36:f5:ae:6c:47:c1:c3:4b:b0:f4:3e:97:
e7:97:5b:e6:04:5b:96:e6:5c:46:e5:e5:07:36:93:
ce:ec:73:f1:3b:ca:f0:ab:a6:f0:0f:6a:d3:ef:54:
3d:48:88:87:fc:26:ca:da:fd:df:da:d6:df:0a:5f:
85:a4:8a:15:bf:da:7a:c3:f0:b5:02:04:09:74:ca:
11:59:8a:bc:c9:49:33:ae:22:3a:e7:55:f3:d9:93:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DE:26:E1:8A:B8:29:FE:DB:73:AC:C9:8C:E7:80:4F:23:96:56:EB
X509v3 Authority Key Identifier:
keyid:19:19:3B:6E:4D:0B:E8:90:35:E7:99:39:B5:00:2F:C5:C1:6C:9B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk7bk0L6JA155k5tQAvxcFsm8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/7t4m4Yq4Kf7bc6zJjOeATyOWVus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/GRk7bk0L6JA155k5tQAvxcFsm8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.240.0/22
IPv6:
2a09:8700::/32
Signature Algorithm: sha256WithRSAEncryption
52:5b:30:51:78:40:ff:06:bc:60:04:e7:b6:1b:d2:3a:a8:5b:
cf:84:8c:12:60:aa:30:d3:f6:a3:47:40:bd:1b:ef:ce:98:ba:
a1:71:92:76:2f:a1:19:f9:59:c2:8b:cf:98:86:58:f3:d2:4f:
07:0f:12:bc:01:36:2d:09:d8:f1:c1:13:af:5f:2f:7a:d3:0d:
32:3d:3b:7e:f6:a4:93:3f:ee:9e:64:71:a2:ad:65:4b:a4:92:
e8:07:a3:c0:c4:e5:f1:e5:a0:b5:1f:06:81:df:c4:85:a7:8f:
85:f2:ef:33:90:b2:c0:36:83:2b:59:0e:a0:b8:af:5b:b3:ce:
3d:b9:9c:bf:6e:ed:18:0e:6d:9c:ba:33:30:6e:10:d6:d3:25:
39:80:1f:8d:48:61:d9:6c:07:18:68:56:46:fe:41:ce:f4:52:
fb:b2:cb:17:f4:ce:62:05:b4:e4:a5:0f:6c:94:63:bd:17:0d:
25:0a:93:74:00:db:b6:82:32:e4:f0:d7:9f:78:3a:26:21:42:
32:bb:85:f1:aa:82:86:20:57:89:de:99:3f:3a:7c:58:3b:98:
2f:f1:52:f2:83:69:b9:39:2d:32:d3:25:e6:8c:39:55:a2:8d:
db:7e:01:02:01:e2:40:3d:ff:2d:7c:3a:a1:69:5e:1d:6d:cd:
05:e5:3d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:42:04 2025 by rpki-client