Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/167b5f-2d68-46c8-90f5-9ed2f166feae/1/i5of9DupE20K7vZlmLT6LR25zZE.roa
File: i5of9DupE20K7vZlmLT6LR25zZE.roa (raw, json)
Hash identifier: 4lPsh5UozUCLf0Hu/r2U5HIiOC3qPfNhG42HzepYlfg=
Subject key identifier: 8B:9A:1F:F4:3B:A9:13:6D:0A:EE:F6:65:98:B4:FA:2D:1D:B9:CD:91
Certificate issuer: /CN=b70e414e19b7a35418a33a1af9eccad16e23e8df
Certificate serial: 0D835D2C
Authority key identifier: B7:0E:41:4E:19:B7:A3:54:18:A3:3A:1A:F9:EC:CA:D1:6E:23:E8:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tw5BThm3o1QYozoa-ezK0W4j6N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/167b5f-2d68-46c8-90f5-9ed2f166feae/1/i5of9DupE20K7vZlmLT6LR25zZE.roa
Signing time: Sat 01 Jan 2022 12:58:35 +0000
ROA not before: Sat 01 Jan 2022 12:58:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 185.118.71.0/24 maxlen: 24
185.118.69.0/24 maxlen: 24
185.118.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226712876 (0xd835d2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70e414e19b7a35418a33a1af9eccad16e23e8df
Validity
Not Before: Jan 1 12:58:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b9a1ff43ba9136d0aeef66598b4fa2d1db9cd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3c:4e:32:25:c7:b8:ed:8f:b2:85:31:81:7d:
f6:27:3b:88:b5:bb:3e:cd:02:ca:77:7e:de:06:20:
af:cd:b5:55:7a:19:8e:af:02:7c:2c:74:1f:b8:2b:
d3:ad:60:d6:b8:4f:72:ea:c0:99:ff:1a:6a:e1:e2:
64:a6:f2:ac:78:f5:e2:91:2b:80:78:d4:cc:c4:c5:
5d:36:3a:ab:92:da:97:ca:3d:a2:f9:3b:ce:19:ef:
cc:2a:80:7d:9f:2f:48:80:2e:1b:fa:ed:ed:f1:36:
d5:76:35:3e:c0:01:17:f8:88:67:9a:b9:a9:ee:10:
c3:94:11:eb:13:9e:9e:33:14:91:63:63:98:12:a6:
61:5b:d8:d7:cd:57:d0:c8:a5:f6:c9:68:65:48:7b:
d4:e3:f0:2b:f5:cd:4d:39:83:19:9a:af:a1:5a:25:
a0:cf:2a:cb:52:de:62:f1:17:03:64:69:7c:09:30:
02:84:0a:56:d5:5b:4f:a4:a5:61:bb:81:33:b7:86:
81:ea:f4:4b:0a:f9:79:bc:61:23:2f:2a:d9:b0:df:
39:a6:68:00:2c:58:57:10:15:86:e1:81:7d:c6:3e:
39:c0:c5:67:d8:73:37:1b:19:d0:4c:4a:65:44:8c:
95:9c:d1:6a:b2:47:18:7e:a3:f4:14:e0:4e:e5:46:
7a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9A:1F:F4:3B:A9:13:6D:0A:EE:F6:65:98:B4:FA:2D:1D:B9:CD:91
X509v3 Authority Key Identifier:
keyid:B7:0E:41:4E:19:B7:A3:54:18:A3:3A:1A:F9:EC:CA:D1:6E:23:E8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw5BThm3o1QYozoa-ezK0W4j6N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/167b5f-2d68-46c8-90f5-9ed2f166feae/1/i5of9DupE20K7vZlmLT6LR25zZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/167b5f-2d68-46c8-90f5-9ed2f166feae/1/tw5BThm3o1QYozoa-ezK0W4j6N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.69.0-185.118.71.255
Signature Algorithm: sha256WithRSAEncryption
05:e2:35:bd:09:fb:0c:7e:9b:25:e4:41:4a:21:1b:cd:90:15:
7e:68:41:13:1b:fa:39:4b:22:4a:b8:e3:30:fb:ab:fe:5c:4b:
7f:46:f9:29:02:4f:ee:2d:85:e9:72:62:1f:67:1d:f5:fc:bc:
fa:77:ff:e0:90:67:7d:75:5f:11:06:60:bf:4a:31:a8:4c:90:
0c:ee:86:d0:fe:4c:ba:ae:49:33:f2:00:79:cf:86:56:89:1d:
f6:70:64:89:48:7b:94:42:ec:a8:f6:1d:02:83:14:9f:ec:2e:
0f:9f:bb:14:08:79:62:c9:60:a3:a4:de:8a:c4:6f:4a:75:a2:
0e:41:5e:b4:fb:2b:57:e7:2e:1e:fb:78:6a:c7:70:ee:de:84:
74:1d:4b:8a:f4:24:ad:52:60:af:89:01:44:66:e1:1f:5c:a4:
bf:80:8f:dd:f1:24:2e:ed:69:30:0b:30:6e:0e:40:e1:01:19:
a8:9b:f3:0b:5d:ac:86:cd:33:aa:81:e3:f0:49:ef:6a:ad:ab:
73:15:68:fe:43:da:7a:39:63:b2:e5:ce:3d:4d:2f:a0:f5:96:
49:5c:05:77:b1:dd:5e:28:08:0e:26:18:ad:d7:f9:f1:eb:74:
68:26:e9:dc:2e:80:cf:8e:cf:8d:fc:0b:4c:0c:fb:9b:5d:06:
f9:95:27:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:49 2025 by rpki-client