Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/rhQai8erT7ZzGmGQTi2wuixW1TE.roa
File: rhQai8erT7ZzGmGQTi2wuixW1TE.roa (raw, json)
Hash identifier: I8wLMCi+XG0/u3oc85qk1Bg7CxgMvdNaIfwy/jc6L80=
Subject key identifier: AE:14:1A:8B:C7:AB:4F:B6:73:1A:61:90:4E:2D:B0:BA:2C:56:D5:31
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0183C6690CF3F281930C92E60DE985A80EE2
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/rhQai8erT7ZzGmGQTi2wuixW1TE.roa
Signing time: Tue 11 Oct 2022 09:38:36 +0000
ROA not before: Tue 11 Oct 2022 09:38:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 109.203.164.0/22 maxlen: 24
37.49.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c6:69:0c:f3:f2:81:93:0c:92:e6:0d:e9:85:a8:0e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Oct 11 09:38:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae141a8bc7ab4fb6731a61904e2db0ba2c56d531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5c:f4:6b:43:c7:ee:4e:0d:0c:c8:46:69:11:
4b:0b:fb:3e:ab:ce:cf:5c:c0:b9:e3:a6:3d:37:bb:
de:91:49:03:a4:07:2f:95:e6:dc:53:0e:a2:56:b2:
ad:ac:9e:ad:28:50:b2:42:a7:46:78:e3:cf:71:71:
61:bd:44:b4:45:c4:e5:09:8b:52:42:19:0c:61:4d:
a2:c0:93:3f:ac:40:6b:6d:4e:75:19:7e:97:c1:01:
64:c6:34:6d:45:32:e5:be:e1:8f:9d:4c:9f:8c:84:
f3:c6:e9:a6:54:5b:3f:d6:da:9c:c1:64:99:db:4e:
8e:1b:f8:dc:73:35:e1:c1:8e:5d:0d:8c:b2:07:c7:
fa:83:52:50:27:50:8a:66:b1:54:8b:ce:fe:95:8c:
7e:63:13:4d:97:e4:a9:35:63:13:5f:11:69:14:67:
6b:06:6c:80:3a:8f:52:e9:b9:fd:d7:e8:6f:5b:b7:
35:d6:be:e0:6e:ec:b9:62:0e:4c:7b:f3:2d:e0:4f:
01:d2:70:e8:90:c3:23:36:fa:58:3a:e4:23:84:11:
01:ca:95:e3:4f:fd:e3:c9:e9:b0:0b:04:5e:4a:b2:
2b:f7:d4:25:4d:b5:7b:3a:37:88:70:f6:6a:b2:b9:
64:6c:3b:35:7d:0d:fe:76:8d:64:c6:ee:8d:71:6f:
28:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:14:1A:8B:C7:AB:4F:B6:73:1A:61:90:4E:2D:B0:BA:2C:56:D5:31
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/rhQai8erT7ZzGmGQTi2wuixW1TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.148.0/22
109.203.164.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:4f:77:ac:8f:33:c6:07:e9:5b:ed:5a:5f:67:cc:a9:10:a7:
a8:0d:34:b7:ef:3e:11:57:88:c7:f5:e4:da:65:f4:f8:5a:90:
52:c5:4f:af:e0:0e:d6:5b:4f:32:12:88:e5:b0:df:a7:7f:34:
67:a6:58:33:51:41:a6:32:a6:f9:ea:44:8a:bc:58:88:b6:c9:
0e:54:d7:49:02:2b:59:85:fa:82:4a:ae:ee:04:5e:70:7e:e3:
bb:55:d5:e7:36:20:94:90:0a:f0:e4:8a:ea:21:51:8e:c3:9b:
78:d1:df:eb:1e:27:cc:b1:fe:e7:f2:ac:df:63:f1:e2:5f:7b:
8c:89:53:36:9b:2a:8f:3d:07:46:78:02:ad:5d:ce:ff:bc:11:
4a:d0:51:91:26:9a:bf:22:9a:13:d6:b5:71:e2:e3:9a:17:98:
2e:a4:64:4f:c3:b7:58:a3:03:60:12:40:6d:e1:f3:33:7b:11:
32:08:ce:38:a2:1d:dc:c7:16:eb:3b:8b:e1:ec:69:2f:3c:43:
44:80:8d:75:b9:be:c8:84:8f:b2:e4:62:9f:fe:d6:2f:b6:65:
b6:67:fe:f3:4a:08:77:2b:3a:10:d6:e1:43:9b:e5:b1:f8:a7:
77:ab:a2:3e:48:57:85:76:4a:7f:45:2e:77:68:de:2d:7b:64:
b0:a7:f6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:08 2025 by rpki-client