Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/5f9e16-6c88-4888-b165-62000946b104/1/Iqg2XQo3omWVNG369fj4-nj7g2Y.roa
File: Iqg2XQo3omWVNG369fj4-nj7g2Y.roa (raw, json)
Hash identifier: BBLrEZyA4txoYQ82NgDK+RGFqwqn7rJmtFiT7vXnAAs=
Subject key identifier: 22:A8:36:5D:0A:37:A2:65:95:34:6D:FA:F5:F8:F8:FA:78:FB:83:66
Certificate issuer: /CN=1187c516e7f6f173f0bcceb4b24ba9127120b54b
Certificate serial: 0217A27D
Authority key identifier: 11:87:C5:16:E7:F6:F1:73:F0:BC:CE:B4:B2:4B:A9:12:71:20:B5:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYfFFuf28XPwvM60skupEnEgtUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/5f9e16-6c88-4888-b165-62000946b104/1/Iqg2XQo3omWVNG369fj4-nj7g2Y.roa
Signing time: Wed 05 Jan 2022 15:13:22 +0000
ROA not before: Wed 05 Jan 2022 15:13:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 185.228.122.0/24 maxlen: 24
185.228.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35103357 (0x217a27d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1187c516e7f6f173f0bcceb4b24ba9127120b54b
Validity
Not Before: Jan 5 15:13:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22a8365d0a37a26595346dfaf5f8f8fa78fb8366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:aa:56:6e:90:d9:ee:a4:65:5f:c2:d8:57:
6b:de:da:cf:eb:00:0a:b4:db:78:03:c2:50:e6:89:
3a:19:71:63:c4:4a:3b:a0:72:bc:b5:01:fd:84:15:
42:e7:18:e2:aa:b0:41:d4:3a:7b:44:e2:a6:d1:e1:
3f:96:a5:24:a6:ae:52:38:02:b6:ce:dd:a9:8a:24:
5a:bb:f6:e7:67:b3:6f:34:69:ed:c9:f2:cd:61:43:
4e:87:e4:71:43:94:d6:ed:03:d8:dc:dc:a9:69:39:
da:c6:9e:0c:0f:3a:4f:20:a2:45:b9:cb:04:25:b2:
9e:aa:e6:cf:29:8a:0e:ca:cc:17:5f:33:86:b0:d5:
88:d8:62:19:ac:1a:26:15:7d:c0:56:b2:e2:3e:ba:
20:98:a9:3f:d1:37:8d:cb:95:08:fa:c3:8e:7e:8b:
a2:a7:7b:45:29:80:a0:6f:c3:5e:29:ba:59:b3:7f:
6f:97:07:a2:8d:0b:2f:f0:2c:fd:5f:e5:d4:65:96:
2d:f7:6a:04:88:10:b7:35:c2:d5:f6:b0:81:8c:58:
36:f8:77:31:8e:e6:e1:3f:29:13:38:1c:00:9d:b1:
55:19:0c:c8:26:5e:a6:4c:47:dd:97:23:39:13:e9:
e5:82:22:42:d6:ea:de:0e:c9:34:f9:10:e4:e4:6d:
30:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A8:36:5D:0A:37:A2:65:95:34:6D:FA:F5:F8:F8:FA:78:FB:83:66
X509v3 Authority Key Identifier:
keyid:11:87:C5:16:E7:F6:F1:73:F0:BC:CE:B4:B2:4B:A9:12:71:20:B5:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYfFFuf28XPwvM60skupEnEgtUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/5f9e16-6c88-4888-b165-62000946b104/1/Iqg2XQo3omWVNG369fj4-nj7g2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/5f9e16-6c88-4888-b165-62000946b104/1/EYfFFuf28XPwvM60skupEnEgtUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.122.0/23
Signature Algorithm: sha256WithRSAEncryption
21:8d:5c:a3:90:42:a3:08:4d:69:01:d4:33:4e:5a:f4:8c:d6:
42:03:2f:e0:6d:8b:c1:52:1c:dc:4e:62:b9:4f:db:0a:96:37:
5f:15:c9:bc:69:1d:9e:cb:64:5b:92:af:07:a3:92:de:f9:80:
df:7a:34:91:58:36:eb:f0:84:5b:90:f8:dd:a4:ce:b4:e4:23:
c5:ef:38:90:74:a4:23:3b:26:3a:7c:6f:61:f2:6f:34:81:5b:
30:89:8f:cf:86:cb:fd:94:66:6a:3f:15:ae:6f:33:3f:e8:b9:
53:c8:07:22:58:fd:7f:23:b0:d8:ad:51:84:54:99:4f:99:59:
1a:df:1b:ce:90:2d:0f:d9:3b:31:ff:70:32:59:be:bd:ac:b8:
0f:e6:b3:8b:5f:2f:89:59:38:80:e9:55:3f:1b:01:96:14:87:
e2:20:70:0e:5c:da:c1:32:ea:c5:19:87:0a:6c:fd:8c:c2:72:
02:c7:ac:95:c8:52:8e:d1:43:8e:ee:21:38:5d:fd:e9:aa:5c:
c0:71:d4:e7:cf:74:70:3c:a8:f7:dd:80:02:79:82:6c:2b:50:
24:29:25:db:d4:e4:d9:f9:f7:b0:7e:bb:16:67:62:c3:c4:aa:
5c:ff:a3:ee:0c:06:5d:62:8f:69:d4:56:e4:3c:9e:0b:35:98:
de:ae:4c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:45:33 2025 by rpki-client