Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d489f5-b4d9-45ff-a9a5-497b0bb6517e/1/E62sewNXRHkU9lo9g8Pf901OX_Q.roa
File: E62sewNXRHkU9lo9g8Pf901OX_Q.roa (raw, json)
Hash identifier: drqn09qQ0CZzQiRi+abiFrHYZEkukQeTGswBeQMNofo=
Subject key identifier: 13:AD:AC:7B:03:57:44:79:14:F6:5A:3D:83:C3:DF:F7:4D:4E:5F:F4
Certificate issuer: /CN=7844c8ceb273e29c9d5f3f55064347a7aeae932b
Certificate serial: 0181F7EBC17248F9930F9DA1830564B1EE9B
Authority key identifier: 78:44:C8:CE:B2:73:E2:9C:9D:5F:3F:55:06:43:47:A7:AE:AE:93:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eETIzrJz4pydXz9VBkNHp66ukys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d489f5-b4d9-45ff-a9a5-497b0bb6517e/1/E62sewNXRHkU9lo9g8Pf901OX_Q.roa
Signing time: Wed 13 Jul 2022 14:17:11 +0000
ROA not before: Wed 13 Jul 2022 14:17:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202755
IP address blocks: 185.155.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:eb:c1:72:48:f9:93:0f:9d:a1:83:05:64:b1:ee:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7844c8ceb273e29c9d5f3f55064347a7aeae932b
Validity
Not Before: Jul 13 14:17:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13adac7b0357447914f65a3d83c3dff74d4e5ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a1:53:3d:29:73:43:b0:8c:6f:fe:08:26:d1:
16:85:ab:d6:69:9d:6a:be:ed:33:43:22:62:98:b7:
e3:6f:5d:b9:57:9a:f4:f4:32:db:82:01:2c:3b:c9:
bc:10:2e:7b:95:d2:a5:c1:e4:0c:62:f5:7a:82:cd:
ce:d3:1a:5a:0b:b4:53:50:fc:46:65:1b:3e:f1:da:
ad:dd:39:95:81:19:6a:28:97:93:13:f1:7e:2a:6d:
84:1e:ac:b1:70:aa:ac:24:04:02:95:08:f2:67:81:
7e:47:e8:f4:8a:4b:e8:1b:c7:25:29:dc:b1:e9:0a:
10:ab:2c:59:d1:8a:ee:85:70:2f:49:b6:e2:ac:a8:
d5:b1:9f:fa:ef:5a:84:3b:80:72:a4:6f:fd:1d:56:
cb:2b:7b:ef:44:ba:8e:6f:2a:65:28:37:bc:96:38:
aa:31:2c:42:73:eb:70:ec:51:4e:1f:d6:06:a0:55:
b4:f3:2f:0b:7b:7c:cf:b2:0e:00:03:6b:7a:d3:67:
3f:80:33:e0:b0:7e:34:31:b3:b9:de:c0:9e:26:a8:
b8:ad:5b:65:3a:1d:02:e2:9c:dd:c7:86:63:0d:d7:
3c:cc:ee:f0:4e:c0:bf:71:3d:80:20:2c:47:8e:7f:
ee:68:fc:92:f8:f1:68:48:24:c2:dd:45:1d:fe:d1:
17:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AD:AC:7B:03:57:44:79:14:F6:5A:3D:83:C3:DF:F7:4D:4E:5F:F4
X509v3 Authority Key Identifier:
keyid:78:44:C8:CE:B2:73:E2:9C:9D:5F:3F:55:06:43:47:A7:AE:AE:93:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eETIzrJz4pydXz9VBkNHp66ukys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d489f5-b4d9-45ff-a9a5-497b0bb6517e/1/E62sewNXRHkU9lo9g8Pf901OX_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d489f5-b4d9-45ff-a9a5-497b0bb6517e/1/eETIzrJz4pydXz9VBkNHp66ukys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.172.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:b5:69:69:86:28:8c:9b:9f:ba:e1:cb:f5:ec:61:2e:f5:dc:
45:84:7a:94:98:33:7b:aa:fd:ab:c9:2a:2f:a8:08:89:31:f4:
33:58:68:74:ec:8b:c7:18:83:0f:9d:da:8f:6d:86:88:03:c4:
be:0d:42:52:bf:92:e5:ae:d6:fa:d9:0e:a3:55:ab:06:64:db:
c7:df:cd:35:66:5d:df:4f:fc:f2:0a:30:92:8f:5b:cf:c6:e2:
ec:89:48:20:28:ba:73:85:0b:69:b0:5d:0d:1a:3a:13:fb:9c:
ab:04:d5:bb:35:88:a4:68:62:ea:56:d5:e8:f3:73:67:6c:a5:
19:54:07:24:e1:6f:9b:9d:43:0a:df:64:c4:23:4f:67:e1:8f:
f0:d1:4c:7e:44:70:b9:61:4d:0d:f1:7c:cc:82:2d:dd:24:7c:
9a:7a:d9:5d:e8:0a:b3:08:2b:2d:45:65:e7:16:9a:0d:cb:b9:
0a:34:d5:8d:3f:f0:d7:e7:9b:b7:04:38:40:77:74:bb:92:6a:
e3:da:55:a6:4e:d9:5d:d4:b9:68:25:31:82:e0:dc:96:98:43:
8e:2f:a3:d9:1a:95:ba:2f:90:13:6f:95:bd:12:65:4c:e4:ea:
f6:68:31:44:57:3b:90:91:8d:65:84:57:70:1e:02:b6:ba:7c:
7a:d1:e6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:10 2025 by rpki-client