Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/sWk5jT3HozreswvjJCUdbxSJXMo.roa
File: sWk5jT3HozreswvjJCUdbxSJXMo.roa (raw, json)
Hash identifier: JFge37Hn3mdWNuoI3xzH2vw7ctltQYdZMParVTMYzJw=
Subject key identifier: B1:69:39:8D:3D:C7:A3:3A:DE:B3:0B:E3:24:25:1D:6F:14:89:5C:CA
Certificate issuer: /CN=852ece9c9a324d45c35f9559f329d8869dab53ba
Certificate serial: 01850F395390D1BC6BFBE3C02C5AE8E3C793
Authority key identifier: 85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/sWk5jT3HozreswvjJCUdbxSJXMo.roa
Signing time: Wed 14 Dec 2022 06:01:33 +0000
ROA not before: Wed 14 Dec 2022 06:01:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208397
IP address blocks: 185.138.200.0/23 maxlen: 23
185.138.202.0/23 maxlen: 23
185.141.42.0/23 maxlen: 23
185.141.40.0/23 maxlen: 23
185.135.183.0/24 maxlen: 24
185.135.182.0/23 maxlen: 23
185.135.180.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0f:39:53:90:d1:bc:6b:fb:e3:c0:2c:5a:e8:e3:c7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852ece9c9a324d45c35f9559f329d8869dab53ba
Validity
Not Before: Dec 14 06:01:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b169398d3dc7a33adeb30be324251d6f14895cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b7:4e:e0:31:af:20:ce:93:74:ce:ec:54:9f:
e2:b9:23:8f:59:ba:40:00:89:d0:55:02:36:4f:93:
74:00:e9:be:30:90:6d:c9:42:16:86:07:7b:a6:1b:
74:ea:28:a0:01:be:b0:bd:9c:67:3b:08:89:13:23:
a5:72:24:68:28:8d:aa:fd:83:0d:b1:b6:fc:b4:e6:
66:70:1d:8d:8a:4a:09:f3:df:55:ca:72:9d:d3:94:
1c:4e:58:88:7c:92:4a:75:13:b1:28:5d:ab:61:eb:
a3:a2:38:0a:54:1d:cc:3b:26:af:fc:68:9c:7d:aa:
79:21:1e:ef:9b:80:9e:09:06:44:b6:66:0b:5c:1c:
22:b1:17:71:b7:2d:bb:e3:91:a1:fa:5a:09:8a:15:
2f:db:f5:ba:86:45:72:67:f6:9a:21:85:c6:ea:fb:
b0:d0:4b:56:8a:8f:85:be:60:e5:32:c6:12:81:21:
94:2d:b3:64:8b:4e:c6:d6:09:0f:63:cb:3a:32:15:
86:33:30:b6:35:24:e5:01:3e:26:15:de:04:19:c2:
57:a1:70:bf:29:dd:47:1c:8d:3d:81:3c:59:6d:51:
c6:b9:c5:5a:66:0c:09:d2:cc:db:fd:f8:e2:b4:17:
2b:84:f4:3f:91:38:ec:f0:b0:f0:46:8f:04:f8:e5:
fd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:69:39:8D:3D:C7:A3:3A:DE:B3:0B:E3:24:25:1D:6F:14:89:5C:CA
X509v3 Authority Key Identifier:
keyid:85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/sWk5jT3HozreswvjJCUdbxSJXMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.180.0/22
185.138.200.0/22
185.141.40.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:09:82:03:f5:c5:31:ce:9b:ff:88:15:ee:0a:c8:40:9e:9b:
d7:1e:e1:71:8d:be:80:d8:f0:1d:2a:cb:9f:0c:e5:25:e4:cd:
c1:67:24:17:2e:73:91:f4:bb:e9:3e:db:43:a9:21:43:90:3f:
a5:65:1d:15:9b:f0:04:82:b4:7c:0a:46:cb:c5:c5:ea:cd:83:
7e:7f:16:42:58:69:50:f3:04:f3:86:9b:5c:96:01:af:86:f3:
c8:b8:c9:dc:cc:6a:24:c7:b8:d0:87:ec:d1:cd:e2:c5:c7:05:
2c:ef:98:2e:89:42:74:89:aa:fc:73:4e:fb:62:bc:3a:af:6e:
36:6a:d9:74:30:15:0a:03:2a:85:a5:c3:e9:c7:96:d7:db:81:
f0:a3:3b:4b:68:20:ab:e1:af:38:1f:e3:63:eb:6e:91:7e:8c:
59:60:89:5b:94:08:f4:34:50:3b:0f:01:e2:f1:2c:85:88:ca:
05:89:25:e6:af:ca:80:87:bc:31:cf:92:61:f8:84:e8:6f:51:
62:17:75:21:41:f9:1e:12:7e:d7:3c:13:8f:06:d6:67:ec:08:
ec:96:8c:58:73:17:8c:2a:19:47:6c:26:0b:de:5f:29:b1:c8:
02:0a:4c:0a:65:e8:9a:d6:d6:c2:ef:96:43:e7:50:8e:07:72:
0c:ae:81:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:52:57 2025 by rpki-client