Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/434e80-299c-4ca5-badd-ab95f7c7a476/1/XkIenqLe4NEGhhwudfjae2mU4P8.roa
File: XkIenqLe4NEGhhwudfjae2mU4P8.roa (raw, json)
Hash identifier: 6yvWosmpXEtqlXnZOkIH/yrsToyZ0i8m5hII6iwZCuU=
Subject key identifier: 5E:42:1E:9E:A2:DE:E0:D1:06:86:1C:2E:75:F8:DA:7B:69:94:E0:FF
Certificate issuer: /CN=983dd29a579875009dbc4139668b148b8884b637
Certificate serial: 018CCA995618E255C93913CADBD113D5F3C7
Authority key identifier: 98:3D:D2:9A:57:98:75:00:9D:BC:41:39:66:8B:14:8B:88:84:B6:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD3SmleYdQCdvEE5ZosUi4iEtjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/434e80-299c-4ca5-badd-ab95f7c7a476/1/XkIenqLe4NEGhhwudfjae2mU4P8.roa
Signing time: Tue 02 Jan 2024 14:34:55 +0000
ROA not before: Tue 02 Jan 2024 14:34:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43872
IP address blocks: 185.179.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:56:18:e2:55:c9:39:13:ca:db:d1:13:d5:f3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983dd29a579875009dbc4139668b148b8884b637
Validity
Not Before: Jan 2 14:34:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e421e9ea2dee0d106861c2e75f8da7b6994e0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:eb:ed:13:27:08:89:cb:04:c7:7b:e7:35:3e:
a2:78:4e:f9:5a:e3:ea:5f:0d:e7:d6:92:98:7a:4e:
24:c4:88:ef:6d:6d:b8:32:e5:1b:74:95:14:2f:f3:
75:33:85:9c:db:2e:16:00:67:27:73:a2:97:be:b1:
15:c2:c0:ec:dc:ae:70:96:4e:a7:37:50:a8:c8:eb:
c9:6d:6d:4f:8c:3b:f8:c0:dd:e1:52:88:e6:69:6f:
7e:2c:d2:45:1a:c7:08:3e:b7:8d:ad:e5:5c:df:d6:
71:85:7f:d1:51:5b:bf:0f:fc:ff:6c:e5:d5:b5:c1:
8b:2c:90:81:b3:0c:16:94:1e:d0:4b:77:8f:20:0f:
a4:05:1f:94:2a:4b:76:5e:cf:3e:60:0b:d5:bb:74:
9e:78:3f:a9:9e:88:74:df:fd:35:59:9b:0c:2e:f9:
df:c7:99:24:93:39:aa:f6:6b:e0:16:5d:57:d3:70:
5d:f5:39:dd:0e:12:89:b6:94:64:fc:88:0e:0a:ff:
40:93:09:46:d1:da:84:dc:1c:f8:9c:f5:56:54:a4:
5f:2f:62:81:7a:90:cf:5b:5d:7f:7a:e4:5e:f2:5d:
e8:60:7f:91:1f:db:52:a8:ca:76:52:4b:df:cc:77:
2e:1f:81:01:50:d9:88:45:62:d7:15:68:a7:79:98:
c0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:42:1E:9E:A2:DE:E0:D1:06:86:1C:2E:75:F8:DA:7B:69:94:E0:FF
X509v3 Authority Key Identifier:
keyid:98:3D:D2:9A:57:98:75:00:9D:BC:41:39:66:8B:14:8B:88:84:B6:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD3SmleYdQCdvEE5ZosUi4iEtjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/434e80-299c-4ca5-badd-ab95f7c7a476/1/XkIenqLe4NEGhhwudfjae2mU4P8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/434e80-299c-4ca5-badd-ab95f7c7a476/1/mD3SmleYdQCdvEE5ZosUi4iEtjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.120.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:56:14:dd:10:39:3d:52:f7:40:17:eb:a3:93:3d:bb:c8:45:
bf:15:85:12:15:dd:ad:d9:f1:8e:fd:e3:9f:04:a3:2e:b2:83:
4e:87:b1:74:37:94:f5:41:8a:53:05:46:e0:76:b7:54:53:03:
c0:0e:0d:6f:ba:31:41:5f:bf:34:9d:09:12:4a:9b:6f:a3:00:
6d:24:08:35:75:3d:11:50:31:d3:98:f9:af:bb:12:cc:9f:70:
0d:5e:01:22:e8:d2:3c:cb:c8:98:c2:0a:b6:4c:bd:ae:22:66:
b3:cf:1c:f0:58:fa:82:c3:a0:22:9d:ad:79:7c:3e:2a:49:d0:
a1:e1:d8:0c:09:64:9f:80:0d:95:e6:95:8e:c8:40:5a:94:de:
ea:26:02:1d:2b:b2:dd:5b:c1:7a:02:50:b5:7d:e1:05:7e:80:
d8:a7:50:b5:90:4f:75:99:3c:51:ca:38:d7:2d:d9:94:4c:e7:
17:e3:ad:b0:3c:8f:5f:a0:e4:3f:d8:32:0e:cf:59:62:da:4f:
d9:9c:57:ae:f2:6a:21:66:b4:8e:5f:1a:55:a1:30:f8:0d:26:
ea:13:ce:1d:0b:f4:4b:89:7c:db:0f:51:f4:f6:d9:59:be:3d:
20:72:38:96:97:1d:29:48:d5:fb:4f:12:cc:69:4c:d9:a4:2e:
af:23:82:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:17 2025 by rpki-client