Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/6ba2d0-b9d4-4ff9-9dcc-baa891d80677/1/8NVeIdY9CjqgqWXMQRuhV7yXct4.roa
File: 8NVeIdY9CjqgqWXMQRuhV7yXct4.roa (raw, json)
Hash identifier: DiiYCCXvq1OXLxsn/6F3gmvBUtgh9ypIqTqMLBmqNRY=
Subject key identifier: F0:D5:5E:21:D6:3D:0A:3A:A0:A9:65:CC:41:1B:A1:57:BC:97:72:DE
Certificate issuer: /CN=29852162f073224b1af5be6f7fd9a840a284dbbb
Certificate serial: 89AE
Authority key identifier: 29:85:21:62:F0:73:22:4B:1A:F5:BE:6F:7F:D9:A8:40:A2:84:DB:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYUhYvBzIksa9b5vf9moQKKE27s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/6ba2d0-b9d4-4ff9-9dcc-baa891d80677/1/8NVeIdY9CjqgqWXMQRuhV7yXct4.roa
Signing time: Tue 28 Jun 2022 08:10:02 +0000
ROA not before: Tue 28 Jun 2022 08:10:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60982
IP address blocks: 185.22.0.0/24 maxlen: 24
185.22.3.0/24 maxlen: 24
185.22.2.0/24 maxlen: 24
185.22.1.0/24 maxlen: 24
2a04:1bc3::/32 maxlen: 32
2a04:1bc7::/32 maxlen: 32
2a04:1bc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35246 (0x89ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29852162f073224b1af5be6f7fd9a840a284dbbb
Validity
Not Before: Jun 28 08:10:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0d55e21d63d0a3aa0a965cc411ba157bc9772de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:eb:76:ae:fc:0a:fa:0f:7c:fd:90:13:eb:a3:
16:a1:a1:23:0a:6b:d1:6d:da:7a:e3:35:7b:1f:83:
8f:df:34:c8:0c:29:02:dc:85:e4:08:aa:5c:9c:66:
c8:74:4d:c1:57:85:2e:c3:a8:64:64:f4:0a:b4:8c:
d5:f8:6d:54:7c:df:b9:95:95:55:3f:73:45:8a:e4:
7c:24:b9:b6:67:fc:54:8a:f0:d4:6c:79:77:91:d0:
da:a9:18:98:9f:f8:fd:c9:65:22:9a:c5:d9:c5:ce:
d8:41:d3:a1:6c:a9:c8:c6:8f:2c:e0:8f:ea:12:22:
51:78:9e:ed:21:cf:51:f7:c3:19:c9:10:68:2c:d4:
79:50:c0:76:b7:5b:cf:05:b4:9b:5b:20:0c:69:10:
1a:fb:b6:11:15:17:00:a0:c9:c9:5c:2f:13:42:44:
3d:42:d4:3d:51:94:e0:d4:93:b0:b2:0e:47:ef:b4:
23:61:d6:7c:1c:79:9b:57:78:43:80:78:70:2b:85:
ce:5d:bb:7e:28:15:ae:fb:b9:03:12:ce:e7:d3:04:
2d:9a:6f:c4:da:b2:9c:80:78:62:1c:c3:62:00:25:
06:11:9b:69:a0:9e:b8:4f:2e:bb:40:17:d0:2b:47:
2b:ce:f1:9f:06:a0:4c:47:23:e9:ab:68:f4:7c:1f:
08:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D5:5E:21:D6:3D:0A:3A:A0:A9:65:CC:41:1B:A1:57:BC:97:72:DE
X509v3 Authority Key Identifier:
keyid:29:85:21:62:F0:73:22:4B:1A:F5:BE:6F:7F:D9:A8:40:A2:84:DB:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUhYvBzIksa9b5vf9moQKKE27s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6ba2d0-b9d4-4ff9-9dcc-baa891d80677/1/8NVeIdY9CjqgqWXMQRuhV7yXct4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6ba2d0-b9d4-4ff9-9dcc-baa891d80677/1/KYUhYvBzIksa9b5vf9moQKKE27s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.0.0/22
IPv6:
2a04:1bc0::/32
2a04:1bc3::/32
2a04:1bc7::/32
Signature Algorithm: sha256WithRSAEncryption
c0:73:3a:71:ff:a5:ec:dd:76:f4:6c:23:75:16:1c:83:e4:76:
5f:c9:a2:c4:b0:ef:88:9a:36:9c:8f:ef:06:57:03:88:cf:e9:
d8:b7:bb:6a:a2:fa:ef:38:6d:b4:66:a0:ea:11:c4:70:32:56:
f8:e5:f7:70:96:9e:88:9b:e9:e3:49:00:6c:4b:47:91:b2:37:
44:ee:10:d9:d9:b0:78:78:a6:07:23:17:28:11:82:7c:a9:50:
90:b4:27:06:54:45:7c:ec:4e:b8:c6:17:d9:41:35:0f:b4:2c:
06:ee:7a:24:a6:62:71:c2:36:55:1f:79:72:a3:84:fb:7b:cb:
b7:83:6a:74:d8:19:fd:00:69:2b:4e:95:b3:d4:40:45:bd:10:
08:03:e8:32:3d:24:9a:1a:1a:0a:f7:0d:24:40:2c:87:ae:c7:
6e:6d:e4:20:10:ec:27:33:af:3f:45:4f:06:a9:14:19:44:a0:
95:e1:f7:1d:eb:72:1e:61:ae:9c:3c:55:7a:52:ca:5f:5e:c7:
f0:d2:68:26:4f:9a:d4:47:00:54:a7:3d:6d:00:e3:cf:c5:50:
d6:60:14:3d:f3:45:23:76:b9:28:a8:5c:b7:9f:85:22:60:92:
b1:99:a5:00:34:7e:07:65:81:62:3a:67:76:29:3c:b4:bf:13:
0c:b4:56:28
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 04:17:42 2025 by rpki-client