Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/xINcawvsG8J1JrtlZ2PX2uMNK1Q.roa
File: xINcawvsG8J1JrtlZ2PX2uMNK1Q.roa (raw, json)
Hash identifier: XL7xwKoc1ZWUbMWy7X3IU3jhWIJj62gFs703jg+utOY=
Subject key identifier: C4:83:5C:6B:0B:EC:1B:C2:75:26:BB:65:67:63:D7:DA:E3:0D:2B:54
Certificate issuer: /CN=fc9be4ed4e54b601e6b6a42d0ba04cfb7ab2c3bf
Certificate serial: 080E9D01
Authority key identifier: FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/xINcawvsG8J1JrtlZ2PX2uMNK1Q.roa
Signing time: Sat 01 Jan 2022 06:59:44 +0000
ROA not before: Sat 01 Jan 2022 06:59:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202319
IP address blocks: 185.166.104.0/24 maxlen: 24
185.166.105.0/24 maxlen: 24
185.166.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135175425 (0x80e9d01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9be4ed4e54b601e6b6a42d0ba04cfb7ab2c3bf
Validity
Not Before: Jan 1 06:59:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4835c6b0bec1bc27526bb656763d7dae30d2b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:89:f3:0f:c6:86:2c:f3:c4:21:10:30:77:
dd:8e:93:48:1b:75:ea:03:9c:c5:44:bd:cd:0c:bb:
a3:25:7d:d9:20:27:31:46:ca:f7:13:73:ea:3a:62:
e2:4a:e9:f4:9d:24:ed:de:72:49:a2:ac:cf:34:0d:
b0:ea:df:05:93:be:2e:a6:ff:ce:b1:9e:70:31:9f:
49:f3:9f:10:39:1b:8e:1a:88:bf:44:5f:4d:a9:1f:
20:c6:2b:d3:40:4b:11:33:98:b7:f4:83:54:98:24:
87:14:fb:57:aa:c1:95:c8:0a:08:9b:76:a4:11:7e:
37:ec:ac:e5:96:59:c9:a1:ea:16:b6:e9:c4:94:6e:
71:ba:91:3a:8e:be:b1:4d:de:2f:0c:8b:6f:00:db:
d9:30:80:8b:9a:a8:ed:25:48:35:1a:cc:bc:1d:20:
02:19:3e:86:6d:e5:db:16:fb:b8:44:4f:6c:2f:bd:
b3:0f:9d:58:be:20:b5:a9:ef:d1:93:2b:95:32:28:
3f:bb:d2:10:4c:c5:43:e7:0d:2f:29:39:5e:79:22:
00:f4:0f:41:aa:5f:a0:82:0c:9e:e0:94:15:5f:e0:
64:c9:9e:16:a1:f6:a7:26:60:76:ad:2b:62:4a:75:
e0:d0:3f:e1:ce:ec:d1:79:80:a6:4b:ce:00:53:50:
81:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:83:5C:6B:0B:EC:1B:C2:75:26:BB:65:67:63:D7:DA:E3:0D:2B:54
X509v3 Authority Key Identifier:
keyid:FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/xINcawvsG8J1JrtlZ2PX2uMNK1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.104.0/23
185.166.107.0/24
Signature Algorithm: sha256WithRSAEncryption
17:d4:98:95:de:dc:1a:2c:36:d4:f3:4b:6f:e3:9d:2e:43:d4:
cf:8d:43:26:76:81:d0:b1:e9:2d:a2:7a:89:b2:5f:7e:3a:28:
02:af:b0:4f:87:30:eb:9b:13:fe:57:8a:85:41:97:fd:4f:2e:
ef:da:19:46:c1:d2:64:bb:f2:f3:8d:b0:c0:68:7b:c6:fc:b3:
63:d9:b7:6d:12:7c:47:3d:d8:8a:1e:63:e7:2b:18:01:60:7b:
ea:d3:85:bf:81:f3:a2:fa:13:7a:69:87:eb:53:dc:00:e4:52:
7d:f5:6c:85:ae:d8:c1:7e:2f:bf:7a:c5:63:ac:00:17:cf:a1:
2d:89:10:b4:c5:64:61:8b:4c:6a:f5:94:96:ed:db:03:8e:7a:
da:52:1a:9d:83:95:46:57:3b:fe:52:a5:7e:5e:84:57:4c:7e:
9b:a5:00:c8:76:66:72:cf:a1:81:e1:0a:c7:c4:97:54:9a:00:
e9:99:6e:a9:25:55:6b:24:fb:99:06:d3:3a:ca:95:ba:2d:fa:
12:44:9e:80:23:be:59:d6:47:4f:c3:a0:af:9b:16:3c:63:68:
73:15:ed:c2:e4:c0:95:72:c4:a5:51:9e:bd:fc:7d:d1:78:86:
94:d2:19:fd:e1:7a:85:d9:e4:40:a7:b0:b0:94:58:f9:d2:24:
71:7e:42:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:24:25 2025 by rpki-client