Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/7f2ba9-b94c-402e-8ecc-23bfb271d598/1/bS97OSCTZUljSzVx8C7gsIrl7Qg.roa
File: bS97OSCTZUljSzVx8C7gsIrl7Qg.roa (raw, json)
Hash identifier: hCskUwCa/fZtuc+ZRuccPxfdw+SoG+jeghZFXrDTCEM=
Subject key identifier: 6D:2F:7B:39:20:93:65:49:63:4B:35:71:F0:2E:E0:B0:8A:E5:ED:08
Certificate issuer: /CN=4345d73e82f3ffd715e62f506bfb8f3c1ed45fc9
Certificate serial: 09D202DA
Authority key identifier: 43:45:D7:3E:82:F3:FF:D7:15:E6:2F:50:6B:FB:8F:3C:1E:D4:5F:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0XXPoLz_9cV5i9Qa_uPPB7UX8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/7f2ba9-b94c-402e-8ecc-23bfb271d598/1/bS97OSCTZUljSzVx8C7gsIrl7Qg.roa
Signing time: Sat 01 Jan 2022 11:03:23 +0000
ROA not before: Sat 01 Jan 2022 11:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206753
IP address blocks: 185.177.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164758234 (0x9d202da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4345d73e82f3ffd715e62f506bfb8f3c1ed45fc9
Validity
Not Before: Jan 1 11:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d2f7b3920936549634b3571f02ee0b08ae5ed08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:88:a1:23:78:ec:98:ed:9a:5b:8b:4b:1f:cd:
f7:50:15:69:3c:d3:19:11:57:99:86:25:3a:4b:c4:
23:b3:f0:10:da:f2:27:fc:b0:34:2a:9d:c1:99:49:
8c:8c:00:d7:1a:c0:b2:dd:e0:dc:cb:0b:6b:8a:f0:
02:e3:28:a6:12:15:ce:4b:0e:56:83:e3:bb:b3:37:
5c:8c:2c:9c:99:83:5a:45:88:3d:de:18:a3:16:42:
2c:89:52:4c:68:f6:67:ad:4d:0b:ce:13:39:49:99:
25:20:d8:ff:a4:00:b1:97:19:4f:87:70:5c:30:aa:
91:26:e7:c9:84:2a:18:87:ba:24:18:84:3f:ba:84:
6c:e0:27:21:57:43:f7:4f:6a:67:3a:88:a6:57:bf:
c8:80:e8:63:2c:11:d4:04:da:7e:8f:e0:91:d8:b8:
2c:a2:c6:08:ea:64:3f:df:f9:3f:75:db:75:72:11:
f7:2a:63:5a:ac:67:6c:16:fd:db:3b:ea:8a:fc:90:
a8:bf:89:8b:06:da:b6:8f:c4:0e:db:84:6e:6e:b9:
06:a5:5b:01:b6:55:9e:f4:fc:53:1e:e0:97:f5:b3:
62:dd:d5:0f:4b:4b:18:12:64:ea:f5:d7:5f:0d:32:
55:b0:25:7e:23:77:4b:a1:28:95:21:3d:37:62:b1:
8c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2F:7B:39:20:93:65:49:63:4B:35:71:F0:2E:E0:B0:8A:E5:ED:08
X509v3 Authority Key Identifier:
keyid:43:45:D7:3E:82:F3:FF:D7:15:E6:2F:50:6B:FB:8F:3C:1E:D4:5F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0XXPoLz_9cV5i9Qa_uPPB7UX8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7f2ba9-b94c-402e-8ecc-23bfb271d598/1/bS97OSCTZUljSzVx8C7gsIrl7Qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7f2ba9-b94c-402e-8ecc-23bfb271d598/1/Q0XXPoLz_9cV5i9Qa_uPPB7UX8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.52.0/22
Signature Algorithm: sha256WithRSAEncryption
01:66:d8:ae:7c:17:a4:fd:7d:d2:a5:c3:4e:a4:c5:3e:1a:39:
f3:c8:99:a2:88:e0:d3:10:f5:b0:35:83:60:76:af:b5:a8:69:
44:3e:22:92:88:1e:16:91:05:3f:cb:5f:14:3a:64:61:98:3e:
4d:13:bb:a0:ca:bc:91:a8:0b:98:96:09:05:69:e7:04:61:dc:
f3:4a:db:40:7b:cf:9e:aa:c8:1f:82:5d:d3:3e:00:2e:57:c5:
8a:6d:33:69:c5:d2:5d:5b:8d:39:72:c1:39:2b:e5:39:39:3d:
49:d1:b2:f0:b2:b3:22:79:a4:68:2c:a8:db:12:99:24:bc:38:
06:fc:58:9a:41:b2:74:23:45:93:05:44:b8:6a:4a:78:7b:ac:
5f:b5:bd:e4:6b:35:80:6e:4e:e4:49:28:c1:85:1f:e7:f3:b2:
7f:8d:29:0b:80:56:fc:63:a7:98:3f:12:07:4f:f6:f1:90:42:
3e:7b:78:b5:d9:9d:37:79:3c:7d:dd:9e:d3:85:c7:40:da:4d:
c9:72:df:ef:33:e1:ff:42:50:1e:82:07:1b:a2:c8:e7:7f:e7:
94:ea:77:73:bb:2d:e9:45:70:c2:32:ef:9c:e2:49:c9:1b:2a:
2e:7d:32:00:0c:71:22:d4:6f:77:72:c9:0c:05:76:7e:2b:59:
b2:a9:68:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:57:48 2025 by rpki-client