Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a4bdf9-3ca2-4d64-a1ac-17b9e32da5a9/1/5oaNXyHntqs6dYFeAom-Lpbqu3g.roa
File: 5oaNXyHntqs6dYFeAom-Lpbqu3g.roa (raw, json)
Hash identifier: 2plpuabDV6Vzz4BkVKr7d6KaPIRBA/IL7oIjt78U2AA=
Subject key identifier: E6:86:8D:5F:21:E7:B6:AB:3A:75:81:5E:02:89:BE:2E:96:EA:BB:78
Certificate issuer: /CN=7097b9a4fc8fa314795a6a277d0e85f2cccaee3f
Certificate serial: 01856DDD404BD5B3B2CC086BF9CC5B3F000A
Authority key identifier: 70:97:B9:A4:FC:8F:A3:14:79:5A:6A:27:7D:0E:85:F2:CC:CA:EE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJe5pPyPoxR5WmonfQ6F8szK7j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a4bdf9-3ca2-4d64-a1ac-17b9e32da5a9/1/5oaNXyHntqs6dYFeAom-Lpbqu3g.roa
Signing time: Sun 01 Jan 2023 15:04:54 +0000
ROA not before: Sun 01 Jan 2023 15:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204379
IP address blocks: 185.250.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:40:4b:d5:b3:b2:cc:08:6b:f9:cc:5b:3f:00:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7097b9a4fc8fa314795a6a277d0e85f2cccaee3f
Validity
Not Before: Jan 1 15:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6868d5f21e7b6ab3a75815e0289be2e96eabb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:ab:ac:a2:03:8b:74:49:94:ca:c6:44:d6:
7d:ae:9f:64:5e:e7:ee:fc:23:ea:19:9f:26:67:90:
66:52:cd:73:19:cc:cf:d0:a9:7f:43:a0:a6:e0:bd:
4f:5e:93:ed:ca:3b:4d:0c:47:32:9f:4b:3f:c1:d9:
34:06:3c:55:ce:44:bb:08:f6:c4:e8:c1:8f:b2:68:
fd:3d:66:ab:e0:8d:9e:82:e9:17:81:05:29:b7:c3:
eb:05:c9:40:6f:e8:9b:77:27:59:0e:4c:76:ce:29:
07:9c:3f:5e:7c:4b:d1:64:7a:20:17:fb:7f:f3:95:
24:77:43:51:73:3e:65:f2:fe:cc:cd:9c:62:39:b1:
b3:9b:5a:2e:ac:be:d2:cd:27:28:e2:fb:6f:a6:44:
da:e2:8c:9a:0c:ef:67:31:f9:68:31:84:b2:c0:d6:
02:c1:44:b7:dd:e5:7f:a1:88:7c:37:16:d3:f1:62:
17:b1:88:6a:73:55:1e:b4:09:df:9f:cb:94:49:0d:
f5:05:3b:e5:ee:3d:30:09:2f:5f:76:dd:c7:e8:22:
bd:48:22:b8:78:11:8b:91:42:1c:5a:4c:c1:c3:bc:
8e:f7:71:ed:49:72:1d:87:cf:f0:3f:94:22:d3:4d:
6d:a1:35:0b:75:5e:df:1e:a0:fd:93:d0:5c:f1:46:
dc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:86:8D:5F:21:E7:B6:AB:3A:75:81:5E:02:89:BE:2E:96:EA:BB:78
X509v3 Authority Key Identifier:
keyid:70:97:B9:A4:FC:8F:A3:14:79:5A:6A:27:7D:0E:85:F2:CC:CA:EE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJe5pPyPoxR5WmonfQ6F8szK7j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a4bdf9-3ca2-4d64-a1ac-17b9e32da5a9/1/5oaNXyHntqs6dYFeAom-Lpbqu3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a4bdf9-3ca2-4d64-a1ac-17b9e32da5a9/1/cJe5pPyPoxR5WmonfQ6F8szK7j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.144.0/22
Signature Algorithm: sha256WithRSAEncryption
16:9f:fb:41:88:96:75:ed:08:b0:96:c4:fc:b4:1a:e2:47:c4:
41:4a:bd:dd:20:04:9d:f4:ab:72:9b:5e:d9:f7:4e:41:39:49:
46:cf:1a:f3:13:de:8b:b5:81:61:f2:2f:cf:3b:81:54:1e:7a:
71:49:04:7a:6b:54:b1:be:3b:b8:c7:9f:31:3e:aa:ac:d5:8a:
65:6b:74:1a:85:10:bd:1e:3d:22:78:cc:b0:4a:f6:86:76:2b:
a0:62:27:12:9f:57:1d:d8:f5:23:a8:fc:97:6e:98:85:6c:2c:
6e:2e:fa:de:3d:0d:b8:37:72:f3:3e:1e:24:bd:76:d8:0f:19:
d2:06:a4:72:1b:1e:50:20:2c:e2:d1:13:f9:ee:7e:96:1d:99:
a5:26:71:6d:3e:10:2e:cb:18:32:22:98:46:bf:d4:8a:9a:32:
fe:13:08:ec:3e:15:73:81:95:74:b4:c8:aa:19:fb:f0:7a:b5:
9e:f2:01:e9:18:d7:cf:32:d2:30:b3:e1:2c:0c:49:21:13:8d:
5a:4a:d8:ee:d9:e9:a4:c8:a5:08:43:1d:86:82:59:66:d4:5b:
cd:6b:80:04:1b:fe:f3:d1:be:37:54:93:6b:40:f6:58:81:8d:
b9:70:1d:78:b1:52:e0:fa:1d:9e:14:c2:c0:08:0c:e6:c6:4a:
de:e3:fe:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:46:46 2025 by rpki-client