Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/8e206b-e987-461a-ad00-fbbc76ea96d5/1/tYWrenKISHSo-V7HjQxBEaE58yo.roa
File: tYWrenKISHSo-V7HjQxBEaE58yo.roa (raw, json)
Hash identifier: eD4mxYJPUJGPKUJknEkoK4yPszom1gzRGNkiZm1fBjw=
Subject key identifier: B5:85:AB:7A:72:88:48:74:A8:F9:5E:C7:8D:0C:41:11:A1:39:F3:2A
Certificate issuer: /CN=b3d307a986092cd65fc93419863e03d98944011a
Certificate serial: 01856FDDCDCA559C93F5D9747EC0BD092382
Authority key identifier: B3:D3:07:A9:86:09:2C:D6:5F:C9:34:19:86:3E:03:D9:89:44:01:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9MHqYYJLNZfyTQZhj4D2YlEARo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/8e206b-e987-461a-ad00-fbbc76ea96d5/1/tYWrenKISHSo-V7HjQxBEaE58yo.roa
Signing time: Mon 02 Jan 2023 00:24:45 +0000
ROA not before: Mon 02 Jan 2023 00:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48551
IP address blocks: 185.74.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:dd:cd:ca:55:9c:93:f5:d9:74:7e:c0:bd:09:23:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d307a986092cd65fc93419863e03d98944011a
Validity
Not Before: Jan 2 00:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b585ab7a72884874a8f95ec78d0c4111a139f32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:06:65:50:f2:61:45:ce:49:97:20:dc:17:e2:
76:70:ed:c7:db:37:22:83:e6:3e:6a:bd:fa:53:ce:
7e:d6:a7:b1:d8:8b:62:b5:a2:f3:8b:d5:13:83:9c:
eb:a0:cd:c3:40:30:32:a7:7f:e9:b3:cc:38:1e:70:
b5:fd:f9:2b:71:89:ac:d3:0d:f2:53:14:7e:14:f9:
38:f1:3c:26:2a:da:7b:cc:a6:17:22:fc:06:44:e3:
a6:be:1d:c2:00:60:c9:ab:d3:01:6f:46:56:73:d2:
97:a3:08:b9:19:dd:95:99:d6:bb:2d:c8:42:f0:94:
be:34:bb:61:1a:07:dd:13:bf:40:f8:cb:9d:bc:72:
24:3c:cf:70:13:ef:80:cd:36:66:ab:d5:23:58:d0:
78:e5:2f:a8:b0:45:0b:16:1c:67:1f:b1:31:2c:9f:
34:2d:e5:a1:b4:ee:2c:dc:8f:9c:68:17:2e:7b:7d:
a6:c7:81:1e:5c:fe:47:f1:fc:b9:1c:91:77:39:a4:
eb:6c:31:a8:35:a3:68:55:3d:04:07:10:e5:56:d9:
50:4d:5a:e2:ed:20:07:14:e0:99:a9:b9:70:71:4a:
3e:d5:e5:16:41:7f:13:00:79:a6:8c:4d:e3:2a:87:
81:f7:7a:f5:f3:fe:e5:fe:4c:aa:0f:ba:2a:62:f6:
f4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:85:AB:7A:72:88:48:74:A8:F9:5E:C7:8D:0C:41:11:A1:39:F3:2A
X509v3 Authority Key Identifier:
keyid:B3:D3:07:A9:86:09:2C:D6:5F:C9:34:19:86:3E:03:D9:89:44:01:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9MHqYYJLNZfyTQZhj4D2YlEARo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/8e206b-e987-461a-ad00-fbbc76ea96d5/1/tYWrenKISHSo-V7HjQxBEaE58yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/8e206b-e987-461a-ad00-fbbc76ea96d5/1/s9MHqYYJLNZfyTQZhj4D2YlEARo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.221.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:13:6f:c1:b3:e8:5e:b0:ce:d6:23:65:23:8b:c9:c7:fb:92:
bf:38:d6:0a:d4:24:64:7f:20:8a:cc:86:2e:9f:46:0e:6c:b9:
c4:8f:a8:ac:1f:6f:c8:61:7a:54:a5:ab:17:2f:69:2e:94:cb:
7e:62:b1:97:4b:32:08:19:0a:9b:74:a9:4e:17:eb:da:45:90:
74:f9:a1:a6:f2:f6:19:97:8f:8a:dd:a6:10:f2:52:c1:bb:df:
c7:fb:79:41:1c:b4:34:49:2a:77:7e:c9:15:3b:d5:91:18:99:
8f:04:2d:6c:be:c1:a1:b4:42:b6:09:d2:1b:99:97:b0:6c:2e:
68:a6:cd:47:e4:53:70:2a:8d:ad:06:b7:c7:6f:1c:1d:72:1b:
f7:db:ed:63:15:66:b7:c6:da:77:b3:14:11:48:bd:74:e2:f7:
46:e1:3d:65:0b:5b:55:5b:0f:22:0a:ba:da:0c:5c:80:06:b0:
de:11:4c:4c:88:4a:b2:8a:b2:23:83:2f:79:d8:02:0d:9f:31:
b7:93:bf:5b:75:f5:73:ad:25:8f:5f:67:16:55:fd:34:fb:b0:
fc:a9:d4:8b:0c:f5:17:3e:a3:85:d1:69:58:73:58:ee:e1:99:
4d:31:bf:04:74:00:50:1e:d2:55:09:93:e1:c6:99:b2:e2:ee:
25:2b:5e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:33:13 2025 by rpki-client