Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9a10bf-57b5-4954-a94b-13b2ab7ebebf/1/9dJY3-3Lw0muzvyEN9d1VJe05Ck.roa
File: 9dJY3-3Lw0muzvyEN9d1VJe05Ck.roa (raw, json)
Hash identifier: /wm7HvRMzy3WWQsta/kxtA+/9mhNqMet33J4x2j4oos=
Subject key identifier: F5:D2:58:DF:ED:CB:C3:49:AE:CE:FC:84:37:D7:75:54:97:B4:E4:29
Certificate issuer: /CN=5ae2c2e1164d674eac0eb7c9cfee3868455e9f1d
Certificate serial: AC3B81
Authority key identifier: 5A:E2:C2:E1:16:4D:67:4E:AC:0E:B7:C9:CF:EE:38:68:45:5E:9F:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuLC4RZNZ06sDrfJz-44aEVenx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9a10bf-57b5-4954-a94b-13b2ab7ebebf/1/9dJY3-3Lw0muzvyEN9d1VJe05Ck.roa
Signing time: Sat 01 Jan 2022 03:00:48 +0000
ROA not before: Sat 01 Jan 2022 03:00:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203498
IP address blocks: 185.254.212.0/22 maxlen: 22
2a0c:5647::/32 maxlen: 32
2a0c:5642::/32 maxlen: 32
2a0c:5641::/32 maxlen: 32
2a0c:5645::/32 maxlen: 32
2a0c:5640::/29 maxlen: 29
2a0c:5646::/32 maxlen: 32
2a0c:5644::/32 maxlen: 32
2a0c:5643::/32 maxlen: 32
2a0c:5640::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11287425 (0xac3b81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae2c2e1164d674eac0eb7c9cfee3868455e9f1d
Validity
Not Before: Jan 1 03:00:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5d258dfedcbc349aecefc8437d7755497b4e429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:54:1e:60:77:b3:a9:28:03:9d:1b:dd:c0:5b:
b1:07:04:5c:d1:a6:62:1b:9e:c3:71:7f:4f:16:ae:
de:bd:2d:38:87:8d:11:7b:93:95:68:a9:2f:b6:71:
e2:5c:e8:ff:d7:bf:26:99:e2:40:19:2d:cf:58:55:
86:2e:cb:22:93:02:d7:d3:45:10:76:73:17:ce:20:
9f:a5:ac:56:f9:30:b8:34:e7:6a:71:7e:f6:12:7d:
c4:31:c0:4d:52:fd:08:a7:80:60:55:ed:c1:36:b2:
02:be:c9:a6:e0:65:f8:54:3a:22:54:9d:12:d1:d2:
9e:7a:bd:ad:67:11:70:ed:09:be:75:4d:2e:a1:9f:
7c:02:e8:fc:bc:c9:5b:c6:04:a8:4d:38:87:fb:7c:
ad:b4:20:ef:bf:ef:20:b4:92:19:c4:c5:3c:d7:49:
c8:f7:0e:2d:82:6c:04:fb:85:1d:8e:c9:be:1c:0a:
d3:8e:29:83:3b:ba:68:3b:ba:f6:87:ad:7e:aa:55:
e6:ab:6e:c9:17:ba:e6:49:02:e8:32:ce:d4:97:73:
6d:4e:ff:75:c8:ca:11:1b:45:18:8d:58:7a:b1:9f:
f0:f1:6b:f1:ca:a1:7e:aa:7b:86:1b:30:47:30:30:
ba:bd:ff:4e:b4:02:f1:b7:9d:dc:7d:70:d5:5c:71:
e7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D2:58:DF:ED:CB:C3:49:AE:CE:FC:84:37:D7:75:54:97:B4:E4:29
X509v3 Authority Key Identifier:
keyid:5A:E2:C2:E1:16:4D:67:4E:AC:0E:B7:C9:CF:EE:38:68:45:5E:9F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuLC4RZNZ06sDrfJz-44aEVenx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9a10bf-57b5-4954-a94b-13b2ab7ebebf/1/9dJY3-3Lw0muzvyEN9d1VJe05Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9a10bf-57b5-4954-a94b-13b2ab7ebebf/1/WuLC4RZNZ06sDrfJz-44aEVenx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.212.0/22
IPv6:
2a0c:5640::/29
Signature Algorithm: sha256WithRSAEncryption
6b:a1:bf:36:98:f8:3a:14:ca:f2:d8:d1:c1:21:81:91:b5:c5:
6e:70:f8:7c:40:fa:37:b8:16:de:77:06:0e:f8:95:9b:a8:47:
f9:16:85:46:97:26:6d:f0:78:db:6a:58:de:19:0d:d4:60:08:
c8:96:4b:d2:ee:3b:0e:3a:f8:fc:a6:6e:74:1d:67:3b:b6:23:
bd:00:a8:d9:7b:4c:36:ba:93:f0:98:bc:fe:dc:30:af:35:5b:
7d:6a:31:9b:d7:69:e9:c2:6b:77:b1:38:1e:37:14:85:c6:90:
92:f3:b1:5f:69:d7:d6:3c:2a:c5:7a:b6:f2:4e:0a:dd:e2:99:
27:6f:c8:0e:29:05:dc:4f:27:f1:7f:6c:cd:01:dd:73:1c:fc:
78:9a:cb:43:9e:ba:0c:5b:b0:2c:00:6c:a0:d2:3f:b2:bb:b7:
58:28:1f:b6:a2:d0:ad:9d:3b:1d:0c:89:d4:41:da:60:09:9d:
c0:7d:88:c4:57:ae:e3:8e:86:69:99:2b:1b:b7:dd:ca:09:34:
b5:7e:82:76:fa:15:13:69:db:a9:d6:28:a0:ff:c7:37:be:cf:
ba:bc:7f:81:30:dc:fb:8d:3f:18:1f:03:b5:78:c5:ff:f3:5d:
58:8f:27:05:4c:5a:d3:73:06:51:63:3b:fb:94:ac:a9:2b:db:
95:17:41:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:38 2025 by rpki-client