Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8f730d-1344-49c7-a2dd-cbd7fe0da736/1/kUeb0TAPqV38UfAb7sW8m7RgKlU.roa
File: kUeb0TAPqV38UfAb7sW8m7RgKlU.roa (raw, json)
Hash identifier: PEoy63COtAUQxS4btsQ8UBeiWhpMjFJTdzrZgKqrU8s=
Subject key identifier: 91:47:9B:D1:30:0F:A9:5D:FC:51:F0:1B:EE:C5:BC:9B:B4:60:2A:55
Certificate issuer: /CN=168243615fc13a255d8523a85b750e2b650426dd
Certificate serial: 192C26B6
Authority key identifier: 16:82:43:61:5F:C1:3A:25:5D:85:23:A8:5B:75:0E:2B:65:04:26:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoJDYV_BOiVdhSOoW3UOK2UEJt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/8f730d-1344-49c7-a2dd-cbd7fe0da736/1/kUeb0TAPqV38UfAb7sW8m7RgKlU.roa
Signing time: Sat 01 Jan 2022 06:03:44 +0000
ROA not before: Sat 01 Jan 2022 06:03:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59955
IP address blocks: 185.9.136.0/24 maxlen: 24
185.9.139.0/24 maxlen: 24
185.9.137.0/24 maxlen: 24
185.9.138.0/24 maxlen: 24
2a02:dec0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422323894 (0x192c26b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168243615fc13a255d8523a85b750e2b650426dd
Validity
Not Before: Jan 1 06:03:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91479bd1300fa95dfc51f01beec5bc9bb4602a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a8:6d:0b:42:b7:c5:36:01:ee:44:2b:45:fd:
44:18:dc:2c:7e:9b:ac:53:e1:1b:85:aa:6a:c9:33:
d9:fa:82:2c:17:7e:d9:c5:71:eb:dc:ed:28:63:0d:
32:13:26:b4:e6:eb:0b:99:db:c8:71:20:cd:0b:ec:
3d:1a:99:18:db:af:59:df:ab:25:2f:84:05:4c:34:
c1:81:08:3e:f6:86:37:cf:bd:9f:64:b6:ba:50:fe:
41:16:00:50:8b:e7:e3:d0:e9:64:59:cc:8d:e0:82:
c5:89:83:4a:d1:3f:cf:ab:c9:d1:30:99:f9:40:de:
76:2b:10:e0:1f:89:1f:21:65:48:5c:72:29:19:4f:
6c:a5:c8:0f:32:67:e7:43:f4:55:4f:dd:91:b9:0c:
3e:9e:b4:6a:1b:7f:9c:5b:66:b4:85:65:1e:27:b0:
0e:c0:1a:01:67:17:79:d6:eb:2d:f1:5e:47:09:a8:
f3:7f:22:4e:02:59:21:24:38:c6:88:09:10:5b:c6:
6b:6f:e1:1c:e4:17:ea:78:90:f8:29:5e:42:ee:20:
31:7f:e8:dc:94:18:6e:a3:34:14:f1:38:c4:a8:8b:
26:cc:ec:3e:04:9f:e0:01:61:f7:58:7f:81:9c:2b:
db:5e:75:22:9e:30:ed:01:11:cf:16:d9:89:55:76:
8e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:47:9B:D1:30:0F:A9:5D:FC:51:F0:1B:EE:C5:BC:9B:B4:60:2A:55
X509v3 Authority Key Identifier:
keyid:16:82:43:61:5F:C1:3A:25:5D:85:23:A8:5B:75:0E:2B:65:04:26:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoJDYV_BOiVdhSOoW3UOK2UEJt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8f730d-1344-49c7-a2dd-cbd7fe0da736/1/kUeb0TAPqV38UfAb7sW8m7RgKlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8f730d-1344-49c7-a2dd-cbd7fe0da736/1/FoJDYV_BOiVdhSOoW3UOK2UEJt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.136.0/22
IPv6:
2a02:dec0::/32
Signature Algorithm: sha256WithRSAEncryption
16:cd:6f:cb:23:28:39:59:42:12:09:d4:61:17:59:da:ec:4d:
06:0a:09:ee:1b:85:10:f1:e7:39:5a:fe:d0:95:0b:37:04:4f:
68:01:e2:9a:69:74:92:80:db:54:1e:43:48:03:3d:a0:60:42:
11:b1:33:ed:ed:1c:18:70:32:f5:2e:a9:e2:9b:78:6a:a4:87:
b0:30:54:4b:d0:4a:b4:f3:25:27:e1:b7:b8:02:63:a3:a6:43:
12:ba:c4:54:8c:05:39:e9:2c:c0:cc:58:eb:db:1c:b4:b9:54:
fe:22:8b:6a:93:26:c0:de:97:c1:57:de:21:33:04:d8:2c:91:
35:b6:86:4a:94:a4:d1:7a:1b:c5:45:ea:ee:93:31:f4:79:f0:
0a:94:b2:37:a1:5d:7a:a5:6c:96:9a:57:fc:da:8d:13:60:7b:
86:84:62:17:ca:6c:17:36:22:f1:de:e5:fc:7f:bc:e8:86:65:
ae:35:85:59:c7:d2:8c:aa:b1:c2:34:de:d5:30:4a:81:0c:cb:
11:69:f3:e3:0f:45:bb:22:39:70:78:cf:24:fe:a8:e1:e2:34:
96:0b:67:85:8b:98:78:d1:fe:e2:23:d2:5e:69:dc:f8:68:24:
a9:b2:a6:33:52:86:b4:fa:07:47:01:37:0b:0a:bc:43:c6:18:
df:6e:80:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:34 2025 by rpki-client