Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/I-Jy3aqkRJTwvKMWR1PEhwByj0E.roa
File: I-Jy3aqkRJTwvKMWR1PEhwByj0E.roa (raw, json)
Hash identifier: +pPfr8j5J60u7BPb9XTFBhTLhhFfiyhEWBs2vohRnNo=
Subject key identifier: 23:E2:72:DD:AA:A4:44:94:F0:BC:A3:16:47:53:C4:87:00:72:8F:41
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01821B92D5C25C8CB21B476AC7DCF6170A23
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/I-Jy3aqkRJTwvKMWR1PEhwByj0E.roa
Signing time: Wed 20 Jul 2022 12:26:23 +0000
ROA not before: Wed 20 Jul 2022 12:26:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396319
IP address blocks: 185.195.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1b:92:d5:c2:5c:8c:b2:1b:47:6a:c7:dc:f6:17:0a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 20 12:26:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23e272ddaaa44494f0bca3164753c48700728f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:f1:1e:7e:4e:65:42:03:47:be:56:57:12:
0b:49:c9:46:e3:47:bc:cc:81:83:c9:a7:19:41:a4:
c9:81:d0:85:cb:13:5b:ee:95:fb:16:7c:06:c4:79:
22:c0:19:87:78:56:03:ba:70:01:38:6f:c1:55:87:
12:d2:c0:5e:c7:f7:f9:5a:18:7d:2a:60:c0:9d:07:
2a:0a:77:6f:9f:cd:a4:83:c1:22:3f:54:15:e1:78:
30:65:f6:39:49:68:46:e6:4a:a1:b2:d2:4b:4e:73:
81:66:05:b3:fa:bf:bd:1e:ab:17:5a:aa:48:9f:ca:
26:99:61:5b:bd:0d:d4:c9:e7:34:28:a7:c6:6c:36:
8f:8a:e0:40:0e:d1:a6:b2:b6:d9:0f:51:5b:df:16:
b4:1a:bf:b5:43:dc:f4:04:28:ce:89:2b:f2:d6:e5:
2a:85:76:7f:23:05:c1:df:ec:65:a7:d9:cc:96:42:
dd:56:ad:0d:a2:f2:48:35:bd:3d:03:bf:eb:89:0f:
c4:81:0c:91:08:8a:36:6e:84:f6:28:3c:2a:04:8f:
72:fd:d0:ac:44:2a:e9:e0:1d:84:aa:0b:4a:82:32:
18:b2:e6:4a:ba:71:bd:c0:e4:c0:2e:d6:f3:1c:8f:
18:9b:c9:7b:22:de:10:97:66:24:95:e9:4f:9a:50:
8e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E2:72:DD:AA:A4:44:94:F0:BC:A3:16:47:53:C4:87:00:72:8F:41
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/I-Jy3aqkRJTwvKMWR1PEhwByj0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.238.0/24
Signature Algorithm: sha256WithRSAEncryption
35:be:b9:5c:e1:f4:fa:a7:9b:3c:fc:8d:3a:6e:35:d7:24:09:
55:78:81:71:0b:ed:06:3b:5d:e9:05:b8:2c:25:da:60:c5:75:
2b:f1:13:21:c4:e8:7c:a4:63:c2:1d:20:bf:81:f7:06:54:e5:
4f:ea:39:48:c4:be:58:a9:f0:c0:43:10:4b:8c:89:13:9a:b0:
04:43:2f:68:1e:50:14:7b:3e:b9:91:cc:9c:03:17:41:a9:69:
99:04:24:20:96:00:97:fd:f5:50:85:cf:01:c4:9e:24:70:81:
93:0d:d2:77:33:ee:b5:3f:4f:21:aa:5e:02:0c:61:72:00:a1:
fd:0c:b6:62:f7:bd:61:b9:80:66:d7:37:ff:5f:24:85:38:de:
09:23:c7:6b:77:f3:43:3b:7d:d7:60:ff:86:1a:af:1c:a4:84:
4b:b2:79:69:53:09:aa:d2:9c:21:a7:0c:23:37:24:eb:be:a0:
52:f2:d2:88:83:ec:f6:97:cc:74:e5:bf:a3:18:dc:5b:f2:28:
0b:5a:52:66:b3:e4:3a:32:f4:f3:e9:0c:06:91:15:07:7f:6c:
5c:46:f2:4f:57:6d:2b:af:81:12:e0:34:c8:b0:b0:39:0b:8b:
4e:8e:a0:3f:6a:72:cf:b8:6b:ad:b0:0e:88:b2:59:bb:97:1b:
31:59:d2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:49:40 2025 by rpki-client