Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d6fed8-532d-4910-8d2a-5828cdbc2d88/1/YvLf-5lkJDF4UIQofzxdvpB8ljo.roa
File: YvLf-5lkJDF4UIQofzxdvpB8ljo.roa (raw, json)
Hash identifier: z2i8mx/W5sz1x6BZelKm0vrZnc7qW8ogcH/ZaT22tZU=
Subject key identifier: 62:F2:DF:FB:99:64:24:31:78:50:84:28:7F:3C:5D:BE:90:7C:96:3A
Certificate issuer: /CN=50fcce98deef739ea053b5e4e87049533473bf1c
Certificate serial: BE91DD
Authority key identifier: 50:FC:CE:98:DE:EF:73:9E:A0:53:B5:E4:E8:70:49:53:34:73:BF:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPzOmN7vc56gU7Xk6HBJUzRzvxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d6fed8-532d-4910-8d2a-5828cdbc2d88/1/YvLf-5lkJDF4UIQofzxdvpB8ljo.roa
Signing time: Sat 01 Jan 2022 09:55:47 +0000
ROA not before: Sat 01 Jan 2022 09:55:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 185.229.96.0/22 maxlen: 22
185.229.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12489181 (0xbe91dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50fcce98deef739ea053b5e4e87049533473bf1c
Validity
Not Before: Jan 1 09:55:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62f2dffb99642431785084287f3c5dbe907c963a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3b:c1:65:61:d0:65:4e:0d:5f:00:72:16:21:
16:ad:63:41:b9:8e:d3:9c:6b:c0:92:f6:f9:47:89:
5c:c0:a9:7f:43:b8:52:76:22:65:21:09:88:5a:33:
77:59:fc:5a:d3:5b:23:4e:bd:9c:fd:4c:0c:cd:1f:
5d:f3:2d:3d:1a:e6:5f:dd:ee:c2:49:5f:b6:34:1f:
97:65:fb:02:99:55:65:7d:e3:15:2e:f9:29:c0:ca:
e1:bd:b9:63:58:a7:f3:32:f3:0c:7e:1d:2a:92:9a:
87:63:ff:e9:51:d2:48:6d:10:f8:29:7d:b1:f7:1f:
35:8b:1f:d8:a3:61:81:86:f1:98:00:c1:c0:6e:a0:
4f:e5:da:7e:29:40:79:87:4c:ca:75:12:c9:d2:4c:
51:6e:77:8a:45:82:fc:1c:bb:72:17:a4:82:34:19:
47:17:2a:57:92:9c:c3:fb:23:99:b4:0a:5b:c5:2b:
94:f1:03:35:80:94:5c:b5:4c:de:71:ba:1f:8f:3d:
82:e1:c4:c4:f4:d5:27:c2:fb:56:92:98:67:84:e1:
7d:f5:30:af:46:e4:4b:bc:e5:ea:05:ac:ae:ea:e2:
c0:a7:96:14:d3:be:ec:c3:2b:ee:8e:01:6b:a1:55:
62:e5:27:68:2f:03:a6:0e:66:6f:00:5c:49:6a:19:
bb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F2:DF:FB:99:64:24:31:78:50:84:28:7F:3C:5D:BE:90:7C:96:3A
X509v3 Authority Key Identifier:
keyid:50:FC:CE:98:DE:EF:73:9E:A0:53:B5:E4:E8:70:49:53:34:73:BF:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPzOmN7vc56gU7Xk6HBJUzRzvxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d6fed8-532d-4910-8d2a-5828cdbc2d88/1/YvLf-5lkJDF4UIQofzxdvpB8ljo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d6fed8-532d-4910-8d2a-5828cdbc2d88/1/UPzOmN7vc56gU7Xk6HBJUzRzvxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.44.0/22
185.229.96.0/22
Signature Algorithm: sha256WithRSAEncryption
66:f3:61:5e:79:0f:d4:fc:e0:e7:60:0c:79:11:c9:3e:bb:95:
d7:18:f2:99:e1:b5:e8:b1:70:13:08:4d:4a:36:9c:09:13:d4:
2b:ff:2a:c2:55:00:08:e6:7b:4c:cf:8e:89:10:60:cb:24:8e:
26:b8:f4:09:d7:dc:17:53:e7:87:2c:62:b0:48:e4:40:4e:af:
46:b6:be:1b:3e:5f:2c:63:05:44:e6:8c:64:25:1b:94:03:01:
05:0c:6f:00:57:03:56:19:50:ad:ca:7f:09:0e:c6:ff:f9:91:
77:d6:74:8d:27:51:17:16:f7:a0:9c:8c:73:42:1c:15:dc:ec:
9d:bf:1b:74:ec:c0:7a:b4:5f:71:04:e6:ed:5a:8c:96:8e:48:
50:b1:4b:cb:b6:aa:a3:72:eb:49:72:0c:ea:18:e0:0b:db:b5:
37:d6:55:30:d7:b4:72:cb:8d:ef:d0:98:5f:d7:b4:6b:4e:5f:
b4:73:85:b0:18:0e:5f:0f:32:8d:53:64:19:bb:78:92:26:8c:
0b:1d:0c:f0:52:97:55:85:94:e7:91:90:10:b8:f4:1e:bd:17:
26:c4:8c:da:7e:52:97:c9:cd:1d:ff:07:a8:af:33:ef:21:f5:
15:31:18:c7:b2:38:ae:67:70:c2:5f:08:5b:dd:e4:3c:70:9b:
a8:6a:25:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:31:30 2025 by rpki-client