Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/fbwAxP_bZk2l5VI1fB_vOQzvj-I.roa
File: fbwAxP_bZk2l5VI1fB_vOQzvj-I.roa (raw, json)
Hash identifier: D2eo08KqasQdgNcqmx1qAbUS2nplfEfbWeME2NtCScc=
Subject key identifier: 7D:BC:00:C4:FF:DB:66:4D:A5:E5:52:35:7C:1F:EF:39:0C:EF:8F:E2
Certificate issuer: /CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
Certificate serial: 018337B4F5D03E2C1B7460FEC58DC1212E74
Authority key identifier: 09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/fbwAxP_bZk2l5VI1fB_vOQzvj-I.roa
Signing time: Tue 13 Sep 2022 16:35:49 +0000
ROA not before: Tue 13 Sep 2022 16:35:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3280
IP address blocks: 185.150.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:37:b4:f5:d0:3e:2c:1b:74:60:fe:c5:8d:c1:21:2e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
Validity
Not Before: Sep 13 16:35:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7dbc00c4ffdb664da5e552357c1fef390cef8fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f2:00:53:96:46:dc:72:c4:06:93:bb:4a:0f:
4e:7e:c4:a1:4b:04:5f:b0:42:6b:52:86:9e:3b:f2:
4f:a8:32:9a:4e:90:9d:a2:9d:02:a5:cc:5a:31:4b:
39:e6:97:e8:4d:a6:36:ce:a2:29:e4:58:94:7a:c9:
ff:7a:11:79:ea:e7:ce:ab:0c:7a:fa:0e:7a:1a:31:
e9:73:a9:ec:d0:df:2e:5f:d3:0f:f1:21:41:11:ab:
a6:80:82:94:30:75:53:03:8b:8b:68:6f:41:de:73:
69:79:34:d7:64:71:db:71:7d:13:cc:aa:4f:63:72:
cb:0e:a3:6a:b8:6b:4f:cd:fb:0c:a9:ca:ff:ce:a8:
9b:ae:d7:83:3f:fe:86:d2:e5:1d:f5:de:47:f2:2a:
b6:88:55:26:33:38:4a:0a:14:56:b6:79:fc:36:03:
cf:bb:cb:31:9e:a4:fc:39:be:45:f3:e2:0f:bc:d7:
69:d1:0d:bb:5b:4e:10:85:02:ca:fe:03:30:89:1c:
32:7f:a3:02:15:9b:63:54:98:c0:cd:83:58:c8:e5:
9e:f5:2f:fd:e6:55:67:8f:bc:d8:8c:99:ed:3d:88:
fe:2a:39:62:04:f8:4a:d0:0b:26:3c:6b:a4:71:db:
d8:10:54:98:99:1b:96:f3:70:8a:38:94:5b:26:b1:
5c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BC:00:C4:FF:DB:66:4D:A5:E5:52:35:7C:1F:EF:39:0C:EF:8F:E2
X509v3 Authority Key Identifier:
keyid:09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/fbwAxP_bZk2l5VI1fB_vOQzvj-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/CbnTdFC2KuPxROtCrFLOJDtiino.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.18.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b2:d7:3a:29:ab:2b:2e:ab:f6:43:ab:ab:6d:9f:56:69:96:
cb:8e:e0:17:e9:f9:10:3e:02:8b:41:a9:8d:b6:15:25:c1:05:
e6:9e:6b:50:d5:46:03:21:ef:64:72:6a:12:b5:1b:11:5b:5f:
a4:3d:02:da:22:85:32:13:41:4d:db:9f:e3:25:dd:15:1d:82:
40:d1:a2:5e:6d:84:84:e8:1c:3f:5b:ae:d9:ee:af:a1:ac:5b:
0d:18:6c:9c:e7:5a:e2:16:d5:45:b4:3c:6b:a6:7b:3c:be:1a:
ce:b4:2b:5c:66:13:31:f3:1c:be:d4:25:07:a9:d0:6a:56:eb:
a5:fa:2f:9c:65:3d:f8:b5:e4:54:bc:be:95:10:fe:33:8a:e2:
5a:69:82:93:f8:0e:f0:9a:f2:5c:ad:f1:e0:dc:cf:b0:e7:a5:
93:96:c1:12:1e:20:cc:83:1e:07:a2:2c:3a:ac:55:c4:ce:a6:
f8:ca:69:1a:93:25:f8:55:0f:70:24:23:c9:54:8d:13:66:5d:
fc:dd:d6:f8:95:a2:13:7b:d6:a5:bc:f2:bf:bc:f3:18:e5:5c:
4a:4b:6f:6a:3a:03:2b:64:9c:21:fd:ba:45:42:c0:43:b0:93:
4a:1b:49:d3:19:21:94:55:ae:7c:07:7c:1b:8b:d6:4c:5f:07:
c9:5d:ed:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:21:42 2025 by rpki-client