Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7d3b5f-42ee-4c89-b802-4b6babecfaad/1/liyPgrZL6alDlBwCaSAmJDjLk6I.roa
File: liyPgrZL6alDlBwCaSAmJDjLk6I.roa (raw, json)
Hash identifier: m4B13mhongMRxY2AKjn3TEsnKJa9o/aryeGyAmgWwPE=
Subject key identifier: 96:2C:8F:82:B6:4B:E9:A9:43:94:1C:02:69:20:26:24:38:CB:93:A2
Certificate issuer: /CN=b9205ccee6691af500b96a732fa386dbf97f0a67
Certificate serial: 2CF3E4
Authority key identifier: B9:20:5C:CE:E6:69:1A:F5:00:B9:6A:73:2F:A3:86:DB:F9:7F:0A:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uSBczuZpGvUAuWpzL6OG2_l_Cmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7d3b5f-42ee-4c89-b802-4b6babecfaad/1/liyPgrZL6alDlBwCaSAmJDjLk6I.roa
Signing time: Sat 01 Jan 2022 01:53:18 +0000
ROA not before: Sat 01 Jan 2022 01:53:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207185
IP address blocks: 185.157.4.0/22 maxlen: 22
185.157.4.0/24 maxlen: 24
185.157.5.0/24 maxlen: 24
185.157.6.0/24 maxlen: 24
185.157.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2946020 (0x2cf3e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9205ccee6691af500b96a732fa386dbf97f0a67
Validity
Not Before: Jan 1 01:53:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=962c8f82b64be9a943941c026920262438cb93a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:34:8f:c6:24:7c:b2:fa:45:6f:4d:5f:3c:
57:63:b5:b6:c7:ad:dd:03:1f:ee:18:41:3c:65:9b:
32:14:5e:72:ef:19:8d:6a:cd:0e:b5:a0:4a:25:6b:
c5:31:a3:7d:6a:5d:8b:41:96:96:44:b5:8f:1f:29:
db:27:59:38:8d:87:7a:8e:31:71:1d:70:bd:f1:8d:
5f:e8:3c:94:e1:06:48:66:f3:23:a9:51:ff:8f:9b:
a2:2d:7c:39:ee:89:87:20:65:d3:61:23:95:e9:55:
c9:11:3c:ed:9e:57:28:bd:b5:fd:2b:15:ee:93:fa:
61:82:6f:a4:f9:3f:19:c9:e1:b9:33:54:6a:db:b8:
cd:46:22:20:19:07:b1:1d:eb:aa:c8:17:18:ae:2e:
bf:5c:7f:5a:a4:a6:6b:55:8a:44:99:bb:f9:f1:62:
45:14:5f:b6:9f:d3:db:ef:a5:a3:35:db:f1:b2:d6:
99:f2:fd:00:45:93:c6:f3:21:62:16:a1:bc:50:d4:
98:fd:2b:19:63:18:fe:c2:bb:7f:b0:ce:cb:49:d1:
67:3c:9b:36:00:12:e2:b8:f9:99:c4:8b:5a:85:29:
08:a6:bb:12:ff:a7:52:6e:45:32:4c:f0:01:b1:28:
33:fd:de:85:76:d1:86:83:fd:25:fc:1f:a5:8d:9a:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2C:8F:82:B6:4B:E9:A9:43:94:1C:02:69:20:26:24:38:CB:93:A2
X509v3 Authority Key Identifier:
keyid:B9:20:5C:CE:E6:69:1A:F5:00:B9:6A:73:2F:A3:86:DB:F9:7F:0A:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSBczuZpGvUAuWpzL6OG2_l_Cmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7d3b5f-42ee-4c89-b802-4b6babecfaad/1/liyPgrZL6alDlBwCaSAmJDjLk6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7d3b5f-42ee-4c89-b802-4b6babecfaad/1/uSBczuZpGvUAuWpzL6OG2_l_Cmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.4.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:d4:c5:cc:77:fc:f2:4e:e5:66:1b:ca:d2:40:bc:b4:ed:9c:
db:d7:99:76:3c:ef:ca:4d:0a:9f:af:69:e4:1e:8e:45:06:97:
90:1c:e4:0f:28:0f:4a:72:8d:50:40:f0:c5:ea:1a:ca:72:9d:
c4:50:64:90:31:d8:f3:af:cf:5a:4a:30:14:74:2c:64:85:5c:
c8:29:f8:f4:fd:aa:35:6a:78:1f:83:bb:10:a7:a3:fa:d7:a4:
4d:76:19:8f:09:f8:26:46:1d:7c:56:86:af:90:bf:b8:a9:62:
21:7f:56:7b:4f:29:b5:6e:bb:21:a0:c5:93:8f:23:e6:bb:ec:
e1:e0:53:c8:1a:fa:13:b2:27:e6:6e:90:43:9b:3a:fc:ee:b7:
d6:16:38:8e:a2:57:79:22:11:c9:ad:ec:12:c4:b6:b0:16:8a:
b9:88:63:05:63:82:6f:e3:fc:28:31:44:c0:30:30:21:22:96:
ef:cf:db:0e:46:33:48:d8:0c:2e:ab:56:a1:ee:1f:86:47:b1:
98:0a:92:79:81:42:35:4c:c7:04:b4:34:96:a7:13:2a:ec:05:
36:33:fb:78:85:01:8e:66:d7:33:09:eb:a7:55:4c:5b:c8:9a:
1a:08:ab:78:80:92:0a:29:5e:1f:b9:59:20:da:02:d8:0d:b1:
18:0e:80:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:59:53 2025 by rpki-client