Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c36836-a2c8-4771-a958-974fcfef263b/1/T6LC7jTuiz6pLAZ2LxwRmXq14RQ.roa
File: T6LC7jTuiz6pLAZ2LxwRmXq14RQ.roa (raw, json)
Hash identifier: fRYB31BjWG38nDvyu1AzhBt61yf7cjxFOud950oFPZw=
Subject key identifier: 4F:A2:C2:EE:34:EE:8B:3E:A9:2C:06:76:2F:1C:11:99:7A:B5:E1:14
Certificate issuer: /CN=1b2646828a9ea7bf8d40b4f9f0ba44ccdcb2cedd
Certificate serial: 072ADCE1
Authority key identifier: 1B:26:46:82:8A:9E:A7:BF:8D:40:B4:F9:F0:BA:44:CC:DC:B2:CE:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyZGgoqep7-NQLT58LpEzNyyzt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c36836-a2c8-4771-a958-974fcfef263b/1/T6LC7jTuiz6pLAZ2LxwRmXq14RQ.roa
Signing time: Sat 01 Jan 2022 05:01:43 +0000
ROA not before: Sat 01 Jan 2022 05:01:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207169
IP address blocks: 185.238.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120249569 (0x72adce1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2646828a9ea7bf8d40b4f9f0ba44ccdcb2cedd
Validity
Not Before: Jan 1 05:01:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fa2c2ee34ee8b3ea92c06762f1c11997ab5e114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:29:bc:72:e2:55:18:e3:62:a9:71:07:55:ce:
03:6b:9e:34:da:b5:28:bc:1d:e6:8c:bd:c4:29:53:
20:5b:e5:5f:03:09:db:8f:20:66:64:7d:5d:a1:05:
5d:60:89:b8:d8:f9:43:1d:8c:57:4c:b0:af:46:89:
0e:78:76:26:33:cd:d5:6f:d9:ad:67:3b:74:79:9c:
0a:3b:c6:ed:d9:9d:14:0f:45:f3:88:4b:ab:81:7c:
60:a3:50:06:15:ca:d2:a2:69:28:0b:6e:25:db:42:
a5:63:35:c6:be:0f:d6:6a:ad:d8:ad:a6:c3:c0:02:
d7:09:69:3c:c3:c5:9d:51:f3:7a:a6:71:8c:27:dd:
2a:2d:64:65:ce:48:38:27:03:e4:15:24:77:dc:f7:
b5:00:f1:3f:f9:6a:3d:05:10:fc:4f:13:d4:0d:c9:
65:8e:75:86:bc:1d:ac:17:9b:c2:3b:c2:78:0f:d5:
29:36:c3:19:22:9e:65:17:a6:b9:0a:26:0a:76:9b:
ec:46:a4:d1:11:6d:fd:10:a8:48:96:23:99:63:93:
ba:c5:f1:8a:bf:0e:ac:94:a1:e1:88:7a:4e:84:3e:
f0:dc:46:fc:52:ca:7e:5e:7a:28:b5:e4:aa:b4:84:
61:1d:22:c8:ce:24:74:98:26:58:b7:e3:99:86:1f:
7c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A2:C2:EE:34:EE:8B:3E:A9:2C:06:76:2F:1C:11:99:7A:B5:E1:14
X509v3 Authority Key Identifier:
keyid:1B:26:46:82:8A:9E:A7:BF:8D:40:B4:F9:F0:BA:44:CC:DC:B2:CE:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyZGgoqep7-NQLT58LpEzNyyzt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c36836-a2c8-4771-a958-974fcfef263b/1/T6LC7jTuiz6pLAZ2LxwRmXq14RQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c36836-a2c8-4771-a958-974fcfef263b/1/GyZGgoqep7-NQLT58LpEzNyyzt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.68.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:cc:a3:5b:8a:fc:de:a7:e4:3f:03:fa:a3:99:5d:0f:a8:cf:
d3:9c:a5:6d:03:58:1e:f4:20:fe:35:60:4c:1b:aa:9e:e1:56:
21:8a:7c:6f:45:bd:b9:d7:1c:3d:49:d1:0b:d6:7a:a3:56:8d:
45:74:66:5c:9d:06:1d:c0:e8:3f:05:a8:c5:aa:1e:0a:b5:4f:
f8:dd:fb:1d:36:0b:e6:42:cf:43:33:21:54:5b:ef:2f:cd:4e:
50:38:6f:c3:c2:88:d6:d2:8d:1f:34:3e:31:43:5a:a4:df:94:
e6:56:71:33:d1:1e:1c:a4:39:bc:b3:a3:4d:69:c9:d7:07:2a:
54:b9:3a:2a:3c:b8:65:3b:c2:d7:d7:75:c4:56:8e:14:4e:1c:
d1:ea:d5:71:18:26:b2:63:d3:0a:30:64:f5:61:94:12:ca:0b:
41:2b:c7:4a:86:1a:e1:bb:c8:8e:9a:84:42:28:54:2d:3c:69:
c2:f4:84:55:e6:79:eb:a9:6a:e2:2e:3d:bf:1a:60:b1:7c:4a:
30:06:f3:c2:62:78:0c:e2:35:c3:bf:61:27:0d:dc:83:71:01:
4a:8b:dd:a4:a8:a6:29:53:cd:07:f6:56:d9:ec:eb:95:7c:56:
16:01:c7:9a:44:5c:ae:74:e2:19:b2:72:12:0d:ee:4b:bb:19:
e7:8c:77:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:17 2025 by rpki-client