Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/OLekDxkEr_JGlE1jL6Gr4XR1Lss.roa
File: OLekDxkEr_JGlE1jL6Gr4XR1Lss.roa (raw, json)
Hash identifier: G/1Cpf4n73o1gZS4wv9s9jallMa6gnL5T2Tm8QrsWUQ=
Subject key identifier: 38:B7:A4:0F:19:04:AF:F2:46:94:4D:63:2F:A1:AB:E1:74:75:2E:CB
Certificate issuer: /CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Certificate serial: 12F3DBFA
Authority key identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/OLekDxkEr_JGlE1jL6Gr4XR1Lss.roa
Signing time: Sat 01 Jan 2022 14:06:42 +0000
ROA not before: Sat 01 Jan 2022 14:06:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5505
IP address blocks: 185.123.204.0/24 maxlen: 24
185.123.205.0/24 maxlen: 24
185.123.204.0/22 maxlen: 22
185.123.206.0/24 maxlen: 24
185.123.207.0/24 maxlen: 24
2a03:9320::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317971450 (0x12f3dbfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Validity
Not Before: Jan 1 14:06:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38b7a40f1904aff246944d632fa1abe174752ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:85:e8:a6:7f:3d:45:f7:42:31:3e:48:8d:13:
a1:80:54:df:0f:73:21:07:82:02:ec:5d:3a:71:7c:
12:14:5b:aa:69:09:17:94:05:48:a7:0d:35:a9:e6:
2b:93:ef:3b:37:2e:7f:fd:04:15:0b:d6:cd:e9:9c:
18:e0:98:3b:d2:98:f0:22:54:2b:87:6d:e9:e7:51:
26:e7:85:2f:d5:34:7b:12:15:ff:9b:0c:e7:16:5a:
4b:14:9b:20:68:53:24:7e:f7:17:e2:bf:3f:88:61:
64:cd:5a:f9:9d:3f:6c:6c:7d:0a:d6:8c:45:d4:79:
9b:0c:d4:d2:e8:33:7e:ce:8a:0e:31:1c:0c:71:b7:
8b:8e:62:2b:c0:19:fc:a9:07:50:22:48:17:8f:b2:
2f:4a:80:a5:bd:3f:85:45:fa:df:68:67:60:51:7c:
1d:a3:11:43:2b:28:6a:06:4a:bc:74:ad:d3:73:cd:
d4:ad:e4:47:53:24:33:f1:c3:91:73:30:79:29:1e:
9d:3d:c8:31:87:fc:27:27:0a:00:22:db:9e:cb:68:
bd:4a:28:06:0a:f2:a4:26:28:c8:fa:51:f4:b8:c9:
31:4c:63:68:76:11:01:81:34:b4:c6:80:60:af:28:
ba:40:2d:3a:b1:81:11:9e:ac:3a:f0:1f:0f:16:63:
23:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B7:A4:0F:19:04:AF:F2:46:94:4D:63:2F:A1:AB:E1:74:75:2E:CB
X509v3 Authority Key Identifier:
keyid:F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/OLekDxkEr_JGlE1jL6Gr4XR1Lss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.204.0/22
IPv6:
2a03:9320::/32
Signature Algorithm: sha256WithRSAEncryption
88:c6:70:b3:fe:7e:cd:d1:82:bc:0d:e7:48:66:b8:e0:95:96:
10:f3:bf:44:8e:6e:73:fb:76:c8:53:1d:15:cc:12:92:54:a7:
a7:60:bc:d9:0b:4b:7b:f1:f3:77:f9:aa:ac:22:27:87:1a:5b:
b6:b0:18:c6:19:57:ef:94:d1:a8:eb:90:6d:9a:77:34:45:2a:
b6:09:15:d8:f1:bb:43:2c:de:c4:cf:a4:15:bf:19:5a:a3:ab:
84:6d:8e:2d:d4:65:80:a4:01:87:13:54:c1:2e:fd:10:99:f2:
b7:5c:1d:70:db:3a:a0:20:92:f0:98:a7:9a:6d:fc:e5:1f:ba:
b7:e9:a4:6b:55:0e:c1:8b:71:b7:eb:9e:51:24:83:79:35:93:
66:14:70:ef:64:6e:ab:6e:10:10:0c:d1:66:a5:76:63:f0:27:
af:44:e9:06:2a:d1:36:ba:5e:d3:22:02:85:f4:09:4a:22:6e:
ba:b3:08:05:a8:2b:47:83:15:8c:e5:24:31:a2:9e:7d:41:76:
21:f4:e9:21:d5:85:3d:c5:96:b7:0f:8a:cd:2b:9a:f8:6b:e5:
48:fb:69:7a:89:ba:32:a1:85:bf:cb:14:ad:b0:6e:2b:d1:f7:
15:47:14:47:59:ce:80:f4:f1:32:3f:3b:5a:7c:2a:6c:e1:4a:
3b:78:dd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:10 2025 by rpki-client