Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3495b4-7b60-4a83-8c68-93c444668034/1/Gf6UobvJ2urVqWhFe40T0XnByN8.roa
File: Gf6UobvJ2urVqWhFe40T0XnByN8.roa (raw, json)
Hash identifier: PSHeNqipUpaEHcS7PEhc+ubo6QA9tCcCXRRnK0EDIBE=
Subject key identifier: 19:FE:94:A1:BB:C9:DA:EA:D5:A9:68:45:7B:8D:13:D1:79:C1:C8:DF
Certificate issuer: /CN=992be8d0a80d0665d8c6af41834665c88d6dfe76
Certificate serial: 047CE9FB
Authority key identifier: 99:2B:E8:D0:A8:0D:06:65:D8:C6:AF:41:83:46:65:C8:8D:6D:FE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSvo0KgNBmXYxq9Bg0ZlyI1t_nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3495b4-7b60-4a83-8c68-93c444668034/1/Gf6UobvJ2urVqWhFe40T0XnByN8.roa
Signing time: Sat 01 Jan 2022 11:03:27 +0000
ROA not before: Sat 01 Jan 2022 11:03:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212599
IP address blocks: 185.134.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75295227 (0x47ce9fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992be8d0a80d0665d8c6af41834665c88d6dfe76
Validity
Not Before: Jan 1 11:03:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19fe94a1bbc9daead5a968457b8d13d179c1c8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:07:34:ae:31:d9:f3:6c:ff:03:24:3b:6e:1d:
ce:3e:65:ed:de:0e:cf:9d:1e:95:ef:ed:c5:b6:ae:
4e:19:7d:65:d3:6b:08:49:66:96:19:e6:9d:e0:4d:
74:42:7c:3b:23:70:4c:b1:67:64:e9:67:27:49:54:
c9:43:09:db:1e:18:4b:45:6d:69:41:d4:25:c0:d0:
74:6e:43:17:af:a0:4a:04:0c:88:5b:f0:ed:77:36:
56:e5:f3:7b:68:d4:79:bd:2f:2b:15:c9:08:d3:85:
0c:36:0c:30:23:e4:74:7f:cf:ee:13:a2:89:7c:86:
63:78:45:68:0d:02:af:66:3e:d2:ec:8f:f4:82:39:
5a:d3:92:db:ef:5d:24:68:12:93:af:cf:52:f4:29:
40:4e:31:38:46:12:b1:4e:dc:40:a5:31:ee:55:ac:
5d:1e:92:cb:4c:c6:81:5b:24:6f:e6:90:40:5c:ec:
91:fa:e0:5a:e7:0c:f9:25:eb:65:78:ac:47:55:28:
fa:9c:7c:e9:4a:2a:17:c5:51:e8:78:f2:76:ee:ea:
e0:fc:d8:aa:29:31:4b:8f:c3:cb:d2:32:12:87:81:
5f:cc:78:c8:77:ed:b4:68:b4:cb:b7:5c:d2:1d:df:
39:09:4a:90:f5:16:00:41:a6:54:5b:d5:72:af:f3:
3f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FE:94:A1:BB:C9:DA:EA:D5:A9:68:45:7B:8D:13:D1:79:C1:C8:DF
X509v3 Authority Key Identifier:
keyid:99:2B:E8:D0:A8:0D:06:65:D8:C6:AF:41:83:46:65:C8:8D:6D:FE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSvo0KgNBmXYxq9Bg0ZlyI1t_nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3495b4-7b60-4a83-8c68-93c444668034/1/Gf6UobvJ2urVqWhFe40T0XnByN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3495b4-7b60-4a83-8c68-93c444668034/1/mSvo0KgNBmXYxq9Bg0ZlyI1t_nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.175.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:98:f1:e3:37:fe:30:a8:62:8d:89:b3:9d:89:f1:87:24:39:
94:2f:59:8e:23:97:a5:a3:74:96:13:cc:a8:cb:16:37:5c:d7:
6a:a7:37:65:d1:1f:2b:69:8d:ec:97:36:56:a1:72:44:bd:fa:
d8:33:b6:29:93:53:6d:05:ab:c2:57:83:2f:55:c6:dc:9d:fc:
bc:1f:a3:b4:7b:59:eb:16:d6:a8:70:c1:ce:55:59:0d:66:fe:
13:a9:e3:7a:5c:10:fd:a6:e8:47:85:69:75:65:60:ff:05:b4:
8a:67:6d:4e:ba:ad:dd:ed:a6:34:33:e0:e2:e9:82:fd:22:6c:
61:fe:93:60:73:c3:fb:80:e3:aa:ea:a7:89:5d:57:7c:0a:20:
c4:1c:ca:8c:50:a2:1e:ed:5b:aa:a5:38:83:e5:1c:01:15:ad:
32:67:91:53:a5:75:a3:b0:a8:11:d0:cb:ab:f1:85:d1:bd:dc:
00:de:57:71:39:e6:3c:2d:db:5a:23:61:07:e9:ae:b0:5a:68:
ac:c8:1e:12:95:b9:39:05:7e:2b:0c:1d:d3:e9:1a:97:92:5d:
fa:e1:fe:e9:6c:03:ac:18:30:1b:8e:5d:75:f1:a4:a9:3c:58:
e0:8b:97:97:c2:a1:a1:59:a8:19:ab:11:8a:ba:2d:41:fd:34:
50:1d:32:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 21:15:59 2025 by rpki-client