Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/_XiLijgDxace1FZb-vi48CewtUY.roa
File: _XiLijgDxace1FZb-vi48CewtUY.roa (raw, json)
Hash identifier: ON6C2zNyV7VqAXI7GFwZ3MUxMo/22kkMaaj6mr+TnlI=
Subject key identifier: FD:78:8B:8A:38:03:C5:A7:1E:D4:56:5B:FA:F8:B8:F0:27:B0:B5:46
Certificate issuer: /CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Certificate serial: 0184D470FB093ED61DEE213F22E47273A501
Authority key identifier: D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/_XiLijgDxace1FZb-vi48CewtUY.roa
Signing time: Fri 02 Dec 2022 20:04:44 +0000
ROA not before: Fri 02 Dec 2022 20:04:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211057
IP address blocks: 185.203.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d4:70:fb:09:3e:d6:1d:ee:21:3f:22:e4:72:73:a5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Validity
Not Before: Dec 2 20:04:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd788b8a3803c5a71ed4565bfaf8b8f027b0b546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:62:af:25:6e:bb:08:b2:85:12:94:54:db:ab:
05:6d:b2:c4:08:91:a4:ed:fa:00:56:7a:c5:da:5e:
cf:cc:01:79:27:1a:00:f3:6e:25:ab:f9:ca:6f:64:
97:7c:03:6a:2e:42:6e:5d:58:5f:83:42:ff:2f:01:
d3:cb:f3:5d:6a:53:fd:25:7b:d4:1d:2c:1a:9a:70:
2f:a4:4b:c2:0e:26:41:e7:7b:c9:d7:fe:01:8d:70:
c2:d6:f0:39:b4:28:69:fb:4a:a8:30:7f:fd:b2:90:
96:55:37:e5:eb:7f:8a:94:ec:85:da:90:dd:8b:86:
54:df:c2:4f:0c:b4:c2:59:16:a9:43:c5:60:7b:c2:
8f:75:de:52:ba:f7:f0:d6:a2:0e:88:c8:0f:34:c4:
e4:03:7e:09:42:d2:b1:95:69:22:19:f8:2d:0d:53:
c3:8c:97:b7:12:c3:bd:80:b6:3d:43:e2:df:a5:61:
39:02:e5:07:e1:28:3d:54:1e:74:e5:db:16:fd:3a:
0b:5c:f4:a2:5f:67:51:77:d1:23:f7:7d:64:5c:76:
cf:4d:ad:c9:9d:d8:0a:9d:4d:cf:f7:28:2e:55:48:
ff:b2:3f:82:c0:94:8f:45:d5:b8:26:25:13:57:2b:
21:6e:4c:1f:2b:8f:01:10:bf:93:c5:ad:3a:9d:ee:
8f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:78:8B:8A:38:03:C5:A7:1E:D4:56:5B:FA:F8:B8:F0:27:B0:B5:46
X509v3 Authority Key Identifier:
keyid:D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/_XiLijgDxace1FZb-vi48CewtUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.66.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:95:34:97:89:6e:a9:57:b9:9d:ff:9d:3f:20:bb:f0:1d:7f:
3c:02:cd:7c:ab:07:6a:b6:c5:ec:c9:77:68:a4:79:2c:c7:30:
f9:7d:95:90:db:14:e9:c7:52:74:13:9d:19:50:dc:5a:0a:33:
05:61:d2:28:2d:0b:b5:d8:2f:f5:a0:a0:ce:9b:d1:2e:eb:17:
f3:d1:fb:4d:ca:5f:b0:68:4e:9b:0e:f2:da:32:82:c9:8c:20:
e7:aa:00:5a:53:16:70:f5:d7:c3:61:d9:db:17:f6:5f:b0:87:
d6:e8:de:66:48:a1:eb:14:ac:0c:e0:bb:60:dd:10:35:72:38:
13:5c:fa:40:fa:3a:2a:c3:17:f9:f9:d8:47:45:42:06:3d:04:
03:c6:75:30:e8:b1:52:61:9c:59:01:5c:d9:63:f5:18:df:5a:
62:a6:64:6d:47:9a:f7:b9:2f:ac:4a:0d:97:70:95:7e:28:72:
e1:c7:b4:e8:38:f8:e6:77:8b:6a:19:22:03:08:09:e9:bf:9e:
7f:31:40:68:ca:63:97:74:98:7d:b9:6f:43:85:eb:7c:e0:9b:
39:4b:c2:a4:7f:07:7b:4b:06:60:87:ee:5d:03:60:96:db:e7:
4f:27:c6:38:39:b4:7f:cd:34:88:1e:61:ba:dd:ca:a0:de:a7:
07:fa:46:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:09:29 2025 by rpki-client