Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1336d4-4281-4763-af29-47fe9c7a4d84/1/Fi06OugObhK_djWzO5jDN1HRsPc.roa
File: Fi06OugObhK_djWzO5jDN1HRsPc.roa (raw, json)
Hash identifier: F4fhpHS0DRA/qcTub46cLNXqYgFlBv+KhoFGeHsA4jk=
Subject key identifier: 16:2D:3A:3A:E8:0E:6E:12:BF:76:35:B3:3B:98:C3:37:51:D1:B0:F7
Certificate issuer: /CN=ba04db2fcb0c5b55651f1c1bbb4d95c745578dcf
Certificate serial: 2911BA
Authority key identifier: BA:04:DB:2F:CB:0C:5B:55:65:1F:1C:1B:BB:4D:95:C7:45:57:8D:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ugTbL8sMW1VlHxwbu02Vx0VXjc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1336d4-4281-4763-af29-47fe9c7a4d84/1/Fi06OugObhK_djWzO5jDN1HRsPc.roa
Signing time: Sat 01 Jan 2022 00:51:18 +0000
ROA not before: Sat 01 Jan 2022 00:51:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.114.84.0/22 maxlen: 24
185.142.192.0/22 maxlen: 24
185.27.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2691514 (0x2911ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba04db2fcb0c5b55651f1c1bbb4d95c745578dcf
Validity
Not Before: Jan 1 00:51:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=162d3a3ae80e6e12bf7635b33b98c33751d1b0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a2:41:7e:83:78:2e:ea:44:ce:00:20:ec:91:
af:ce:63:67:e3:8b:9a:62:fe:44:9d:88:44:2b:24:
3e:50:21:d3:a6:7a:3e:0f:0e:88:fe:8c:dc:a2:c7:
c7:31:55:f2:a7:44:fe:d0:4f:64:a4:d2:0e:15:85:
35:c2:93:7d:69:2e:40:35:e9:33:22:79:94:6a:4b:
68:58:a1:a7:ea:dd:4e:a8:52:6a:b4:5d:d3:c2:11:
ae:9a:38:a6:d8:d3:1a:a2:e1:82:08:92:bb:0b:9b:
2a:3d:77:33:d8:4e:b1:23:06:cb:d2:44:8a:ee:12:
0d:26:25:b0:5d:54:a3:38:2a:8f:60:57:b7:e1:0e:
8e:70:37:71:a9:20:d4:c2:89:75:d3:c2:8e:88:2e:
95:44:23:2c:20:e4:04:ad:2d:d9:1d:86:a6:c5:7e:
07:a1:2f:35:74:f5:5d:33:cc:d3:08:8a:74:cd:67:
00:62:92:8c:3b:c9:6c:7d:a8:47:b2:38:35:79:24:
36:47:51:ce:c7:b1:9d:0c:4f:b0:9b:09:a4:f9:6b:
f8:cc:99:d2:c0:78:c1:26:6c:fa:45:44:9e:14:b0:
52:db:64:2b:2b:be:2a:61:03:f4:69:d9:4a:6c:9e:
b2:bb:23:45:70:29:3f:b4:85:05:a6:e3:94:57:ee:
8b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2D:3A:3A:E8:0E:6E:12:BF:76:35:B3:3B:98:C3:37:51:D1:B0:F7
X509v3 Authority Key Identifier:
keyid:BA:04:DB:2F:CB:0C:5B:55:65:1F:1C:1B:BB:4D:95:C7:45:57:8D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ugTbL8sMW1VlHxwbu02Vx0VXjc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1336d4-4281-4763-af29-47fe9c7a4d84/1/Fi06OugObhK_djWzO5jDN1HRsPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1336d4-4281-4763-af29-47fe9c7a4d84/1/ugTbL8sMW1VlHxwbu02Vx0VXjc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.136.0/22
185.114.84.0/22
185.142.192.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:41:da:64:0b:35:64:6f:16:37:7b:f5:e2:bc:37:f1:3a:64:
cc:bc:78:56:ab:95:a7:d3:de:d2:3d:67:1f:16:f9:b7:90:59:
bd:39:10:7f:a8:10:43:e9:aa:ea:54:d2:c0:6d:67:4b:ab:20:
65:95:6f:00:0a:d9:b3:23:f6:2a:87:15:59:12:59:90:50:55:
8d:69:9e:4b:99:b7:99:74:92:cc:04:cf:57:26:9e:34:0f:d9:
41:66:e2:1f:df:93:bb:49:2d:c3:4e:2a:64:ab:d4:a7:31:06:
27:ea:46:64:80:51:80:e8:1e:05:32:1a:f3:76:be:63:4f:20:
9a:92:89:c4:8a:53:d5:51:e0:03:98:05:22:08:8b:29:6b:aa:
d2:b1:22:e8:e7:0d:ad:54:5e:f8:f0:0e:39:48:e8:50:ca:f0:
c3:ff:43:48:99:cc:72:36:cd:e2:d9:38:9c:b0:77:49:5e:70:
01:3b:53:cb:7e:7f:04:e4:69:51:e4:5d:be:91:52:3c:dd:14:
ae:ba:eb:1f:ea:5b:df:5b:90:b6:c7:a0:49:e9:2b:8e:69:9c:
5a:fb:29:b9:2e:59:b2:bf:92:5c:b1:92:a9:e1:5a:5b:a7:4e:
57:da:83:ff:b4:90:d0:a1:0f:cd:2d:0b:f6:12:83:37:cb:00:
f4:f7:82:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:55:52 2025 by rpki-client