Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/1-1puFYn2QYJbLDvvUoHOBq8F6qk.roa
File: 1-1puFYn2QYJbLDvvUoHOBq8F6qk.roa (raw, json)
Hash identifier: X/mAu4igkQiIEoNfMXP+roeCYQtKzPZIIKR4tpSA1ts=
Subject key identifier: FB:5A:6E:15:89:F6:41:82:5B:2C:3B:EF:52:81:CE:06:AF:05:EA:A9
Certificate issuer: /CN=37778681361b1fff87ce398402efa63869e5bfd1
Certificate serial: 0182939F86E8C9196986E649A9746364E304
Authority key identifier: 37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/1-1puFYn2QYJbLDvvUoHOBq8F6qk.roa
Signing time: Fri 12 Aug 2022 19:54:41 +0000
ROA not before: Fri 12 Aug 2022 19:54:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203971
IP address blocks: 185.118.48.0/22 maxlen: 22
185.222.93.0/24 maxlen: 24
185.222.94.0/24 maxlen: 24
185.222.95.0/24 maxlen: 24
185.222.92.0/22 maxlen: 22
185.222.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:93:9f:86:e8:c9:19:69:86:e6:49:a9:74:63:64:e3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37778681361b1fff87ce398402efa63869e5bfd1
Validity
Not Before: Aug 12 19:54:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb5a6e1589f641825b2c3bef5281ce06af05eaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:81:2c:5a:08:bc:9d:0e:eb:e7:60:b4:f1:b7:
aa:1d:55:49:8f:87:a7:d0:c3:54:bc:21:7c:60:26:
b8:db:d7:57:7d:37:c0:cb:92:8e:a9:53:03:98:3a:
2e:d6:21:7f:8c:6b:06:b5:68:ec:55:88:aa:de:69:
20:c6:75:dc:94:0c:3b:60:94:4e:ad:79:86:06:44:
c3:af:a5:58:97:7a:8f:87:6d:e0:37:86:cf:6a:8b:
c0:d8:c0:57:d1:78:73:f3:23:de:f7:44:c9:2f:51:
fb:4d:9c:1c:9a:67:f8:50:86:b0:17:cd:65:cf:15:
b9:da:dc:dd:2b:46:e4:f3:64:e8:f7:66:c7:17:e7:
bf:0d:bf:b9:f1:2a:d8:e6:d3:1e:5d:d0:1b:30:ac:
bc:f3:d3:51:21:8c:36:72:42:0d:4e:24:a0:36:62:
b4:27:71:ad:79:71:f3:24:43:8f:69:95:4a:6a:af:
01:8e:91:87:c5:bc:ee:bf:1b:31:4e:7f:c1:1a:07:
ea:a4:38:61:c9:ae:38:81:53:a8:8a:6a:83:31:0d:
e5:50:7f:38:59:ef:b3:a3:9f:f4:9c:33:48:d6:4a:
1b:8f:de:d2:62:4c:04:1e:31:be:2b:b7:8b:30:21:
3d:ba:c5:02:6c:c3:a7:47:34:4c:f9:ce:c1:59:b4:
78:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5A:6E:15:89:F6:41:82:5B:2C:3B:EF:52:81:CE:06:AF:05:EA:A9
X509v3 Authority Key Identifier:
keyid:37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/1-1puFYn2QYJbLDvvUoHOBq8F6qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.48.0/22
185.222.92.0/22
Signature Algorithm: sha256WithRSAEncryption
13:be:d4:a3:28:73:6f:13:32:dd:9e:98:bf:b9:e2:ef:39:76:
39:05:94:e2:11:1c:35:fc:46:e3:08:be:27:91:2f:4d:cc:d5:
bb:b7:14:53:c8:72:aa:8c:68:a3:82:43:f5:9d:cd:d8:14:1a:
d6:75:79:ae:61:a5:ca:f1:bc:1c:83:cf:86:f1:99:5e:0f:d5:
97:17:7d:f2:c0:42:29:75:14:1d:fb:6e:88:5e:27:60:58:9d:
cc:41:3d:e4:9a:58:4f:27:ae:21:b4:d0:bc:0f:d9:69:bc:b6:
be:b5:82:0a:79:b5:c7:68:71:38:19:ce:0a:a5:71:55:50:50:
a4:0a:6a:6f:b6:ad:b4:03:f8:12:50:12:38:c1:62:45:24:67:
d4:31:c0:2a:d8:50:6b:17:33:6d:c2:3a:2d:6b:40:34:07:26:
28:10:07:87:46:e8:76:39:87:70:c6:c2:a9:43:09:56:1e:4b:
2b:46:cc:75:5d:97:0a:78:17:49:7c:43:11:20:23:91:a6:35:
32:24:f0:d5:99:06:66:26:c9:a7:2b:38:ad:19:e4:50:13:88:
96:b9:98:d4:61:2a:9a:b1:45:e3:ca:cf:00:e3:d5:8c:e7:d4:
49:3a:68:f9:29:af:23:5a:24:f2:e4:89:4a:7a:60:29:52:13:
6a:d0:5d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:24:20 2025 by rpki-client