Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/nW2OWTYYmTlhlQ71ZAO6l3gFSMw.roa
File: nW2OWTYYmTlhlQ71ZAO6l3gFSMw.roa (raw, json)
Hash identifier: IufoJCtPG3z4oKejWfyBmidMURP2GSN3Z8YqDrDYbUo=
Subject key identifier: 9D:6D:8E:59:36:18:99:39:61:95:0E:F5:64:03:BA:97:78:05:48:CC
Certificate issuer: /CN=a5cae6a01d854abdf9256dcc2429617d55f03bd9
Certificate serial: 01856F4B900DF9E75C1386900A124C4A38C0
Authority key identifier: A5:CA:E6:A0:1D:85:4A:BD:F9:25:6D:CC:24:29:61:7D:55:F0:3B:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcrmoB2FSr35JW3MJClhfVXwO9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/nW2OWTYYmTlhlQ71ZAO6l3gFSMw.roa
Signing time: Sun 01 Jan 2023 21:45:01 +0000
ROA not before: Sun 01 Jan 2023 21:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57013
IP address blocks: 185.187.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:90:0d:f9:e7:5c:13:86:90:0a:12:4c:4a:38:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cae6a01d854abdf9256dcc2429617d55f03bd9
Validity
Not Before: Jan 1 21:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d6d8e593618993961950ef56403ba97780548cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4b:c5:5b:29:61:a3:06:31:85:8e:f4:b3:24:
80:21:e5:27:3d:63:98:36:c6:6b:12:b8:1b:a9:38:
40:5d:d3:2e:4e:4c:53:14:7f:c0:1b:0b:78:a0:da:
20:25:dc:fc:19:f4:6b:20:19:d0:76:af:79:3d:2c:
7f:16:7d:b1:70:2e:4c:31:90:59:f5:cc:b6:d8:93:
d4:55:7c:68:a6:25:dc:1f:5c:dd:9b:44:f7:31:0e:
16:d9:33:59:96:b5:32:31:46:23:ac:0a:78:91:cb:
69:78:a3:75:4c:26:b7:49:f3:ea:e3:19:04:4f:50:
fd:53:6a:29:0f:51:96:ae:3e:4f:d3:42:b9:ce:4a:
80:b9:6b:a4:29:3a:34:a1:af:87:aa:54:f3:a5:78:
fe:9f:52:97:10:2f:b3:cd:0d:b0:ee:a3:80:5d:07:
0c:a4:ef:3d:3f:f0:5d:6a:db:14:8c:09:ca:74:c4:
a0:19:7d:81:4c:e5:6e:65:6f:7e:c2:79:56:08:70:
b3:7a:11:4f:57:a6:e8:46:7d:53:44:8e:3c:15:01:
c2:ca:20:26:94:98:d0:6b:53:b8:ea:b2:a9:a5:da:
da:24:e3:01:0d:8a:80:73:1d:c9:57:ad:3a:17:99:
53:d8:69:c1:2d:3b:69:48:fc:1f:b6:77:f5:ac:e2:
6e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6D:8E:59:36:18:99:39:61:95:0E:F5:64:03:BA:97:78:05:48:CC
X509v3 Authority Key Identifier:
keyid:A5:CA:E6:A0:1D:85:4A:BD:F9:25:6D:CC:24:29:61:7D:55:F0:3B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcrmoB2FSr35JW3MJClhfVXwO9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/nW2OWTYYmTlhlQ71ZAO6l3gFSMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/pcrmoB2FSr35JW3MJClhfVXwO9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.18.0/24
Signature Algorithm: sha256WithRSAEncryption
52:e0:50:ec:88:cb:fa:7e:6d:22:ea:a2:cb:f3:a4:eb:76:20:
b6:36:90:17:52:45:57:c4:e0:54:59:86:58:fa:44:b2:c4:a5:
3e:1a:7f:fb:94:ad:4b:45:0c:5a:80:05:aa:70:4a:02:39:5b:
0e:c6:a8:06:61:cd:b0:9d:01:02:ee:61:98:d0:0f:62:70:95:
5d:17:28:16:46:96:89:3a:6f:22:96:59:22:e3:cd:87:59:cb:
93:15:28:3f:df:eb:13:8f:5a:7d:16:5d:ee:3d:90:a4:e7:4b:
89:6d:38:6f:cf:9a:c1:bb:83:41:83:98:43:f3:3a:74:2e:22:
75:27:22:51:07:91:ab:1b:65:26:4e:20:18:81:ad:03:03:66:
56:8a:af:4e:c7:f4:85:c0:f3:fa:f1:a8:df:ec:4d:70:2c:81:
29:6b:a5:e1:98:d6:62:27:2f:a3:73:e9:33:00:95:3f:c3:fb:
7e:ae:66:8b:68:db:61:97:81:5b:87:a2:dc:4d:f8:0c:ba:29:
31:a3:03:62:cf:63:0f:7d:16:f7:ec:76:55:67:48:31:fb:d1:
d0:45:3b:fe:3c:db:b0:e3:7c:4f:af:63:8b:88:9a:84:d4:1a:
08:5d:1f:24:b8:77:6c:68:57:2b:7e:ea:f9:cf:7e:2c:fa:1d:
aa:be:d9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:34:47 2025 by rpki-client