Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/izbCDxefHi81Ceh8v70jil8PjrA.roa
File: izbCDxefHi81Ceh8v70jil8PjrA.roa (raw, json)
Hash identifier: G81Vq+SeFhUUiPynuXGPGqpCxUEFG0haFucomHcGaT8=
Subject key identifier: 8B:36:C2:0F:17:9F:1E:2F:35:09:E8:7C:BF:BD:23:8A:5F:0F:8E:B0
Certificate issuer: /CN=1acbdd00d27b8a8befc866caf378f19027684769
Certificate serial: 0194228E420DC9BD2C710B27FB024F6BBF40
Authority key identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/izbCDxefHi81Ceh8v70jil8PjrA.roa
Signing time: Wed 01 Jan 2025 15:48:55 +0000
ROA not before: Wed 01 Jan 2025 15:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 185.162.80.0/22 maxlen: 22
185.200.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:42:0d:c9:bd:2c:71:0b:27:fb:02:4f:6b:bf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acbdd00d27b8a8befc866caf378f19027684769
Validity
Not Before: Jan 1 15:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b36c20f179f1e2f3509e87cbfbd238a5f0f8eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cd:c3:91:13:b8:55:41:ad:d0:98:2a:76:38:
4e:49:92:4c:6d:ae:da:35:08:08:5a:d1:0d:37:f7:
8c:b8:88:2c:ca:32:41:ee:fa:1c:9e:c4:d3:cd:d9:
04:25:69:9c:ac:7a:e1:27:9b:05:ed:80:ec:26:9b:
6c:54:a7:54:d4:b1:cd:8d:cd:05:51:7d:81:86:d1:
de:61:69:a6:c2:55:79:e9:73:07:d4:c9:5f:d8:c9:
44:d4:e3:2b:74:4c:6c:e3:95:c7:db:12:12:2e:fa:
25:1a:18:26:76:ee:04:af:ff:07:39:d0:c8:9f:49:
7f:f2:46:0a:ea:e0:8d:b4:f6:50:52:7b:c0:cc:66:
a6:7a:39:5a:91:1a:89:48:e4:a8:22:72:6c:69:2d:
e5:64:71:24:16:e6:df:82:2b:7b:73:c9:8b:e7:48:
90:8e:9c:11:a6:34:b6:a1:90:bb:9f:55:f0:85:7d:
48:41:84:fa:27:28:f8:10:ae:33:63:70:e5:f4:8d:
f0:06:a4:c9:ae:ec:6b:fd:20:c8:8e:5d:f3:1f:54:
6c:9b:64:fc:e4:ea:65:bc:df:2a:2f:74:fe:60:51:
d0:00:06:18:34:07:b7:4d:a6:6a:21:7d:77:1b:d1:
cc:6f:03:d2:23:5c:e0:3d:96:e6:72:6f:c6:6a:9e:
fb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:36:C2:0F:17:9F:1E:2F:35:09:E8:7C:BF:BD:23:8A:5F:0F:8E:B0
X509v3 Authority Key Identifier:
keyid:1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/izbCDxefHi81Ceh8v70jil8PjrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.80.0/22
185.200.192.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:1a:9d:04:37:b5:c9:df:a5:05:74:20:82:d8:e7:0e:16:e7:
7f:2f:a4:08:05:62:b8:b2:06:00:cf:fb:96:1a:37:82:21:e3:
1a:8a:f3:f1:4d:38:d9:e3:e7:4a:2f:c5:b6:a5:fa:a3:09:f2:
62:58:e8:bc:c1:cd:91:90:a3:8c:d4:cd:5b:b4:17:c8:68:7a:
c9:2e:87:18:8f:66:7f:39:c0:bb:d6:74:5b:d1:2f:ec:43:e9:
a8:6b:62:6f:db:d2:a4:bf:c1:cc:eb:b1:43:46:09:1d:58:dd:
68:09:bd:33:2b:c2:53:2e:74:28:0a:e3:b2:e1:84:cb:5a:f6:
60:99:36:7e:9a:72:f2:86:42:f1:90:45:6c:a5:db:f8:41:8b:
f4:f2:0f:af:f1:ed:27:60:1f:f2:e9:d0:4e:a5:ff:a2:57:64:
d0:fe:6d:fa:1f:6b:ea:b3:02:25:13:b4:51:c7:95:69:39:0a:
d2:33:fd:05:09:45:0b:44:00:35:bb:9d:a7:ee:02:0d:52:02:
85:2c:ff:bd:bb:15:24:51:b4:22:5a:69:ea:54:21:96:58:5d:
3c:f2:c2:c2:77:7c:27:d9:16:03:bf:d9:46:47:87:ca:ba:97:
d0:17:dd:08:ee:22:be:e5:7d:85:1e:fd:28:e9:eb:3a:05:49:
d5:86:9a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:19:21 2025 by rpki-client