Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/cdQ9zFKGephvEyUF50VwPAB_kkI.roa
File: cdQ9zFKGephvEyUF50VwPAB_kkI.roa (raw, json)
Hash identifier: 6G5ZSAVTUvm0fDljCRPUcKJg552Dh+0uSfvDCU4t5nY=
Subject key identifier: 71:D4:3D:CC:52:86:7A:98:6F:13:25:05:E7:45:70:3C:00:7F:92:42
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 08B43BF6
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/cdQ9zFKGephvEyUF50VwPAB_kkI.roa
Signing time: Sat 01 Jan 2022 12:06:06 +0000
ROA not before: Sat 01 Jan 2022 12:06:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56911
IP address blocks: 185.243.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146029558 (0x8b43bf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Jan 1 12:06:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71d43dcc52867a986f132505e745703c007f9242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:85:0f:ec:42:89:cf:54:3d:e1:6a:5c:02:
01:30:84:6a:95:c7:c9:f6:ab:67:be:24:85:9d:38:
1c:71:ff:71:b3:8b:27:60:5c:b5:f3:e3:6b:66:a4:
92:34:67:09:6a:56:42:5d:ad:37:d4:11:ee:ce:73:
d8:d1:4a:a1:1d:09:2b:09:4c:23:f4:ed:6d:26:4d:
b8:a5:86:94:c2:c1:61:08:0d:68:06:36:ea:80:f9:
bc:55:07:28:52:64:f5:99:16:51:d2:71:09:ac:cf:
70:07:5e:fa:90:2d:64:c2:c0:9d:23:f3:e2:0c:49:
ab:31:f8:90:d0:df:a9:df:70:99:c2:2d:b7:c2:72:
2e:36:eb:13:c2:3e:2e:a3:0f:a7:18:37:f1:d1:c7:
49:bd:3e:f1:8f:37:fc:b1:47:d3:9e:e7:ce:f6:a0:
0f:e6:c5:9a:d8:2a:4a:d8:53:c8:0e:29:8b:dd:8c:
fa:1e:34:df:8f:38:91:30:b1:40:b4:d4:4e:29:cb:
ef:af:60:41:f9:28:49:de:b5:ea:d4:ee:cc:d2:fd:
1a:e5:18:b5:c2:3c:f1:fa:4b:69:f9:8e:16:97:04:
bd:df:2e:83:fe:ce:7a:90:04:68:5a:e5:46:c0:1d:
39:e5:a6:69:e2:4a:d8:db:ef:62:c9:be:73:64:ff:
08:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D4:3D:CC:52:86:7A:98:6F:13:25:05:E7:45:70:3C:00:7F:92:42
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/cdQ9zFKGephvEyUF50VwPAB_kkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.75.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:2c:9d:5d:d7:0b:1d:9e:23:d3:f0:81:77:55:1f:d5:0a:bc:
b4:20:5d:9f:5f:63:8b:82:98:89:b2:c5:77:bc:c8:b9:b5:53:
f4:11:4a:e2:d2:da:89:c8:ca:2f:f8:73:95:44:0c:1c:7a:a8:
0b:9c:70:d6:58:3c:e7:bc:0d:1c:b3:0e:45:8f:ae:1b:2f:74:
17:e7:77:b2:d5:3b:02:b6:9f:17:8e:71:9c:e9:c6:e1:31:2a:
85:c9:3d:57:5d:a0:1f:00:0c:2f:72:d6:4b:2d:53:48:e8:41:
75:39:11:79:37:db:e5:2c:a4:d9:d6:fd:55:5c:7d:cb:6c:91:
1b:fd:36:29:5f:77:84:4a:74:de:c9:16:3a:63:9d:88:ac:69:
af:ca:2c:3b:5a:ef:de:a1:2c:4d:ef:81:5a:d7:f1:ed:dd:53:
fd:aa:76:8c:e2:9d:85:1e:09:e1:9d:6c:54:b7:0d:ff:ef:96:
e2:2b:55:11:f9:e3:ae:01:64:7c:4f:64:d1:67:cf:23:49:b0:
9b:19:0c:58:e8:b2:d0:05:d7:44:53:f1:51:40:d9:3b:bc:43:
2c:61:3a:80:14:94:cf:22:ba:2e:55:9a:9a:1d:0a:cb:23:09:
98:21:54:25:d8:28:6d:54:79:2a:50:21:7b:dd:72:ec:73:08:
98:3b:3f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:21:31 2025 by rpki-client