Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/E8XEf9qzHSFP-gUGeL-9mMF4HWI.roa
File: E8XEf9qzHSFP-gUGeL-9mMF4HWI.roa (raw, json)
Hash identifier: wJgeHpRpuL6LEdHYVuU/3WQxnMVYk2i0QppgwGN9Jhg=
Subject key identifier: 13:C5:C4:7F:DA:B3:1D:21:4F:FA:05:06:78:BF:BD:98:C1:78:1D:62
Certificate issuer: /CN=472694d8a399a3a66f442ec72295c754acbbad41
Certificate serial: 050CE8B5
Authority key identifier: 47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/E8XEf9qzHSFP-gUGeL-9mMF4HWI.roa
Signing time: Sat 01 Jan 2022 15:06:10 +0000
ROA not before: Sat 01 Jan 2022 15:06:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200807
IP address blocks: 185.173.164.0/22 maxlen: 22
2a0b:4f00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84732085 (0x50ce8b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472694d8a399a3a66f442ec72295c754acbbad41
Validity
Not Before: Jan 1 15:06:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13c5c47fdab31d214ffa050678bfbd98c1781d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:af:bd:4a:52:b2:69:78:7f:2d:06:b2:76:bc:
c8:78:32:30:78:e9:fc:59:87:77:df:76:98:ae:73:
38:c7:41:a8:68:e9:08:70:a6:9a:f5:6d:54:da:0c:
65:c4:10:c0:c5:74:37:65:ff:26:93:e7:ef:64:26:
36:b0:6d:d4:62:bb:db:a1:cb:8b:bf:e5:c2:8d:c5:
cd:b8:49:e8:0e:0f:4e:82:d4:07:b6:19:0a:74:99:
c2:c6:7f:25:f3:5a:e2:99:0f:cb:04:52:dd:d2:2e:
c7:2d:a3:80:e5:d3:96:97:ce:a7:9f:0c:87:47:c2:
fa:b8:6d:39:95:ad:d7:48:24:34:0e:78:e8:05:20:
66:af:03:66:b2:e6:4b:49:fe:8b:3a:6d:3a:be:4f:
e0:4e:df:3a:da:51:14:b9:80:09:ba:ab:82:63:cf:
54:6e:37:8f:ff:71:e1:85:22:a8:b5:fe:10:55:54:
6e:f2:6d:d3:9a:9f:a1:d4:83:5b:4c:af:33:25:45:
ed:9b:64:60:b6:8f:fb:ae:71:24:76:d7:5d:20:64:
eb:b3:6f:ac:b1:f1:7d:f5:65:2a:04:91:d3:5b:87:
80:d6:2c:06:a4:c9:3d:7d:0a:2c:e3:c1:c9:e1:6b:
c7:cd:3e:3a:5c:f6:35:9e:a5:4e:fa:b4:68:0e:e3:
30:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C5:C4:7F:DA:B3:1D:21:4F:FA:05:06:78:BF:BD:98:C1:78:1D:62
X509v3 Authority Key Identifier:
keyid:47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/E8XEf9qzHSFP-gUGeL-9mMF4HWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.164.0/22
IPv6:
2a0b:4f00::/32
Signature Algorithm: sha256WithRSAEncryption
7f:f5:34:3d:0f:25:5c:a5:bf:0a:97:94:e8:53:a2:94:07:0e:
96:aa:62:46:16:6e:3f:7e:d1:57:83:0a:82:77:f7:45:f8:95:
23:33:fc:1a:1e:05:8d:72:6a:d2:71:4e:ba:c0:32:c9:c2:3e:
6a:a2:86:e6:34:fb:aa:ef:fc:89:52:e7:7e:69:87:91:92:0f:
60:76:b5:06:65:ae:00:df:01:b9:a6:2a:6c:ce:8c:72:74:b5:
dd:27:c1:c2:9a:a6:83:2e:17:d7:3e:ab:b9:ca:16:33:0e:64:
77:34:23:da:9d:11:54:7d:27:9e:20:be:77:95:8c:e7:9e:fe:
9f:f4:fb:8e:51:92:41:4e:23:9b:e8:86:0a:ca:0c:d6:15:b5:
93:ae:2b:80:69:f1:34:e3:62:a9:ca:61:dd:57:1c:ad:84:b1:
c8:2f:9d:aa:b0:2a:d1:bc:09:46:d6:3c:42:e2:e1:57:da:e6:
99:32:73:b1:a8:71:98:f0:0b:3f:05:56:86:34:e6:a3:25:de:
e4:ce:e2:7f:9f:cd:5b:33:17:45:0b:af:ef:33:0a:bc:cc:db:
bc:4d:37:b3:b1:28:05:b8:0b:ae:b4:83:6e:59:75:89:69:c6:
00:61:5b:d4:d7:3c:46:5d:af:c2:6f:61:3c:ab:b3:70:9d:2b:
19:08:56:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:51:10 2025 by rpki-client