Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/1-HE6Xpyoxn4Yq3FXzuosfZoUm80.roa
File: 1-HE6Xpyoxn4Yq3FXzuosfZoUm80.roa (raw, json)
Hash identifier: ULsrMbG8iHJgKtdZ16I5zSM4p53LFbj1km1AAmU+b90=
Subject key identifier: F8:71:3A:5E:9C:A8:C6:7E:18:AB:71:57:CE:EA:2C:7D:9A:14:9B:CD
Certificate issuer: /CN=c53feb2ac60fa313f9a7300e4c5ee33b43a88341
Certificate serial: 1768BE54
Authority key identifier: C5:3F:EB:2A:C6:0F:A3:13:F9:A7:30:0E:4C:5E:E3:3B:43:A8:83:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT_rKsYPoxP5pzAOTF7jO0Oog0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/1-HE6Xpyoxn4Yq3FXzuosfZoUm80.roa
Signing time: Wed 18 May 2022 15:36:16 +0000
ROA not before: Wed 18 May 2022 15:36:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198949
IP address blocks: 185.39.216.0/22 maxlen: 24
95.181.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392740436 (0x1768be54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53feb2ac60fa313f9a7300e4c5ee33b43a88341
Validity
Not Before: May 18 15:36:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8713a5e9ca8c67e18ab7157ceea2c7d9a149bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6e:89:62:50:00:7a:32:f5:ba:3b:ad:18:85:
31:18:1e:57:6a:ed:29:30:aa:d8:4c:3f:a0:d5:b0:
4c:43:74:e0:16:93:06:e1:19:77:f1:76:37:28:b3:
51:ae:0b:0b:e2:12:b0:36:81:a2:e1:83:67:c7:4a:
de:92:7f:e6:2b:aa:6a:69:da:9f:bf:0e:a1:1f:79:
5b:98:cf:f1:86:7b:ce:c2:bd:b9:03:ee:6b:85:80:
a9:99:5d:f0:9b:29:d6:4c:c6:2a:f3:49:41:1b:15:
95:ec:a9:bf:cd:2c:de:46:a8:1c:9c:d5:6b:4a:ff:
7b:cf:72:95:6f:76:be:ce:bf:15:fb:6f:18:14:14:
fd:8e:14:4f:14:70:ea:fe:14:0d:d1:0b:ba:db:7e:
76:dd:08:d8:06:34:d9:f6:9a:cc:29:a3:04:91:4b:
02:dc:c2:68:0e:2d:b2:ef:73:0e:59:f2:fc:61:b7:
67:d5:6f:f0:a5:6c:c2:46:3c:28:78:6c:8a:72:ac:
54:7d:b1:f8:51:a5:a8:a9:55:c1:5c:9c:85:7a:9a:
d3:24:e5:0b:b4:ac:21:2f:eb:3e:ed:25:b7:4b:d4:
d1:8b:71:06:01:77:5b:f2:bd:0e:b5:1e:a5:7d:1b:
0a:5d:d7:39:54:21:71:eb:59:72:b8:e8:68:e6:1a:
80:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:71:3A:5E:9C:A8:C6:7E:18:AB:71:57:CE:EA:2C:7D:9A:14:9B:CD
X509v3 Authority Key Identifier:
keyid:C5:3F:EB:2A:C6:0F:A3:13:F9:A7:30:0E:4C:5E:E3:3B:43:A8:83:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT_rKsYPoxP5pzAOTF7jO0Oog0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/1-HE6Xpyoxn4Yq3FXzuosfZoUm80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/xT_rKsYPoxP5pzAOTF7jO0Oog0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.220.0/22
185.39.216.0/22
Signature Algorithm: sha256WithRSAEncryption
28:79:22:d2:93:4e:bd:8e:5d:4f:f3:98:af:7a:68:0c:ad:b6:
08:f1:4f:5b:24:ea:8f:a0:c8:a9:c8:d1:3a:7e:4f:29:fe:3b:
cd:13:e9:a8:51:6a:cc:87:3c:77:20:f5:96:51:1d:b7:3a:3f:
dd:41:38:99:fb:53:e7:36:1e:79:5d:8c:d0:3f:97:61:4b:69:
1d:21:35:4a:93:54:eb:a2:d5:e8:3c:92:70:f8:64:d3:5e:6d:
6c:96:e8:f8:00:53:03:c3:e3:e6:6c:73:d9:83:48:6b:be:8c:
7e:8d:8e:d4:41:8e:8f:c0:ba:22:17:4d:09:56:e4:4f:f3:35:
72:77:e7:a1:ea:26:3e:fe:7a:37:02:91:a8:09:8d:a7:ad:27:
99:40:84:66:83:2d:e3:a6:21:ca:e9:9c:11:17:d7:5a:b4:0d:
ec:92:fc:a3:d9:5f:1b:00:27:cc:11:47:47:1a:b6:08:55:21:
0b:cd:9e:f4:ff:ac:ef:fe:4e:52:56:08:b4:20:e2:0e:ff:5b:
ce:08:ed:db:c2:a6:46:a6:cd:c3:a9:3a:d6:ad:8b:05:d1:fb:
3c:39:89:5a:30:a0:49:04:b6:ef:98:90:a4:8a:06:0c:aa:80:
d0:8f:96:13:d4:18:1e:52:72:4a:7f:d3:23:fe:ef:9d:8a:30:
27:19:e6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:13:00 2025 by rpki-client