Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/IopdGDfc1nIChZa08KuB2Kfst2c.roa
File: IopdGDfc1nIChZa08KuB2Kfst2c.roa (raw, json)
Hash identifier: EcVeeTwQFVTAEpioLhch3mCildpjUcoP/ZdlOHrV4UA=
Subject key identifier: 22:8A:5D:18:37:DC:D6:72:02:85:96:B4:F0:AB:81:D8:A7:EC:B7:67
Certificate issuer: /CN=11466326406436e31478b7bca2dda16c96d5a964
Certificate serial: 018572C38AE8CA5A327DD849B6C13C9708F6
Authority key identifier: 11:46:63:26:40:64:36:E3:14:78:B7:BC:A2:DD:A1:6C:96:D5:A9:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/IopdGDfc1nIChZa08KuB2Kfst2c.roa
Signing time: Mon 02 Jan 2023 13:54:55 +0000
ROA not before: Mon 02 Jan 2023 13:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39421
IP address blocks: 185.142.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:8a:e8:ca:5a:32:7d:d8:49:b6:c1:3c:97:08:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11466326406436e31478b7bca2dda16c96d5a964
Validity
Not Before: Jan 2 13:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=228a5d1837dcd672028596b4f0ab81d8a7ecb767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:07:eb:f6:e4:92:aa:71:bf:a6:1a:8a:27:95:
8f:22:6d:bf:c0:0e:60:c1:9b:9f:b1:44:7e:bd:27:
4a:f2:c9:f1:7d:3a:f0:18:af:d8:f7:f3:85:55:48:
7c:aa:53:8a:09:1c:03:5b:75:db:45:e5:93:99:5b:
fd:1b:b2:89:e9:2b:cf:1a:37:ab:0c:0a:da:f9:67:
ad:00:46:19:63:76:ce:d8:a5:00:80:22:80:70:8f:
6b:fe:3f:04:5c:1f:a4:f3:08:2d:98:2c:44:28:a3:
16:1d:03:a7:ef:fe:90:81:a4:47:cc:c0:8c:f2:98:
fb:1c:b9:de:fd:e7:6b:c6:35:3c:53:74:14:d5:e6:
f7:cb:e0:4c:b0:2d:ff:f7:ed:7e:ce:2e:01:1d:98:
8c:31:e1:16:1a:25:ed:49:49:85:c2:03:fe:90:0c:
04:54:95:63:98:a5:82:49:85:26:bb:ad:d7:ab:d5:
4b:bd:54:ee:ba:c6:08:5d:f3:45:74:a8:73:0f:33:
ec:3a:1a:19:4b:ef:72:de:5c:01:3d:3d:88:8f:b4:
50:ee:1e:a9:d4:0a:ec:22:a4:9d:e7:2d:d4:5a:e6:
8b:c3:f5:a1:4a:40:a0:53:34:f4:bd:60:3e:1b:37:
8e:ca:62:90:c1:ca:73:55:93:01:bb:d3:93:09:5e:
ec:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8A:5D:18:37:DC:D6:72:02:85:96:B4:F0:AB:81:D8:A7:EC:B7:67
X509v3 Authority Key Identifier:
keyid:11:46:63:26:40:64:36:E3:14:78:B7:BC:A2:DD:A1:6C:96:D5:A9:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/IopdGDfc1nIChZa08KuB2Kfst2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.52.0/24
Signature Algorithm: sha256WithRSAEncryption
54:28:b7:6e:14:46:3c:d0:bb:ad:d9:b1:a7:ff:d0:be:b9:0c:
38:76:2c:57:a0:c5:ec:24:fa:fc:0c:9d:35:27:da:45:53:53:
2e:47:9c:74:b4:51:39:2a:0d:9b:e3:35:07:a1:a1:64:1c:6f:
f0:c7:93:e8:da:22:0d:39:a6:05:fd:3d:d6:d5:4e:a8:0a:a2:
da:1d:c4:9e:ca:ff:1b:13:84:2f:87:71:ed:83:e6:94:e9:78:
e6:37:ca:e5:f4:b0:bb:ee:7e:52:99:9d:01:28:29:07:90:b4:
e3:99:85:be:ef:e0:b4:21:9f:a2:7c:cc:ce:2d:ea:33:73:fe:
02:2b:b1:37:a5:18:42:f1:cb:7c:d4:e0:12:ad:b5:52:dc:46:
7f:3e:0e:7b:46:b3:36:2f:24:00:53:d0:db:22:39:d1:57:03:
ef:a9:40:65:62:6b:17:c2:f0:48:c9:9f:6d:11:15:ef:44:0c:
e4:0f:13:bd:1a:bc:5b:75:6d:7c:b1:ca:80:48:bd:41:40:27:
ff:f0:bd:c8:96:6c:39:b0:f5:45:7f:8c:75:dd:ef:f6:fb:85:
5a:73:8a:ff:1b:af:81:7e:e7:4f:42:d1:ec:b8:fc:d1:1b:0d:
b7:ba:21:7c:82:1a:3e:36:6d:44:29:48:0c:85:6a:46:9b:74:
92:ee:68:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:34 2025 by rpki-client