Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a7b5f7-f359-461a-b6ad-4e269d844db6/1/k_abjvztm9AJpdTf2Vk8XIs0iNw.roa
File: k_abjvztm9AJpdTf2Vk8XIs0iNw.roa (raw, json)
Hash identifier: tGSCS7PFx7AhoGmPBswTqlTm8JX/Euhg6atmxsDP55M=
Subject key identifier: 93:F6:9B:8E:FC:ED:9B:D0:09:A5:D4:DF:D9:59:3C:5C:8B:34:88:DC
Certificate issuer: /CN=1ec104278c95e7054950933761d465af457c5818
Certificate serial: 17184420
Authority key identifier: 1E:C1:04:27:8C:95:E7:05:49:50:93:37:61:D4:65:AF:45:7C:58:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsEEJ4yV5wVJUJM3YdRlr0V8WBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a7b5f7-f359-461a-b6ad-4e269d844db6/1/k_abjvztm9AJpdTf2Vk8XIs0iNw.roa
Signing time: Sat 01 Jan 2022 11:59:22 +0000
ROA not before: Sat 01 Jan 2022 11:59:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199659
IP address blocks: 185.43.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387466272 (0x17184420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec104278c95e7054950933761d465af457c5818
Validity
Not Before: Jan 1 11:59:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93f69b8efced9bd009a5d4dfd9593c5c8b3488dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:49:88:05:b9:dc:69:4e:8f:8a:6f:99:0f:
1e:f3:c2:da:70:72:e2:51:29:f3:ae:25:9e:12:7b:
dd:e9:34:72:40:6d:59:c5:e4:23:30:d1:f9:98:3f:
af:ac:fb:f1:85:ae:68:c7:67:84:86:a5:54:13:57:
0d:6e:53:43:c5:13:b0:69:a3:44:42:c8:e7:d5:18:
50:a5:33:66:05:44:91:15:aa:23:5a:78:35:e1:cd:
48:95:67:ab:cc:f4:50:ba:b8:43:93:4a:77:2c:01:
54:70:e6:c8:e3:b1:00:f7:b4:6e:ce:6d:c7:6f:d3:
4b:3e:51:ee:3c:1d:da:27:ea:2a:cd:5e:a5:a6:3b:
32:1c:52:60:a5:ee:9a:21:81:f4:0a:36:8f:ec:bc:
f1:8f:dc:05:e2:97:e8:03:6a:8c:90:7d:04:9b:03:
1a:12:30:7d:08:65:2c:54:8d:73:41:87:17:67:24:
f8:50:89:b7:20:71:da:54:b6:e9:9a:64:7d:d9:62:
14:48:dd:d1:ea:5a:00:17:5b:0a:c6:07:c3:12:69:
9c:92:3e:5b:73:99:3d:ac:fd:7b:a7:67:1b:fe:76:
fd:25:bc:b7:13:7c:df:2f:df:44:9d:63:02:d6:58:
31:a6:12:ea:3f:df:54:4c:8c:f0:f1:4f:30:79:90:
c1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F6:9B:8E:FC:ED:9B:D0:09:A5:D4:DF:D9:59:3C:5C:8B:34:88:DC
X509v3 Authority Key Identifier:
keyid:1E:C1:04:27:8C:95:E7:05:49:50:93:37:61:D4:65:AF:45:7C:58:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsEEJ4yV5wVJUJM3YdRlr0V8WBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a7b5f7-f359-461a-b6ad-4e269d844db6/1/k_abjvztm9AJpdTf2Vk8XIs0iNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a7b5f7-f359-461a-b6ad-4e269d844db6/1/HsEEJ4yV5wVJUJM3YdRlr0V8WBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.129.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:c3:3b:66:6c:d1:65:7d:f5:cb:53:75:26:d8:0c:84:24:5d:
0b:c4:d6:81:31:39:c2:ea:58:b2:d7:ec:34:e8:72:d9:88:a8:
ba:d8:bb:c2:61:3a:cb:69:cd:40:f8:01:c2:68:9e:02:b3:f9:
e3:71:da:a4:03:58:48:47:90:b5:7a:d9:6a:24:11:7b:df:97:
59:50:47:c1:fb:3e:00:89:57:75:83:2e:ae:ed:2a:8e:8a:99:
d6:9a:05:44:2d:2b:23:b2:60:10:4f:94:9f:5e:af:82:b3:44:
e9:ff:97:6c:17:e9:48:79:bd:84:f6:df:45:2d:14:d3:b6:aa:
7a:6d:eb:e6:15:1d:5d:62:a8:27:6d:e0:fb:2b:4f:01:66:0a:
b0:f1:89:ff:da:43:e1:a2:e3:f3:73:e9:1c:4f:f2:1f:6a:9a:
82:00:a7:ae:e8:6a:ce:c3:88:d0:c8:16:80:68:70:8c:47:b0:
35:52:97:19:c0:27:10:8e:f6:ea:ef:f6:a6:f8:9a:fe:5b:39:
a7:71:f5:ec:2f:b8:ac:38:69:57:76:c5:18:3c:ec:f8:5a:15:
90:2e:92:10:1b:3e:06:ac:f6:40:7b:1c:ba:bd:f2:ee:7a:3a:
7e:14:2f:2d:52:8a:1a:c8:01:93:da:4b:78:40:70:fd:bf:35:
c5:04:11:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:58 2025 by rpki-client