Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/14a1f0-f03c-44a1-b37a-b58100540803/1/F-v8qB6ln8RMVCSQa79VjXLwpvY.roa
File: F-v8qB6ln8RMVCSQa79VjXLwpvY.roa (raw, json)
Hash identifier: Q8mZPurjqpplU+OOugTPV6hRnj9a2zHqMd9jUZx419E=
Subject key identifier: 17:EB:FC:A8:1E:A5:9F:C4:4C:54:24:90:6B:BF:55:8D:72:F0:A6:F6
Certificate issuer: /CN=72e9d660a14119fe37c7bc3bdedde3ce49f54513
Certificate serial: 14138D
Authority key identifier: 72:E9:D6:60:A1:41:19:FE:37:C7:BC:3B:DE:DD:E3:CE:49:F5:45:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cunWYKFBGf43x7w73t3jzkn1RRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/14a1f0-f03c-44a1-b37a-b58100540803/1/F-v8qB6ln8RMVCSQa79VjXLwpvY.roa
Signing time: Sat 01 Jan 2022 02:53:24 +0000
ROA not before: Sat 01 Jan 2022 02:53:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212808
IP address blocks: 185.175.88.0/24 maxlen: 24
2a10:45c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1315725 (0x14138d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e9d660a14119fe37c7bc3bdedde3ce49f54513
Validity
Not Before: Jan 1 02:53:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17ebfca81ea59fc44c5424906bbf558d72f0a6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:11:5f:b0:a3:5d:38:e0:5d:d0:cb:24:36:48:
37:51:e7:21:de:36:67:2c:3f:ad:a2:c5:4d:fe:35:
55:1a:3e:cd:4f:05:6f:1b:53:87:cc:4f:0c:dd:b8:
3a:1d:91:37:65:4b:e3:7a:b7:bc:3c:dc:dd:59:6d:
55:55:63:e1:a1:74:4b:b0:1a:64:98:58:e2:e7:93:
c6:1e:bd:76:84:40:aa:89:8f:2b:d5:54:60:1b:c3:
08:45:42:1d:7d:3a:04:c0:f0:9f:26:7e:db:c7:a6:
df:9d:25:90:49:95:70:c4:f7:3b:82:35:91:88:fc:
49:d9:2c:1c:61:62:e1:18:f7:43:65:35:c7:f5:41:
9c:ba:d5:42:d0:a4:32:5c:eb:83:53:01:ea:29:ca:
92:fe:fb:49:40:ae:c0:b5:30:a9:9c:b0:a1:1a:21:
22:2c:4f:0e:4d:7e:0b:72:7c:ae:da:e4:12:2c:49:
56:d2:bb:3d:6c:c1:39:7d:45:8e:c2:1a:7d:c4:95:
c9:8c:af:3f:ff:48:c9:59:75:1c:26:2b:62:31:5c:
04:3a:87:2f:65:20:d4:a6:fd:c4:56:83:1d:33:d7:
7b:40:62:05:36:20:f7:a5:a3:93:fa:3e:c7:a5:1d:
5e:81:b8:bb:98:fe:6e:26:e2:ed:38:b2:1f:3a:1d:
ab:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EB:FC:A8:1E:A5:9F:C4:4C:54:24:90:6B:BF:55:8D:72:F0:A6:F6
X509v3 Authority Key Identifier:
keyid:72:E9:D6:60:A1:41:19:FE:37:C7:BC:3B:DE:DD:E3:CE:49:F5:45:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cunWYKFBGf43x7w73t3jzkn1RRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/14a1f0-f03c-44a1-b37a-b58100540803/1/F-v8qB6ln8RMVCSQa79VjXLwpvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/14a1f0-f03c-44a1-b37a-b58100540803/1/cunWYKFBGf43x7w73t3jzkn1RRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.88.0/24
IPv6:
2a10:45c0::/32
Signature Algorithm: sha256WithRSAEncryption
2d:4e:21:dc:3d:7d:10:1b:f7:b8:26:39:af:79:92:3c:32:91:
c0:b0:37:c5:d7:6d:5d:9d:09:5d:4a:34:a5:3d:6e:09:63:1c:
30:be:93:ae:f0:be:17:91:ce:6e:5a:4a:0e:fe:9b:1d:88:d0:
b8:8d:80:68:53:61:1c:d1:18:3c:a7:4b:38:e7:14:5c:23:37:
47:78:51:9c:08:b8:48:d0:27:7c:9e:5e:ce:6d:3a:75:7e:62:
34:2d:0f:a5:b9:05:f6:92:3f:15:d5:ee:cf:8b:6e:2a:73:a7:
2c:57:14:44:3f:24:6b:f4:94:73:7e:ee:43:bd:9a:e6:28:9e:
66:5e:e2:7b:9e:37:5a:30:84:75:84:4c:13:99:8b:52:24:30:
9f:8e:2b:8e:ce:03:24:35:40:48:c5:ad:b6:eb:66:85:c1:ec:
57:fe:17:69:03:6d:ff:cb:20:53:30:0d:8b:3e:8d:dd:d3:ad:
e0:c2:54:dd:90:27:c9:54:3d:48:cd:56:2c:96:68:b3:44:c5:
bc:af:5a:00:e9:38:67:48:e0:32:a3:cb:2a:14:20:5b:a6:df:
2d:3e:e4:ff:7b:0a:a6:a0:55:ca:c0:89:b6:4f:ad:d1:6f:ab:
99:81:74:1c:97:8b:89:45:64:b7:29:8c:46:7c:9e:25:c8:41:
52:3b:96:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:14:25 2025 by rpki-client