Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/13qEI7ZSHWeM3PHwgIsUl-bFU7M.roa
File: 13qEI7ZSHWeM3PHwgIsUl-bFU7M.roa (raw, json)
Hash identifier: c9DDAex6X0MpMuCyCEWVkrhIsxSNqWtOyCSgSIIxrDw=
Subject key identifier: D7:7A:84:23:B6:52:1D:67:8C:DC:F1:F0:80:8B:14:97:E6:C5:53:B3
Certificate issuer: /CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Certificate serial: 018204E199D5A7DF91B66599C6E78EE29B74
Authority key identifier: 7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/13qEI7ZSHWeM3PHwgIsUl-bFU7M.roa
Signing time: Sat 16 Jul 2022 02:41:09 +0000
ROA not before: Sat 16 Jul 2022 02:41:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204968
IP address blocks: 185.126.156.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:04:e1:99:d5:a7:df:91:b6:65:99:c6:e7:8e:e2:9b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Validity
Not Before: Jul 16 02:41:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d77a8423b6521d678cdcf1f0808b1497e6c553b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1c:2b:0a:1a:b5:cd:4e:66:7a:d5:82:df:7a:
d3:12:a6:f9:2f:2b:b0:ad:3a:6d:d1:68:49:d5:eb:
ee:78:8f:80:bb:da:ec:94:2f:51:fc:d0:6a:45:b5:
70:6b:4d:5d:79:22:77:be:ff:f7:a7:43:f3:08:32:
ee:12:5d:cf:16:8f:ec:2d:96:4f:d0:cb:f5:34:78:
ba:99:79:cc:49:bf:05:07:7a:cc:ca:b5:a9:5e:a7:
cd:fa:6a:e2:83:ef:49:ed:34:ae:88:df:f3:a6:45:
e3:a7:9b:64:48:6f:b4:99:a2:85:18:28:20:b7:7c:
cc:ed:e4:d1:79:93:26:93:18:91:9b:1a:b9:37:90:
a0:48:3e:b2:06:16:1a:eb:6d:24:11:9d:e5:86:69:
a8:73:9a:37:ac:4e:ce:33:40:32:fd:74:f7:65:bf:
a9:4e:cd:8b:3e:b2:e0:1b:a2:bb:d0:6b:57:8b:31:
99:88:f4:a7:9d:4d:f5:89:41:ca:0f:d4:b4:92:a3:
0e:a3:e1:24:1f:c7:87:da:b6:ff:3a:96:a7:d7:68:
1b:82:73:c6:3d:b2:62:55:af:c7:2c:26:e9:dc:a6:
c0:51:06:61:83:0e:79:71:0f:bb:fb:8f:86:8c:fd:
4e:2f:3c:a0:0a:d2:6b:9d:99:6c:54:1a:4a:d4:a3:
26:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7A:84:23:B6:52:1D:67:8C:DC:F1:F0:80:8B:14:97:E6:C5:53:B3
X509v3 Authority Key Identifier:
keyid:7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/13qEI7ZSHWeM3PHwgIsUl-bFU7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/fyA8FBnsaiHmYScgP1HB-nTcBE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.156.0/23
Signature Algorithm: sha256WithRSAEncryption
58:db:98:b3:a0:cb:3c:d6:d8:fc:bf:fa:62:f8:e5:dc:d8:3b:
0b:1b:2d:88:17:4e:f9:f4:72:27:33:0c:6f:cd:99:50:61:8a:
c5:82:f6:b0:8c:9e:cb:ad:29:df:13:91:52:ec:3f:9e:e2:88:
25:4c:2f:41:b8:1a:64:33:16:ed:20:ba:6b:ce:12:89:45:56:
47:69:83:25:cc:63:3d:5c:2f:2f:8a:3a:1e:b3:c6:5a:b0:53:
6b:5e:2a:a9:bc:83:b8:dc:51:e5:b1:f5:f3:21:d8:f9:85:42:
c4:76:a5:67:85:6b:b9:d6:65:66:ae:a0:54:6c:28:97:84:97:
00:a0:11:c2:a8:0f:c6:2c:a8:69:d5:89:ad:b8:3a:3f:3b:93:
3a:00:4c:9c:e1:f4:56:55:de:df:e8:15:e2:55:11:0a:c4:23:
bc:eb:93:09:ab:8f:ec:cd:c9:fb:01:7a:da:f3:7e:d4:6f:c9:
15:6e:7c:88:f0:85:7f:ee:ed:9e:af:4e:ca:15:1b:77:bf:c7:
54:f0:ac:c5:b3:63:b6:d7:84:02:39:f1:bb:28:59:9c:f4:1e:
a9:c4:56:0b:3e:ab:1e:6c:a6:51:32:ff:81:6e:90:69:4d:09:
38:31:5e:38:5a:a3:22:2d:7f:1e:00:6b:24:e5:fd:22:0d:91:
7b:0b:2c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:56:36 2025 by rpki-client