Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/PtAh0hh1tEBT1LTWy7mbS5G5sZk.roa
File: PtAh0hh1tEBT1LTWy7mbS5G5sZk.roa (raw, json)
Hash identifier: FLq3cDnTepdpk4DXkD/Uw/vqKQlL1dhSJphz8d84YrQ=
Subject key identifier: 3E:D0:21:D2:18:75:B4:40:53:D4:B4:D6:CB:B9:9B:4B:91:B9:B1:99
Certificate issuer: /CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Certificate serial: 0AC2D33E
Authority key identifier: 7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/PtAh0hh1tEBT1LTWy7mbS5G5sZk.roa
Signing time: Mon 14 Mar 2022 17:06:22 +0000
ROA not before: Mon 14 Mar 2022 17:06:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210443
IP address blocks: 185.126.158.0/23 maxlen: 24
185.126.156.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180540222 (0xac2d33e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Validity
Not Before: Mar 14 17:06:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ed021d21875b44053d4b4d6cbb99b4b91b9b199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b4:c0:1f:51:4f:cd:bc:aa:ed:c3:e4:79:a1:
bb:fb:b0:2b:a6:6e:e9:0f:ce:ca:2d:3b:99:71:f6:
ee:67:34:49:cb:78:8a:c5:5d:44:9f:66:7f:03:16:
68:e2:43:f7:0f:a6:3a:ed:2d:9e:08:b4:dc:19:f4:
8e:d0:70:0d:01:1d:2b:76:b6:27:9a:d0:37:b5:f4:
ff:fa:18:74:e2:d8:c2:26:9f:d8:76:03:77:64:6d:
10:15:3d:56:fa:0c:7d:f2:9f:0d:f3:b8:b0:c6:28:
a1:f9:1c:76:aa:48:48:fd:88:71:25:48:dc:ae:13:
3b:11:c3:6a:2d:6a:9e:b3:1c:c2:3b:f8:d0:03:1d:
ba:51:08:bb:31:27:46:54:6c:f5:b3:42:5f:c6:c3:
97:20:f6:78:00:7d:e0:d3:57:b1:59:30:0c:7e:ae:
7f:1d:c3:a4:9d:e4:19:91:42:a6:38:59:e9:ad:fe:
14:0a:aa:6b:c5:3e:d4:be:09:e9:63:6a:f7:ad:cb:
1c:d9:64:8e:bf:b2:67:27:ad:fd:70:87:e6:ce:bc:
17:c8:d7:84:58:c0:ea:c4:48:5f:99:dd:5c:11:e0:
e3:52:d0:bb:99:5e:30:8e:ed:26:ca:1f:fc:0b:fa:
42:6f:d0:d3:4f:89:bc:70:20:4c:bb:e4:8d:44:30:
d1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D0:21:D2:18:75:B4:40:53:D4:B4:D6:CB:B9:9B:4B:91:B9:B1:99
X509v3 Authority Key Identifier:
keyid:7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/PtAh0hh1tEBT1LTWy7mbS5G5sZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/fyA8FBnsaiHmYScgP1HB-nTcBE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.156.0/22
Signature Algorithm: sha256WithRSAEncryption
90:ee:e8:4f:3b:d8:32:ad:63:0d:e8:4a:86:d6:57:b0:8d:4f:
1d:75:d7:67:43:b3:6c:91:d5:68:03:bd:07:17:cf:04:8e:bb:
bb:e2:94:75:31:fe:3b:77:3b:39:24:c7:37:0e:ae:0a:17:bc:
ec:ff:de:cd:7b:b9:5c:3c:e3:de:d7:59:c9:c8:4b:1f:dd:24:
6f:19:eb:c9:b3:6b:d8:79:2e:69:dd:13:c0:42:be:3b:c7:5d:
77:76:2c:39:f8:45:b4:d1:fb:72:3d:b4:23:af:01:de:4a:67:
42:b5:d5:ed:a4:e8:96:15:d8:7f:54:77:a4:d1:18:09:93:bd:
45:ed:05:03:78:f8:fc:e2:56:76:a3:ed:7e:35:36:fb:a5:1d:
c1:40:b7:d1:99:c0:30:0f:34:e6:49:7a:76:42:f4:32:93:88:
e6:c3:ac:28:35:f5:d3:64:86:24:ae:24:96:2b:57:97:89:3f:
12:99:73:71:9d:bf:9a:36:73:54:a8:3b:a5:0f:45:56:4d:5a:
18:19:a9:bb:de:62:6c:86:0f:a7:6a:52:79:52:85:6d:ec:e4:
42:a3:c9:76:36:7b:ca:29:e9:44:5d:6c:b7:21:f9:a6:13:dc:
c9:49:ff:e3:6c:7c:28:5c:ad:61:8a:6a:a4:f1:ed:ff:79:ee:
8f:49:12:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:13:37 2025 by rpki-client