Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/Y0wd5pVxgBa2Hv652ytKJbxGj3s.roa
File: Y0wd5pVxgBa2Hv652ytKJbxGj3s.roa (raw, json)
Hash identifier: yHldLYqXILER2nfcoYMEI/yyLhbuvTdXXgKF07jf/oQ=
Subject key identifier: 63:4C:1D:E6:95:71:80:16:B6:1E:FE:B9:DB:2B:4A:25:BC:46:8F:7B
Certificate issuer: /CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Certificate serial: 018239C84964446165E60108430E54F0932C
Authority key identifier: 7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/Y0wd5pVxgBa2Hv652ytKJbxGj3s.roa
Signing time: Tue 26 Jul 2022 09:13:23 +0000
ROA not before: Tue 26 Jul 2022 09:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 185.126.134.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:39:c8:49:64:44:61:65:e6:01:08:43:0e:54:f0:93:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Validity
Not Before: Jul 26 09:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=634c1de695718016b61efeb9db2b4a25bc468f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:26:6f:15:71:08:5e:9b:ff:f8:d4:14:6a:fc:
22:2a:e0:83:5f:03:de:e7:72:61:66:e3:e1:5b:83:
ee:3b:c2:c0:ec:a6:91:59:89:9c:c5:26:a5:45:d1:
25:06:30:8c:cb:fc:b3:17:6e:a8:12:19:76:48:d2:
b1:b2:bb:ec:b6:86:7d:05:56:bf:e0:35:a5:1a:61:
d9:54:62:84:53:cd:87:20:11:03:70:b9:9c:c3:16:
dd:c4:be:2b:4e:72:db:85:25:c0:ac:7c:73:60:82:
57:1d:69:b7:2c:bb:cc:b7:a9:c5:5b:7b:0e:e1:ff:
4d:95:d6:2d:72:df:ba:3d:15:5d:cd:f6:81:e8:79:
f0:fe:ba:91:09:ca:80:34:5c:79:36:b0:e9:a3:09:
c5:84:6c:31:a9:b6:e8:2a:71:f0:41:8b:bf:88:d9:
b7:b5:59:7e:01:48:53:8a:40:d4:7b:cc:26:b5:6d:
42:34:66:5d:75:d1:42:ff:3b:09:54:ba:eb:0a:a7:
e5:08:be:80:6c:7a:85:6b:52:82:91:3c:12:93:fa:
da:7d:bf:85:0c:74:4e:cd:e7:85:6f:62:c4:80:9e:
77:67:44:08:e2:a1:96:98:81:9f:c2:cf:45:a3:a6:
ad:42:50:b7:fd:19:ed:fa:11:3b:81:18:0a:37:9f:
d6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4C:1D:E6:95:71:80:16:B6:1E:FE:B9:DB:2B:4A:25:BC:46:8F:7B
X509v3 Authority Key Identifier:
keyid:7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/Y0wd5pVxgBa2Hv652ytKJbxGj3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/fyA8FBnsaiHmYScgP1HB-nTcBE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.134.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:4f:c8:68:b9:35:99:99:79:f6:b1:75:9f:29:e2:d2:c5:13:
cc:f9:95:65:74:c6:6a:8c:7b:36:95:f9:02:89:dc:00:80:9d:
8f:07:eb:80:0b:7c:02:79:a0:02:8f:d6:27:e7:64:dd:f9:9b:
97:f7:88:b9:c5:4c:62:d5:5f:60:db:59:bc:aa:cf:b0:0c:3f:
6f:a1:eb:fa:c9:5b:98:a2:1c:b1:58:f6:d1:0a:4d:4e:09:3b:
12:0f:de:00:d4:91:53:64:2b:69:35:01:d7:52:58:a8:70:50:
2f:c6:f8:ca:02:f6:43:fe:ce:e9:26:75:91:6b:27:35:14:98:
bf:84:01:0d:7e:ac:c9:ea:db:db:cc:10:5d:b7:83:63:52:7a:
44:9f:58:17:a6:3d:fd:95:b5:51:aa:06:2a:cd:77:5c:f0:eb:
ee:2d:ea:d4:72:95:42:a9:3f:30:44:cb:51:29:aa:cd:69:93:
df:25:eb:3d:b2:dd:18:67:17:8b:1f:9c:e0:fb:21:3b:9c:c2:
c1:fa:9a:52:ad:ab:4f:7a:3b:02:3e:ba:1a:3d:1f:9b:98:d4:
0b:62:e4:08:29:0a:27:d7:ce:05:0c:4f:29:c0:85:1a:6f:a3:
f9:76:88:89:b3:3f:e0:98:37:29:8b:52:44:80:8e:53:25:e9:
77:7c:9b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:53:36 2025 by rpki-client