Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/bFdo2i7fjcwXYaViUso_bZ-F4xQ.roa
File: bFdo2i7fjcwXYaViUso_bZ-F4xQ.roa (raw, json)
Hash identifier: zRv/d038JljD0LhpjD9UIc8DX14GUYrFgkcZwljpKCs=
Subject key identifier: 6C:57:68:DA:2E:DF:8D:CC:17:61:A5:62:52:CA:3F:6D:9F:85:E3:14
Certificate issuer: /CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Certificate serial: 0B5DD8B6
Authority key identifier: 7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/bFdo2i7fjcwXYaViUso_bZ-F4xQ.roa
Signing time: Wed 18 May 2022 14:28:17 +0000
ROA not before: Wed 18 May 2022 14:28:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 185.126.158.0/23 maxlen: 24
185.126.156.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190699702 (0xb5dd8b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Validity
Not Before: May 18 14:28:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c5768da2edf8dcc1761a56252ca3f6d9f85e314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:49:70:db:e6:6b:ca:f8:ae:43:59:ef:50:1e:
e6:f0:59:21:55:90:2c:4c:6d:48:97:50:11:43:85:
1f:ed:32:2e:aa:9d:b4:05:6c:cb:ec:89:f4:61:d0:
ef:3f:f9:c6:35:d4:21:a2:cc:c2:5c:fe:13:bc:bb:
e8:1a:0e:c6:a1:92:91:4b:eb:98:9f:de:82:d5:4c:
e7:6c:01:fd:7c:c6:df:07:f5:a4:99:89:cb:0d:4c:
45:77:5d:21:dd:3d:43:5a:2c:22:7e:5f:64:6c:99:
19:da:05:40:a1:a6:38:de:52:aa:9c:0e:3d:b8:c3:
f1:98:e4:86:29:d0:00:1a:88:3e:ca:e6:d1:94:ce:
6c:72:41:25:63:9e:39:31:8e:85:df:88:b0:e1:c3:
d2:03:a7:b8:af:db:c7:f5:11:62:61:79:99:a8:c8:
84:9d:d9:02:93:04:37:71:4a:15:48:d9:44:46:1d:
16:9a:52:c1:98:2d:e7:1e:60:54:93:0c:a7:5a:2e:
4c:20:74:34:02:c7:0e:5e:01:ce:20:5f:59:35:87:
a5:a6:88:02:84:6a:ae:0e:eb:ba:27:d1:52:3c:bc:
b7:3f:85:dc:2e:b0:e6:14:a3:b0:64:13:e0:a8:fe:
2d:58:13:3f:48:90:01:86:bf:d2:3a:3b:09:49:f7:
d5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:57:68:DA:2E:DF:8D:CC:17:61:A5:62:52:CA:3F:6D:9F:85:E3:14
X509v3 Authority Key Identifier:
keyid:7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/bFdo2i7fjcwXYaViUso_bZ-F4xQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/fyA8FBnsaiHmYScgP1HB-nTcBE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.156.0/22
Signature Algorithm: sha256WithRSAEncryption
83:54:a5:ce:a4:f1:bc:04:16:eb:b6:2e:b3:e4:b4:18:cd:b4:
5b:57:e3:bd:eb:3e:f6:3d:5b:84:e4:86:c1:21:d1:5e:e1:3f:
a7:66:3f:86:60:42:96:bd:4f:8a:8f:80:b9:d3:80:fd:71:79:
31:29:4f:82:7d:e5:b2:78:8e:f2:c5:8b:90:62:90:cb:70:d7:
ea:0f:59:f1:48:25:3b:30:36:6a:54:00:8c:3e:90:78:d2:11:
0d:69:23:1e:58:54:fc:cb:9f:70:74:89:41:5d:ae:9e:71:3f:
15:09:3b:38:14:c7:11:1c:d1:0b:76:17:91:fd:35:e9:74:08:
63:6b:0b:86:d4:01:f0:cf:e7:77:29:19:5d:d9:6f:3f:18:09:
25:90:2f:90:0a:20:f8:5e:a5:97:e3:85:43:2f:13:e6:7f:84:
59:b3:c4:0e:f6:23:1d:c0:f2:f9:cf:e0:a5:3c:60:15:b1:2d:
54:37:b9:3e:f5:1d:ab:45:0c:d2:f4:c6:fd:d7:0a:ac:ea:35:
a9:cf:30:74:38:26:58:d5:ac:56:a2:03:ca:76:94:8c:45:2a:
12:e3:fc:94:1b:c9:1a:16:7f:1d:4a:50:03:44:4d:da:07:1f:
09:5a:08:cb:e3:b2:a4:9f:a8:48:28:86:14:89:be:66:e6:ad:
29:0b:5d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:46:36 2025 by rpki-client