Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/cFkzSjauMRdzzx8HlEu6W1qr9z8.roa
File: cFkzSjauMRdzzx8HlEu6W1qr9z8.roa (raw, json)
Hash identifier: 3bNIE69Z0E59rdKT7LG30yKaKt8jWjN4TwgyKJN+vA4=
Subject key identifier: 70:59:33:4A:36:AE:31:17:73:CF:1F:07:94:4B:BA:5B:5A:AB:F7:3F
Certificate issuer: /CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Certificate serial: 0B71D92B
Authority key identifier: 7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/cFkzSjauMRdzzx8HlEu6W1qr9z8.roa
Signing time: Sat 28 May 2022 08:17:13 +0000
ROA not before: Sat 28 May 2022 08:17:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204968
IP address blocks: 185.126.156.0/23 maxlen: 24
185.126.158.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192010539 (0xb71d92b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Validity
Not Before: May 28 08:17:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7059334a36ae311773cf1f07944bba5b5aabf73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:15:18:27:43:d4:90:14:8b:9e:f0:d9:a5:17:
49:0a:9d:e6:3a:c9:83:33:1e:98:60:5d:5f:2c:93:
e9:06:d1:ac:18:1f:60:1a:91:ef:40:c0:53:fa:18:
84:fe:ae:67:d2:dd:f7:c5:76:33:d9:d8:55:86:55:
0b:bd:c6:0e:da:46:80:e5:ae:96:e9:ae:ab:b1:06:
ce:73:f0:41:f9:4d:f5:62:6b:de:d6:48:a8:82:b2:
e1:7f:be:c6:6b:f8:9e:00:e3:2f:f0:27:0a:3c:7f:
8b:fc:ce:9d:10:99:4b:6d:73:e3:1c:9c:e1:26:19:
9e:57:57:83:01:ec:24:3f:c9:de:4b:d0:df:18:b6:
2a:7d:f5:b2:27:1e:c2:0e:66:09:7e:31:fa:e3:8e:
7f:e6:fc:8d:6f:8d:4a:62:f1:9c:dd:ed:64:48:d6:
87:3f:e8:ca:e1:60:fb:84:83:e8:9d:7b:ba:c4:22:
80:bc:a9:9b:6d:31:e6:09:2a:d2:b8:25:88:36:7f:
25:10:58:c0:0f:29:f9:6b:79:93:77:72:26:8e:0a:
9a:94:a9:22:ad:9d:52:7c:63:c7:b5:ae:e5:41:8a:
17:f6:90:3a:99:64:2f:32:53:53:e7:9d:53:f4:ef:
6c:32:76:99:d1:cf:92:82:86:30:1a:3d:37:f3:1f:
72:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:59:33:4A:36:AE:31:17:73:CF:1F:07:94:4B:BA:5B:5A:AB:F7:3F
X509v3 Authority Key Identifier:
keyid:7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/cFkzSjauMRdzzx8HlEu6W1qr9z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/fyA8FBnsaiHmYScgP1HB-nTcBE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.156.0/22
Signature Algorithm: sha256WithRSAEncryption
98:e5:e3:ea:37:75:e2:04:d2:b9:c7:6e:1a:09:63:68:fd:4a:
1b:51:46:0c:b3:32:b5:bc:ed:10:7f:86:e9:dc:1f:b8:54:ed:
08:4f:89:9f:02:78:b6:c1:73:9b:61:17:3e:f5:f0:08:06:e7:
95:e0:9b:7d:0b:00:95:5d:39:b9:74:58:1b:14:11:9f:55:1d:
23:00:43:9f:d5:19:2f:1c:58:79:75:74:57:77:95:94:03:25:
cc:be:06:31:f1:b7:56:dd:3a:db:64:11:bf:46:ab:92:71:b9:
dc:c4:9f:ad:37:a6:03:b2:55:06:fd:19:e4:0c:14:a6:6e:d1:
55:f0:84:45:09:96:d8:0f:0a:70:16:e2:20:3c:de:e3:73:3c:
23:83:4e:7c:7e:a0:5a:d4:45:bc:c1:19:3a:04:66:62:6b:bc:
7f:2b:b0:c7:4a:69:47:83:3b:c4:ff:7e:8e:fc:09:38:b9:91:
78:98:d9:10:4e:49:8e:15:96:a6:97:44:3b:4e:c6:52:96:c3:
46:a7:f4:99:5d:52:e2:8b:32:40:c1:d3:99:2b:16:33:76:8b:
50:b4:43:e3:fe:cb:f5:f7:b1:62:5c:e5:ce:8a:3a:c3:d2:2c:
95:98:e8:45:aa:d4:10:a4:bb:e8:20:25:b2:7c:a4:75:d6:f4:
50:9a:8b:bd
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEC3HZKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZjIwM2MxNDE5ZWM2YTIxZTY2MTI3MjAzZjUxYzFmYTc0ZGMwNDRmMB4XDTIyMDUy
ODA4MTcxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzA1OTMzNGEzNmFl
MzExNzczY2YxZjA3OTQ0YmJhNWI1YWFiZjczZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM8VGCdD1JAUi57w2aUXSQqd5jrJgzMemGBdXyyT6QbRrBgf
YBqR70DAU/oYhP6uZ9Ld98V2M9nYVYZVC73GDtpGgOWulumuq7EGznPwQflN9WJr
3tZIqIKy4X++xmv4ngDjL/AnCjx/i/zOnRCZS21z4xyc4SYZnldXgwHsJD/J3kvQ
3xi2Kn31sicewg5mCX4x+uOOf+b8jW+NSmLxnN3tZEjWhz/oyuFg+4SD6J17usQi
gLypm20x5gkq0rgliDZ/JRBYwA8p+Wt5k3dyJo4KmpSpIq2dUnxjx7Wu5UGKF/aQ
OplkLzJTU+edU/TvbDJ2mdHPkoKGMBo9N/MfchUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRwWTNKNq4xF3PPHweUS7pbWqv3PzAfBgNVHSMEGDAWgBR/IDwUGexqIeZh
JyA/UcH6dNwETzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2Z5QThGQm5zYWlIbVlTY2dQMUhCLW5UY0JFOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmYvYzkwNDY5LWU2MzgtNGE1Ny05MmNlLTUzNGU3M2NjM2I3Yy8x
L2NGa3pTamF1TVJkenp4OEhsRXU2VzFxcjl6OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYv
YzkwNDY5LWU2MzgtNGE1Ny05MmNlLTUzNGU3M2NjM2I3Yy8xL2Z5QThGQm5zYWlI
bVlTY2dQMUhCLW5UY0JFOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArl+nDANBgkqhkiG9w0BAQsFAAOC
AQEAmOXj6jd14gTSucduGgljaP1KG1FGDLMytbztEH+G6dwfuFTtCE+JnwJ4tsFz
m2EXPvXwCAbnleCbfQsAlV05uXRYGxQRn1UdIwBDn9UZLxxYeXV0V3eVlAMlzL4G
MfG3Vt0622QRv0arknG53MSfrTemA7JVBv0Z5AwUpm7RVfCERQmW2A8KcBbiIDze
43M8I4NOfH6gWtRFvMEZOgRmYmu8fyuwx0ppR4M7xP9+jvwJOLmReJjZEE5JjhWW
ppdEO07GUpbDRqf0mV1S4osyQMHTmSsWM3aLULRD4/7L9fexYlzlzoo6w9IslZjo
RarUEKS76CAlsnykddb0UJqLvQ==
-----END CERTIFICATE-----
Generated at Wed Mar 12 12:53:56 2025 by rpki-client