Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/guIsIv8CsHapm5OnjZsoO6-r7rY.roa
File: guIsIv8CsHapm5OnjZsoO6-r7rY.roa (raw, json)
Hash identifier: ijwo9I5xRYttn+eJ4zsgre8ex8VPwajC6Be3LxqDNAI=
Subject key identifier: 82:E2:2C:22:FF:02:B0:76:A9:9B:93:A7:8D:9B:28:3B:AF:AB:EE:B6
Certificate issuer: /CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Certificate serial: 0A8B8AE7
Authority key identifier: 7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/guIsIv8CsHapm5OnjZsoO6-r7rY.roa
Signing time: Thu 17 Feb 2022 07:52:45 +0000
ROA not before: Thu 17 Feb 2022 07:52:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 185.126.158.0/23 maxlen: 24
185.126.156.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176917223 (0xa8b8ae7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Validity
Not Before: Feb 17 07:52:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82e22c22ff02b076a99b93a78d9b283bafabeeb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5b:68:ab:ea:fc:ef:57:39:b5:64:11:31:9c:
7a:99:a4:b9:96:1a:42:28:2b:31:78:8e:61:ca:a3:
4d:31:fc:d0:12:b1:2a:63:1e:ca:4f:4e:12:f1:54:
56:11:23:2d:22:d7:f5:76:06:9e:ed:17:93:d6:74:
35:b4:90:0d:2b:49:dc:1f:53:ec:b3:f8:a4:0e:67:
51:b1:11:e9:30:5e:23:c9:84:73:ce:df:98:35:53:
32:13:d5:dd:d4:a2:cf:af:5e:5c:91:ba:11:2d:c0:
7c:cc:4b:bc:f8:2f:55:30:47:48:7a:60:f4:49:58:
3c:8b:93:b4:e4:b0:84:03:39:76:67:83:b1:90:56:
fb:b8:e3:4b:97:38:ad:7f:a7:5b:ac:a2:6b:7c:a5:
2e:89:5b:16:c6:f0:88:00:51:2f:c6:4c:d7:ab:a4:
da:e9:f2:06:4f:6a:18:4d:16:4d:be:7d:ef:02:77:
a1:26:db:8e:24:1b:63:87:45:8f:1c:1b:d2:78:73:
14:39:af:be:4e:5c:1e:b7:6a:d6:9a:88:16:c2:a0:
01:48:59:4d:21:97:49:df:cc:18:e4:f3:4a:2d:40:
a4:0b:4a:2d:49:f2:cb:bc:af:b1:ca:16:4c:a3:62:
b4:3b:c2:7b:ca:13:49:20:fa:e0:37:5a:e4:33:23:
c2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E2:2C:22:FF:02:B0:76:A9:9B:93:A7:8D:9B:28:3B:AF:AB:EE:B6
X509v3 Authority Key Identifier:
keyid:7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/guIsIv8CsHapm5OnjZsoO6-r7rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/fyA8FBnsaiHmYScgP1HB-nTcBE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.156.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:80:c3:9b:36:f0:26:6b:0c:16:8e:25:ab:37:f9:38:fb:98:
53:ca:f6:ae:14:94:a0:b0:44:3d:e9:e6:7a:e0:5d:50:15:b2:
58:09:8c:a0:ed:45:aa:19:cf:b6:fb:30:b7:c8:c9:45:c0:60:
82:fd:aa:b0:d7:60:58:55:d6:7b:4a:00:97:48:80:05:a8:c5:
98:68:f8:bd:54:b6:75:de:ea:0d:4b:54:71:19:d5:e9:80:8d:
14:5e:28:81:c6:de:a0:4c:c5:aa:f5:98:45:b1:77:fb:c4:bc:
dc:3d:1e:d0:b2:c5:cd:dd:73:97:3c:30:b9:63:fb:4a:e4:25:
20:50:ab:b6:e1:86:6a:8b:ca:55:4a:b5:7d:99:fb:97:06:5f:
8a:75:6c:60:ac:19:e7:21:75:f4:90:9d:93:53:f8:4d:77:10:
95:3b:a1:a9:92:9f:86:59:41:a5:da:53:42:38:4a:8f:ea:3a:
a7:6e:da:c8:db:53:cb:60:90:48:7a:e7:f6:20:69:c2:df:43:
15:2d:de:ed:e4:4b:15:d5:00:2f:3d:3a:da:ab:11:28:99:22:
71:fd:c1:5b:01:d1:b4:53:37:2e:89:bf:d4:46:f3:d9:44:bb:
1a:0b:18:9b:0b:bf:f6:a9:2f:b6:b2:c1:3b:d9:4e:f8:5c:85:
9f:bf:85:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:11:30 2025 by rpki-client