Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/kSwOuxu5xvrcZgl8lP3MZQffFk8.roa
File: kSwOuxu5xvrcZgl8lP3MZQffFk8.roa (raw, json)
Hash identifier: pM+j5YpuCmYyuS6rQ87kR8/dxy8qS34MTjs/T5Hi6OQ=
Subject key identifier: 91:2C:0E:BB:1B:B9:C6:FA:DC:66:09:7C:94:FD:CC:65:07:DF:16:4F
Certificate issuer: /CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Certificate serial: 018239C84819BF384CDC8EB730565A3BB2B6
Authority key identifier: 7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/kSwOuxu5xvrcZgl8lP3MZQffFk8.roa
Signing time: Tue 26 Jul 2022 09:13:23 +0000
ROA not before: Tue 26 Jul 2022 09:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 185.126.134.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:39:c8:48:19:bf:38:4c:dc:8e:b7:30:56:5a:3b:b2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Validity
Not Before: Jul 26 09:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=912c0ebb1bb9c6fadc66097c94fdcc6507df164f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8c:7c:27:96:a7:1f:d6:a4:d0:cd:11:04:44:
6f:0c:26:12:bc:30:81:97:e8:97:c7:be:a4:70:ae:
bf:96:ff:60:6d:9c:b1:8b:76:cf:28:bc:5d:10:57:
4e:a5:cf:b2:33:c1:44:d5:41:fd:ec:28:86:22:4c:
32:e0:81:79:59:4b:b3:80:e1:d1:7b:d9:57:8b:9e:
8c:9c:38:9c:bd:97:96:c3:2b:71:c3:eb:88:80:ba:
5d:be:4f:73:2a:20:a9:14:6b:4d:64:d2:cf:bd:1b:
c7:d1:f4:11:41:1d:5b:44:ee:a9:4d:0a:05:49:e3:
a1:8c:ff:25:7f:8d:63:aa:ab:79:2b:c0:fe:e4:58:
26:cf:68:39:79:d5:5e:bd:f1:69:9e:1b:f0:2d:2b:
18:47:50:e6:3f:51:2e:ed:b8:fc:62:31:29:6b:61:
e2:d6:79:cc:8f:27:f4:4d:6d:20:19:25:41:62:50:
7c:e3:0a:a5:be:05:fe:c4:25:66:5e:0b:12:3e:fb:
bf:37:85:ea:5e:e6:8d:f3:65:cc:eb:61:42:30:b9:
83:f3:fc:28:3e:8d:ea:fb:79:7f:08:bc:13:69:77:
9f:48:61:7a:60:ad:61:d6:df:c4:10:a9:25:ab:8a:
49:1f:ad:22:ad:9a:3f:6b:82:1e:de:97:2e:45:d5:
bf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2C:0E:BB:1B:B9:C6:FA:DC:66:09:7C:94:FD:CC:65:07:DF:16:4F
X509v3 Authority Key Identifier:
keyid:7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/kSwOuxu5xvrcZgl8lP3MZQffFk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/fyA8FBnsaiHmYScgP1HB-nTcBE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.134.0/23
Signature Algorithm: sha256WithRSAEncryption
68:a9:48:ea:84:05:4b:7c:34:2d:48:13:32:40:c5:ee:1a:ef:
f0:36:40:11:d2:2f:ea:8d:26:42:6c:71:2e:45:8e:58:7c:af:
f7:1d:46:f1:a8:a4:ff:57:28:e4:cc:b9:65:fc:15:97:ab:77:
16:39:1f:46:a5:7e:6a:00:47:1f:d4:dc:93:a9:f7:14:51:af:
23:b9:a5:c6:df:18:3e:31:7e:ae:48:5c:68:e4:db:d5:ce:79:
5a:cd:38:25:32:c5:60:6b:47:6c:b2:0f:e9:d0:11:5f:95:c5:
d1:23:cd:f2:3a:85:10:f0:60:ac:00:7f:9f:82:2d:40:1b:5b:
a9:c7:70:4b:ed:44:86:1c:e5:46:41:45:bc:a3:5c:38:f4:f1:
0e:1c:de:9b:fc:67:4b:77:3c:15:54:e0:96:95:a3:64:5e:33:
75:1b:c0:6e:c3:8d:c8:31:46:1c:bc:85:78:d6:d6:a4:a2:ca:
99:84:ea:c4:df:ab:93:a7:ec:b1:fd:5a:02:1f:83:cd:61:11:
54:fb:77:9c:c3:05:04:1b:be:cf:86:b9:90:f0:8b:9a:67:a0:
09:a4:55:15:de:17:57:74:83:ad:b3:a3:26:fd:86:1f:f1:9c:
ea:2e:47:dc:11:6c:c4:23:6b:44:c9:59:c4:4d:07:60:f6:b1:
db:9a:48:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:46:41 2025 by rpki-client