Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/s8VRFCJn3ttMEEgpBLvkcG2ICxQ.roa
File: s8VRFCJn3ttMEEgpBLvkcG2ICxQ.roa (raw, json)
Hash identifier: D325JQ4PbRZdn/OT/MYVXTS5/XuhsxypqKDJlSxA0os=
Subject key identifier: B3:C5:51:14:22:67:DE:DB:4C:10:48:29:04:BB:E4:70:6D:88:0B:14
Certificate issuer: /CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Certificate serial: 0AD1F8F0
Authority key identifier: 7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/s8VRFCJn3ttMEEgpBLvkcG2ICxQ.roa
Signing time: Sat 19 Mar 2022 07:22:08 +0000
ROA not before: Sat 19 Mar 2022 07:22:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 185.126.158.0/23 maxlen: 24
185.126.156.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181532912 (0xad1f8f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Validity
Not Before: Mar 19 07:22:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3c551142267dedb4c10482904bbe4706d880b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:59:23:64:f2:21:a2:90:fc:6c:47:e7:bc:
73:54:bb:f5:f3:86:d9:18:41:8f:7b:4b:22:60:ff:
2e:94:dd:80:94:8a:1b:be:15:23:e4:2c:03:69:39:
6e:ae:26:d5:4c:f8:5c:da:81:48:a4:00:9c:8b:40:
46:a6:2c:05:c3:30:45:40:e8:d2:0f:3c:6f:82:79:
ee:ac:96:dd:fa:80:8d:01:be:9d:60:3d:9d:eb:69:
99:53:82:d6:65:26:8b:e2:c1:76:c9:aa:50:40:1a:
4f:59:ef:e2:20:37:41:32:4e:1b:0f:aa:d7:c7:17:
51:a6:57:34:29:79:d5:e1:e8:99:a3:71:2f:a3:6d:
b8:b8:55:58:cf:f2:cd:13:f1:71:b9:3c:7f:7e:44:
c9:f2:83:72:00:23:e0:54:84:9f:2a:02:75:74:f4:
8f:49:ca:70:d2:56:90:a5:23:28:43:27:0c:e7:26:
d8:bc:ed:86:88:1b:76:78:84:cd:2d:42:99:77:9a:
33:87:04:13:a8:25:7d:d7:d4:10:ff:05:13:fc:91:
7e:fe:d3:37:c1:b2:ff:df:e3:04:ce:90:ba:69:a5:
86:9d:fe:4d:3d:6d:77:ef:8e:06:36:69:45:96:24:
6b:f9:a6:5f:e9:7f:48:1f:18:91:60:78:a2:5d:70:
65:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C5:51:14:22:67:DE:DB:4C:10:48:29:04:BB:E4:70:6D:88:0B:14
X509v3 Authority Key Identifier:
keyid:7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/s8VRFCJn3ttMEEgpBLvkcG2ICxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/fyA8FBnsaiHmYScgP1HB-nTcBE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.156.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:76:7e:bd:20:9f:9e:2e:17:94:02:fd:00:51:68:00:0e:38:
79:fd:8d:95:b1:83:02:74:0b:2d:0f:b9:92:5e:25:e0:3c:b4:
76:81:bc:35:a5:c0:5a:2e:8f:3b:20:0d:e9:00:4b:d3:15:f2:
1a:74:de:d5:ba:e5:40:cb:af:26:5d:28:28:72:17:32:b6:bd:
d6:7b:16:32:a3:a2:18:62:e9:a7:b6:b9:f0:53:a7:40:05:16:
fd:10:15:39:ab:ba:a9:41:4e:f2:e6:58:ed:3e:fc:a8:00:b9:
15:6f:26:3f:6c:d9:b1:c1:ab:ec:38:ac:54:9e:34:60:3d:70:
1e:22:de:1a:08:e2:95:aa:cd:6d:c6:e0:0b:ce:d9:03:13:4c:
2f:fc:05:46:44:b0:81:5b:8d:6a:69:74:2d:d9:a5:f8:a8:ef:
b9:62:3c:1a:4a:95:ce:d0:0a:b7:35:64:07:00:aa:03:7d:00:
2b:3e:ed:8e:ef:6c:74:f2:0c:4f:f5:64:ef:70:fb:3d:69:f6:
62:9e:47:fb:ad:a8:24:e1:12:df:96:8b:9b:91:b0:a7:7d:81:
23:05:9f:c2:6b:ad:6c:df:80:1f:24:c6:40:8d:c6:c3:42:88:
2a:38:a2:af:d4:63:d4:1f:c9:e9:17:68:82:80:7e:02:f0:bc:
f5:68:94:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:58:26 2025 by rpki-client