Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/sIwiMzh6wO1zqc94BlUK5vJsZKE.roa
File: sIwiMzh6wO1zqc94BlUK5vJsZKE.roa (raw, json)
Hash identifier: TuHnl7sEvbl9cKLOsUbqRlnIAqUG+BtxXSs+YWq7z/c=
Subject key identifier: B0:8C:22:33:38:7A:C0:ED:73:A9:CF:78:06:55:0A:E6:F2:6C:64:A1
Certificate issuer: /CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Certificate serial: 018204E0B11CF3261B6ED15379CDA37E649D
Authority key identifier: 7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/sIwiMzh6wO1zqc94BlUK5vJsZKE.roa
Signing time: Sat 16 Jul 2022 02:40:10 +0000
ROA not before: Sat 16 Jul 2022 02:40:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 185.126.156.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:04:e0:b1:1c:f3:26:1b:6e:d1:53:79:cd:a3:7e:64:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Validity
Not Before: Jul 16 02:40:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b08c2233387ac0ed73a9cf7806550ae6f26c64a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:c0:2f:ad:83:a9:f7:c5:bb:37:f6:59:04:
20:6f:46:60:eb:a6:c5:5e:9d:64:4a:3d:ab:c2:e9:
1a:e7:02:6e:cc:9d:7c:fb:15:ca:53:99:1e:2d:cf:
a4:e5:3c:0b:f9:bf:ff:84:a3:fe:ad:fd:f7:98:2b:
81:ae:de:3c:04:2c:c8:e4:8a:b5:9c:21:ed:08:df:
04:c6:28:ba:80:3b:b8:81:a5:7a:43:86:43:6e:b4:
9b:c3:3f:0d:3b:e4:79:7d:6a:b0:65:16:41:00:ff:
78:b1:4a:62:65:23:97:91:85:4a:d3:77:9c:a0:03:
62:f1:fa:b2:dc:19:f5:bf:3d:69:b1:e8:0c:e2:3e:
ed:99:85:6f:8c:74:1f:68:20:c7:84:02:be:9f:51:
d5:d2:4f:37:8d:bc:7b:90:0d:1f:4c:c6:3c:3f:5f:
e6:1d:36:3e:c6:70:21:f7:16:65:54:ab:77:29:5b:
63:94:c9:25:2c:87:cd:ce:e6:51:44:07:cb:95:f4:
c0:cd:c0:a8:a0:39:31:74:41:57:7f:63:0b:d1:f2:
81:72:4d:dd:d3:31:ca:52:8a:46:83:a8:7a:19:65:
6a:ff:84:29:70:40:f8:64:78:34:82:bf:b1:b3:bc:
33:16:b3:e0:11:3c:95:36:3e:2f:7c:f3:3f:0e:de:
82:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8C:22:33:38:7A:C0:ED:73:A9:CF:78:06:55:0A:E6:F2:6C:64:A1
X509v3 Authority Key Identifier:
keyid:7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/sIwiMzh6wO1zqc94BlUK5vJsZKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/fyA8FBnsaiHmYScgP1HB-nTcBE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.156.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:19:dc:7b:17:81:a2:cc:f3:95:83:55:47:af:ab:49:0d:f9:
8b:43:7d:41:d5:ad:f0:9d:92:a9:2a:9d:ce:80:e7:97:62:af:
16:20:0c:34:7a:8a:1a:d5:64:35:c7:e8:4b:8a:8b:8d:ae:f8:
d0:53:b5:49:de:fa:21:71:77:3e:44:79:9b:46:d7:4f:9e:ce:
ba:2c:53:34:4b:6d:ac:47:27:25:5f:55:df:ff:3a:2d:c2:92:
e2:cb:18:17:42:f3:91:a9:9c:d9:59:b9:e9:4a:de:42:6b:8b:
60:76:8c:7f:cb:9c:62:09:ae:e9:cd:3b:49:26:35:06:b5:3c:
71:08:5a:2d:ee:98:25:e6:d5:30:be:06:23:69:73:f4:8b:e7:
16:93:1a:7f:72:d4:8d:29:7c:81:5a:4f:89:5f:5e:fb:bb:25:
51:1d:a8:5e:ad:81:49:79:41:6f:cf:04:df:e1:4d:54:62:b3:
30:3d:05:a2:7b:25:4d:7b:0d:1a:2f:07:55:58:60:d8:29:9f:
b3:bb:49:ee:8e:fe:c9:22:c1:68:06:f8:fa:7d:3c:3a:40:6a:
82:0e:73:8c:f6:08:b2:0c:c6:12:44:09:3e:4d:6a:3a:14:e8:
46:74:cf:17:e7:87:f1:fd:be:52:4d:52:40:fb:f5:aa:38:1c:
c2:9d:bb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:15:33 2025 by rpki-client