Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/1f3614-0c26-47dc-a815-5ff25a8c90a9/1/xkjB9ZwN0UbIC5sC5GDiEu9UCaE.roa
File: xkjB9ZwN0UbIC5sC5GDiEu9UCaE.roa (raw, json)
Hash identifier: iWhUr6519k52WZMrrVMsg9EKeinmZf8kOsWESLX+ruI=
Subject key identifier: C6:48:C1:F5:9C:0D:D1:46:C8:0B:9B:02:E4:60:E2:12:EF:54:09:A1
Certificate issuer: /CN=9955eaf7caee4846f2bcff7c7dac718b77adf68c
Certificate serial: 0689E11B
Authority key identifier: 99:55:EA:F7:CA:EE:48:46:F2:BC:FF:7C:7D:AC:71:8B:77:AD:F6:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVXq98ruSEbyvP98faxxi3et9ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/1f3614-0c26-47dc-a815-5ff25a8c90a9/1/xkjB9ZwN0UbIC5sC5GDiEu9UCaE.roa
Signing time: Sat 01 Jan 2022 02:54:46 +0000
ROA not before: Sat 01 Jan 2022 02:54:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205959
IP address blocks: 185.151.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109699355 (0x689e11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9955eaf7caee4846f2bcff7c7dac718b77adf68c
Validity
Not Before: Jan 1 02:54:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c648c1f59c0dd146c80b9b02e460e212ef5409a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:5a:86:41:e7:c1:7c:67:3d:cd:e3:dc:e9:
b9:7e:0e:8b:9f:a0:db:4a:99:fb:6a:65:12:43:d1:
ec:fd:a5:a3:9c:cb:11:67:d0:a4:13:cd:cd:29:f0:
00:f4:84:7e:88:11:fe:52:58:57:d8:d9:92:9e:a7:
09:6c:b2:6a:d3:fd:1f:e9:a3:1e:16:13:8a:33:3c:
e0:e3:2d:ed:55:ea:cb:d6:7f:60:f9:bd:8f:7c:3c:
04:dd:3a:26:6d:65:b4:b0:2c:12:a3:b4:a2:85:36:
d3:e2:63:0a:10:6d:68:23:89:7d:66:b6:d6:22:8c:
24:a9:40:d3:d1:b5:0e:6d:3c:e2:69:09:4e:64:1e:
05:56:c4:32:4e:ee:36:28:26:c9:3f:7e:a5:ba:71:
74:dc:36:14:b0:0a:6a:0e:53:3b:6d:ff:12:41:eb:
7a:fb:51:e0:4e:8d:f8:7b:bd:5b:49:13:01:f6:91:
4c:69:ce:bc:f0:e1:99:33:8b:f3:dd:a5:d3:56:49:
79:89:99:0f:a2:b2:12:ec:45:4d:51:1f:44:ea:75:
80:77:d6:11:9e:43:ae:bc:4b:49:56:16:65:93:7a:
fa:a2:d0:b5:de:75:98:30:e0:9e:f9:04:20:27:ec:
00:77:be:31:64:a8:2a:e3:aa:d1:dd:cf:df:7b:0b:
73:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:48:C1:F5:9C:0D:D1:46:C8:0B:9B:02:E4:60:E2:12:EF:54:09:A1
X509v3 Authority Key Identifier:
keyid:99:55:EA:F7:CA:EE:48:46:F2:BC:FF:7C:7D:AC:71:8B:77:AD:F6:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVXq98ruSEbyvP98faxxi3et9ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1f3614-0c26-47dc-a815-5ff25a8c90a9/1/xkjB9ZwN0UbIC5sC5GDiEu9UCaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1f3614-0c26-47dc-a815-5ff25a8c90a9/1/mVXq98ruSEbyvP98faxxi3et9ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.164.0/22
Signature Algorithm: sha256WithRSAEncryption
82:68:98:75:bf:a8:08:93:70:78:d6:e4:68:f3:90:ec:01:e8:
46:0f:5d:40:bf:50:24:67:3e:27:9f:03:96:6c:59:63:12:fc:
7b:58:f1:ca:31:1f:2d:2d:66:18:a7:cc:67:d6:ba:8f:f4:94:
a5:e9:d6:b0:0a:df:d0:12:c2:e7:8d:11:29:2c:5d:1f:b1:2a:
fa:93:3a:11:f8:20:32:3a:19:12:c6:cc:d4:2e:89:2a:90:4d:
03:33:fd:c4:30:d8:dd:d7:0b:0c:2f:ca:a0:ac:cb:9d:5f:0b:
79:5c:a8:c7:99:a6:ba:e4:b3:8b:b6:c3:27:84:50:80:ec:48:
8d:2c:b7:a3:66:91:51:79:99:d8:24:32:37:dc:ca:32:39:b9:
60:6e:e1:62:ac:fa:49:74:31:2b:cc:63:77:a2:1a:38:9d:36:
8c:b4:3f:10:5b:07:cc:02:ea:04:03:ea:cf:6c:70:20:66:1f:
2f:5a:eb:bc:b1:be:52:a1:12:93:48:75:54:10:91:71:ab:f2:
ae:79:7d:78:4d:79:5a:5a:fb:bb:4c:f6:2d:76:86:c8:8f:1c:
65:e5:a9:31:d1:9a:85:d8:2d:d9:c7:f8:2c:27:27:b8:7b:9c:
3b:ad:e5:ef:78:ba:be:1c:62:7f:be:8a:c6:5d:91:15:ba:c3:
69:a1:8d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:18:05 2025 by rpki-client