Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/sdvUYIB_Kx9mqeHNrtBGWpvwu2I.roa
File: sdvUYIB_Kx9mqeHNrtBGWpvwu2I.roa (raw, json)
Hash identifier: +Ha5aERrgrdqkTFSxAKYZ2G4d1mZnJoNfJR7H5GwdcU=
Subject key identifier: B1:DB:D4:60:80:7F:2B:1F:66:A9:E1:CD:AE:D0:46:5A:9B:F0:BB:62
Certificate issuer: /CN=2f1e253977bf583e0e420ec977a8ecf4ed154dbe
Certificate serial: 0AEDBEAF
Authority key identifier: 2F:1E:25:39:77:BF:58:3E:0E:42:0E:C9:77:A8:EC:F4:ED:15:4D:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lx4lOXe_WD4OQg7Jd6js9O0VTb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/sdvUYIB_Kx9mqeHNrtBGWpvwu2I.roa
Signing time: Sat 01 Jan 2022 13:58:40 +0000
ROA not before: Sat 01 Jan 2022 13:58:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205100
IP address blocks: 185.220.100.0/24 maxlen: 24
2a0b:f4c0::/32 maxlen: 48
2a0b:f4c0:400::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183353007 (0xaedbeaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1e253977bf583e0e420ec977a8ecf4ed154dbe
Validity
Not Before: Jan 1 13:58:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1dbd460807f2b1f66a9e1cdaed0465a9bf0bb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:43:14:d6:11:79:d0:d1:c4:0a:96:b0:22:
72:43:14:24:1e:f5:22:80:f9:98:be:85:f8:c1:6d:
3d:ef:0a:7a:92:44:83:05:c4:c1:5d:47:70:d8:ee:
a2:ea:bd:1f:97:ea:16:14:fd:35:7e:38:2d:1b:ba:
a2:92:bc:67:36:38:a7:bd:7e:d0:24:0b:18:c6:71:
e1:41:c0:61:af:fb:09:eb:79:f2:04:c2:eb:46:ea:
01:a4:19:08:71:12:6a:93:2e:c9:f6:f5:e2:f9:30:
7e:97:d1:92:3e:60:be:49:31:ca:dc:7c:16:ee:f8:
4d:1e:56:d9:a7:fd:14:d7:e0:27:8e:97:8e:c0:2f:
1b:6b:03:cc:c4:b3:30:67:eb:e8:59:77:cf:6f:66:
34:3f:c2:f7:fb:69:be:c3:fa:e7:7e:4a:9f:7a:6c:
f9:1d:48:83:cb:bb:24:47:95:69:2a:16:96:1a:ac:
04:3c:64:f8:c5:15:a9:55:16:20:2e:8d:14:d0:23:
b7:c2:28:91:16:88:96:bb:13:bd:da:b7:8c:fc:d4:
e1:f5:41:e4:fe:9c:c3:92:92:08:8b:32:0b:24:a3:
48:f1:1b:7a:27:bd:e7:6d:23:2a:d4:6d:b8:63:00:
80:09:9d:37:62:ca:c6:9a:c5:9a:cb:28:2e:3d:25:
e6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DB:D4:60:80:7F:2B:1F:66:A9:E1:CD:AE:D0:46:5A:9B:F0:BB:62
X509v3 Authority Key Identifier:
keyid:2F:1E:25:39:77:BF:58:3E:0E:42:0E:C9:77:A8:EC:F4:ED:15:4D:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lx4lOXe_WD4OQg7Jd6js9O0VTb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/sdvUYIB_Kx9mqeHNrtBGWpvwu2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/Lx4lOXe_WD4OQg7Jd6js9O0VTb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.100.0/24
IPv6:
2a0b:f4c0::/32
Signature Algorithm: sha256WithRSAEncryption
06:19:f1:49:77:58:4b:e3:6a:95:b5:55:88:87:3e:0e:6f:53:
a6:64:5e:82:ef:65:d3:85:aa:e8:42:8b:a2:40:2e:a0:d4:37:
7a:44:06:4e:45:4c:5d:f3:a2:62:84:30:a8:d5:74:3e:df:b4:
aa:2b:e6:c1:3d:ac:73:f2:28:d8:ae:a0:60:c5:2c:68:44:02:
b5:d2:d3:a8:d9:6b:24:4c:4a:b2:33:d8:71:45:50:2d:ec:f0:
0f:a4:79:0e:cc:95:1c:7e:ea:19:0a:fc:53:0d:0e:f5:d8:b4:
18:fa:84:79:c5:33:b2:aa:37:34:51:4d:70:8c:02:28:e6:47:
91:bd:f6:b3:ef:c2:26:3c:b0:c5:87:8d:37:92:7d:5c:6d:b3:
ef:41:ad:ce:4a:52:f6:04:05:ee:00:08:79:cb:29:ac:93:78:
48:a8:98:dd:6e:b6:00:e5:6d:1c:67:54:ad:94:b6:20:4e:44:
a6:49:bf:d1:ba:9c:69:fa:59:ca:6e:d4:9d:e8:66:b4:88:51:
ef:f6:9e:35:cb:16:93:d2:7f:03:f0:a0:1b:0b:f4:f4:9d:b2:
62:ed:65:60:33:52:0c:74:08:21:82:27:2b:65:3f:79:8f:95:
62:10:5f:72:b3:b6:e7:3b:32:74:44:de:94:33:75:ee:e9:bd:
a0:8a:c4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:56 2025 by rpki-client