Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/76602c-c1ac-46a3-81bc-deeff3b2ae8a/1/lVlIW-O_gEDHM1sR_v0KV1ERyiE.roa
File: lVlIW-O_gEDHM1sR_v0KV1ERyiE.roa (raw, json)
Hash identifier: yU6PhKg0TFRyIi4Fxpx5OONiSve6PdqlBAmPxw6RRt4=
Subject key identifier: 95:59:48:5B:E3:BF:80:40:C7:33:5B:11:FE:FD:0A:57:51:11:CA:21
Certificate issuer: /CN=d860f6f2c318559e65959cd5f28d159a0842d72a
Certificate serial: 01058A76
Authority key identifier: D8:60:F6:F2:C3:18:55:9E:65:95:9C:D5:F2:8D:15:9A:08:42:D7:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GD28sMYVZ5llZzV8o0VmghC1yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/76602c-c1ac-46a3-81bc-deeff3b2ae8a/1/lVlIW-O_gEDHM1sR_v0KV1ERyiE.roa
Signing time: Sat 01 Jan 2022 00:56:47 +0000
ROA not before: Sat 01 Jan 2022 00:56:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 185.234.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17140342 (0x1058a76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d860f6f2c318559e65959cd5f28d159a0842d72a
Validity
Not Before: Jan 1 00:56:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9559485be3bf8040c7335b11fefd0a575111ca21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:26:9e:84:1f:c2:b4:38:db:d7:2f:ac:11:
ec:2b:27:7a:6d:84:c8:93:61:2e:d1:9d:d6:57:32:
ce:b5:cb:d5:5c:b0:08:5b:d2:fc:5b:c6:2d:0d:e0:
ae:fa:fc:6f:52:97:b5:35:f9:1e:50:e2:e3:e9:cd:
8d:c8:33:e9:17:4f:34:98:54:0a:44:c4:0b:f7:77:
0e:72:0d:ce:53:15:54:4e:05:17:c0:35:ee:f4:b2:
4d:f5:92:6a:53:a2:a9:a3:8f:5f:e1:d5:65:7f:40:
30:09:6d:32:e9:83:13:16:b4:d2:33:cb:13:35:0e:
ef:c7:89:86:46:c7:a4:b3:83:16:68:4c:f9:22:54:
17:86:2a:20:19:af:4c:08:dc:2f:8e:4e:44:e0:ed:
77:cf:c9:2f:c6:9d:54:2c:3b:ee:84:4a:35:61:94:
2b:96:d4:3a:14:49:a6:06:2c:1f:a2:42:05:f7:46:
bc:8f:8f:99:ba:ef:2b:07:5b:08:9b:d6:3b:b9:df:
88:ac:e3:76:a1:6a:39:29:cd:11:bf:7b:b5:f6:9b:
61:97:b7:95:5d:f6:bb:18:1f:f5:65:2b:1c:c8:f7:
a6:5a:59:ef:a5:0a:e3:c1:10:7e:84:43:80:e8:fc:
15:a8:e0:c5:b2:75:fc:a9:45:f3:0e:3e:d8:94:27:
02:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:59:48:5B:E3:BF:80:40:C7:33:5B:11:FE:FD:0A:57:51:11:CA:21
X509v3 Authority Key Identifier:
keyid:D8:60:F6:F2:C3:18:55:9E:65:95:9C:D5:F2:8D:15:9A:08:42:D7:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GD28sMYVZ5llZzV8o0VmghC1yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76602c-c1ac-46a3-81bc-deeff3b2ae8a/1/lVlIW-O_gEDHM1sR_v0KV1ERyiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76602c-c1ac-46a3-81bc-deeff3b2ae8a/1/2GD28sMYVZ5llZzV8o0VmghC1yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.12.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:3f:09:ac:3a:8f:26:66:e4:49:9c:6b:2e:4e:1e:7f:ee:2b:
d7:b4:ba:a3:f2:2c:7d:9e:40:3c:0c:65:de:81:66:ac:c6:32:
de:11:43:f1:64:4c:7a:37:39:f2:e8:7f:34:da:2e:4b:93:78:
20:00:8c:9b:8f:b9:00:49:81:d7:8d:80:6c:97:64:8e:da:ea:
20:24:a9:09:4c:58:e4:00:58:e3:d5:03:0f:0d:64:71:22:fb:
ac:4c:ac:a1:8e:e6:74:68:0c:d1:e7:2a:2a:68:49:71:34:d4:
80:17:0e:df:c5:cc:7e:0e:bd:45:0b:9f:f2:b2:c1:dc:d0:e3:
d1:7d:71:af:e8:b2:a9:a0:16:8d:6a:5d:42:ef:68:a1:7a:3c:
ac:60:af:f2:91:db:c9:22:52:41:51:fa:2a:88:e5:67:7e:42:
c2:3e:53:e1:1d:d7:7e:10:08:3e:b6:8a:17:30:0b:aa:6b:3c:
44:e3:fc:d5:f7:cc:a7:2a:9b:c2:e7:83:7e:b6:5c:5c:3b:02:
ca:2a:1a:b9:f3:07:e0:12:48:35:47:fd:35:4e:02:09:85:06:
9a:0d:a2:4d:03:9f:b1:b0:dd:c3:83:94:10:f9:c8:7c:20:c2:
1e:24:a4:08:d8:e5:de:f6:b0:b3:52:55:5e:05:2d:ea:bc:1f:
8a:64:7d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:40:41 2025 by rpki-client