Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/44fe80-204c-46f0-9acc-b77a4b207c06/1/5mVVbY127lWeMOfI4ZCqfxlMhdE.roa
File: 5mVVbY127lWeMOfI4ZCqfxlMhdE.roa (raw, json)
Hash identifier: fonBelhue7MgrhHybl+Oe7J7UuOJAKuKwEnE7Lkrs5k=
Subject key identifier: E6:65:55:6D:8D:76:EE:55:9E:30:E7:C8:E1:90:AA:7F:19:4C:85:D1
Certificate issuer: /CN=f77de33c1027db18d60059b6074dbe94bce4777e
Certificate serial: 08F2F19A
Authority key identifier: F7:7D:E3:3C:10:27:DB:18:D6:00:59:B6:07:4D:BE:94:BC:E4:77:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/933jPBAn2xjWAFm2B02-lLzkd34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/44fe80-204c-46f0-9acc-b77a4b207c06/1/5mVVbY127lWeMOfI4ZCqfxlMhdE.roa
Signing time: Sat 01 Jan 2022 10:58:58 +0000
ROA not before: Sat 01 Jan 2022 10:58:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204821
IP address blocks: 185.238.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150139290 (0x8f2f19a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77de33c1027db18d60059b6074dbe94bce4777e
Validity
Not Before: Jan 1 10:58:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e665556d8d76ee559e30e7c8e190aa7f194c85d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1c:00:df:cb:d8:94:fe:cb:27:8d:d3:01:6e:
dc:89:a6:f8:67:90:db:c7:31:11:28:c0:b9:a8:43:
88:b9:87:17:a1:12:14:36:97:d6:ea:2c:ae:5f:ec:
a8:7c:77:81:78:96:bd:b0:19:c3:22:0e:a9:e3:65:
25:87:d8:9e:2d:fe:60:f9:82:97:96:97:37:95:0e:
b4:db:91:48:bc:8b:5c:c0:1f:f1:0c:9d:4c:6c:66:
0f:21:7b:a1:3b:8e:78:8a:30:03:d9:df:e6:7d:0f:
aa:f8:b0:a0:64:06:3b:be:79:0d:7b:f7:55:8b:92:
a4:ea:c7:11:55:b6:91:56:a5:e6:70:b2:14:ca:b4:
f1:a9:cf:a4:d0:2f:c0:d1:28:3c:ae:63:ae:84:25:
d1:04:a1:90:e9:4e:9b:8c:76:ce:c1:c6:7c:0e:2d:
65:49:68:00:f5:32:b7:ca:d0:0a:df:91:33:2d:ed:
eb:b1:60:5c:5c:df:3a:39:da:68:9a:c4:cf:9e:74:
b5:b4:3f:89:fd:28:b5:48:83:cb:ff:ba:84:65:e0:
51:a0:9c:0f:d3:64:ef:57:8d:9f:09:36:06:64:18:
2a:a3:f4:32:56:0b:64:60:7d:91:25:5b:29:45:df:
44:5b:af:6b:a9:5e:4e:83:35:45:cf:01:b0:08:dc:
88:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:65:55:6D:8D:76:EE:55:9E:30:E7:C8:E1:90:AA:7F:19:4C:85:D1
X509v3 Authority Key Identifier:
keyid:F7:7D:E3:3C:10:27:DB:18:D6:00:59:B6:07:4D:BE:94:BC:E4:77:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/933jPBAn2xjWAFm2B02-lLzkd34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/44fe80-204c-46f0-9acc-b77a4b207c06/1/5mVVbY127lWeMOfI4ZCqfxlMhdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/44fe80-204c-46f0-9acc-b77a4b207c06/1/933jPBAn2xjWAFm2B02-lLzkd34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.232.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:50:65:20:ea:55:4d:10:68:4f:38:ce:95:0c:8a:d7:82:14:
39:e5:9b:7e:ed:5e:2f:f9:12:e7:04:0a:61:70:33:da:40:11:
d9:55:15:a5:e6:da:a8:f0:f6:3f:93:6f:0a:34:0e:d4:f3:6d:
34:6a:22:e5:e4:47:1f:eb:c0:4b:e0:b6:17:1a:2f:17:91:37:
05:6c:fc:b7:3c:f7:75:d0:32:05:24:26:13:e3:eb:a3:e1:35:
a6:a5:59:5f:16:f2:42:bd:0b:0f:27:a4:73:49:30:2a:b4:80:
4d:53:38:34:2f:d2:aa:8c:c1:12:1f:ce:82:ff:12:2b:45:b0:
7e:01:5b:84:d7:09:ec:73:c7:3e:f8:30:c9:d3:9a:5c:e0:73:
b3:36:4d:18:7b:82:11:ad:e6:f7:fc:ba:04:48:73:80:3d:62:
01:51:d4:59:a4:64:5a:9a:b0:7c:c5:63:a0:15:f5:61:9d:26:
ea:19:50:b9:7a:d3:e3:ba:aa:bf:7f:9e:cb:be:47:ed:d2:cc:
57:f2:98:92:34:6b:82:39:58:6e:4e:9a:33:dc:48:47:12:cd:
98:95:14:ea:50:0f:1d:a5:83:d7:24:af:08:41:85:cf:c0:ca:
54:95:33:b3:14:55:5e:5f:38:3a:ed:a0:50:26:8e:9a:f3:da:
f6:06:dd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:31 2025 by rpki-client