Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/528cca-e59c-49dd-b27d-6dcb6af4243b/1/0f-GMoR8p1bOQ5vDSbdbzxFkBZw.roa
File: 0f-GMoR8p1bOQ5vDSbdbzxFkBZw.roa (raw, json)
Hash identifier: 7nGnnBd9iiAmL5l+PmXtmKJxFc59hI/ggFCPmviFKq4=
Subject key identifier: D1:FF:86:32:84:7C:A7:56:CE:43:9B:C3:49:B7:5B:CF:11:64:05:9C
Certificate issuer: /CN=ee22a1fd36458fe2c4c0ad21fc43f0336d356235
Certificate serial: 01D26F94
Authority key identifier: EE:22:A1:FD:36:45:8F:E2:C4:C0:AD:21:FC:43:F0:33:6D:35:62:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iKh_TZFj-LEwK0h_EPwM201YjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/528cca-e59c-49dd-b27d-6dcb6af4243b/1/0f-GMoR8p1bOQ5vDSbdbzxFkBZw.roa
Signing time: Sat 01 Jan 2022 01:57:36 +0000
ROA not before: Sat 01 Jan 2022 01:57:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207099
IP address blocks: 185.196.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30568340 (0x1d26f94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee22a1fd36458fe2c4c0ad21fc43f0336d356235
Validity
Not Before: Jan 1 01:57:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1ff8632847ca756ce439bc349b75bcf1164059c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:b8:e7:85:7d:ca:74:91:51:e2:a7:54:ca:
b4:16:56:93:cb:39:a2:10:9a:a9:a3:87:f8:22:63:
86:14:7b:51:a4:05:02:50:e7:d9:90:0b:4b:53:b6:
8e:52:cd:67:f7:a3:a8:77:4a:41:cb:95:ab:98:af:
5f:42:e7:96:79:91:82:f2:3f:0a:e1:ee:00:11:29:
ca:df:d2:b0:f9:aa:9e:68:d5:6a:b9:1f:23:25:ee:
56:6d:2a:b5:b9:ad:8f:36:fc:0e:ff:ef:12:54:3b:
54:6f:1b:9a:80:05:16:cc:98:f4:74:03:41:00:04:
dd:2d:35:77:6f:7c:50:0a:f5:98:e0:46:f0:a3:92:
a3:b5:3e:77:c0:97:50:d7:65:ad:b4:57:84:01:1b:
9e:40:de:e6:62:e8:48:76:3e:6f:9f:df:78:17:cd:
08:bf:7c:5b:14:f9:fa:48:98:8d:29:67:fe:ef:36:
e0:7a:ea:86:78:14:09:86:4a:14:8d:ba:05:27:8c:
eb:96:1f:e7:7f:6e:6b:a8:55:28:bc:27:04:cb:61:
33:6b:e6:76:73:5e:ba:e2:6a:4c:a2:bc:99:d1:4b:
d7:0b:16:f3:8a:a7:2c:d4:00:9a:81:90:2f:43:da:
c3:56:4b:9f:97:0c:b2:a6:8e:b1:7e:39:34:f2:b4:
c2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FF:86:32:84:7C:A7:56:CE:43:9B:C3:49:B7:5B:CF:11:64:05:9C
X509v3 Authority Key Identifier:
keyid:EE:22:A1:FD:36:45:8F:E2:C4:C0:AD:21:FC:43:F0:33:6D:35:62:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iKh_TZFj-LEwK0h_EPwM201YjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/528cca-e59c-49dd-b27d-6dcb6af4243b/1/0f-GMoR8p1bOQ5vDSbdbzxFkBZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/528cca-e59c-49dd-b27d-6dcb6af4243b/1/7iKh_TZFj-LEwK0h_EPwM201YjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.64.0/22
Signature Algorithm: sha256WithRSAEncryption
41:9a:ac:d0:d1:71:0e:29:dd:3f:0a:64:bc:9f:d1:09:a3:bb:
43:fb:c0:ab:b8:b8:c2:5b:b4:be:ff:36:56:3d:47:b9:13:df:
f7:ee:4b:7b:f3:b7:39:7d:a2:ab:60:fe:21:62:5f:51:39:3a:
b1:e4:c0:4f:99:b4:d5:3a:51:8c:3b:85:e7:6f:7b:35:4e:40:
ed:ad:43:18:59:63:f9:dc:2e:a6:b6:a8:43:e8:30:cc:93:9c:
ad:31:05:f1:33:f7:c8:80:12:e8:69:fc:d5:06:fc:20:c0:8e:
1d:91:9b:48:7d:d6:9c:3f:a2:aa:e1:f6:5c:00:18:4c:09:fb:
62:76:75:fb:95:c7:e2:28:f4:3b:9e:09:bb:36:04:f0:54:70:
6a:cf:3c:87:9d:c7:5d:12:77:be:46:73:1e:10:99:54:b8:57:
ba:8c:65:02:a2:51:26:ff:39:12:4f:69:58:12:ad:bd:3e:a5:
53:0f:d4:ea:c0:20:dd:29:12:2a:3d:d3:10:70:79:92:ea:aa:
38:94:b0:91:d4:70:29:bf:39:e0:7e:21:68:c9:c7:cb:90:a2:
00:2f:8d:97:fd:91:16:13:0a:d6:49:c5:eb:35:c8:11:f9:66:
0f:f0:e1:34:d0:29:f0:8d:de:63:53:df:55:c3:aa:13:7c:ee:
ca:20:e9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:16:02 2025 by rpki-client