Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/N1xtr4hXd4F7cusehEMQdkIihbQ.roa
File: N1xtr4hXd4F7cusehEMQdkIihbQ.roa (raw, json)
Hash identifier: vZlpu9l6yxKy5Oxz71Sf96YODaWylQw+0Iq+5YLUvwU=
Subject key identifier: 37:5C:6D:AF:88:57:77:81:7B:72:EB:1E:84:43:10:76:42:22:85:B4
Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial: 3810B625
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/N1xtr4hXd4F7cusehEMQdkIihbQ.roa
Signing time: Sat 01 Jan 2022 04:02:45 +0000
ROA not before: Sat 01 Jan 2022 04:02:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206570
IP address blocks: 185.179.200.0/23 maxlen: 24
213.179.210.0/23 maxlen: 23
2a00:1d23::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940619301 (0x3810b625)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Validity
Not Before: Jan 1 04:02:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=375c6daf885777817b72eb1e84431076422285b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fa:40:30:e0:d3:ef:e0:3d:e2:e4:0c:c5:27:
42:25:2a:f5:aa:2c:a4:2d:13:5b:76:a4:cf:a5:71:
e5:d6:8f:eb:dd:76:af:33:83:00:d7:c5:1a:74:24:
65:db:0f:ae:e3:22:8a:08:78:a8:89:c8:cd:3b:43:
db:b0:d6:79:9d:1c:f7:91:f6:9a:1c:92:2a:2f:55:
da:0d:4d:dc:6c:ea:9a:9b:c9:db:90:b3:e4:f8:13:
85:b7:ee:ca:24:cf:d2:22:a4:ee:c4:b4:70:01:a8:
04:61:37:e0:e5:2d:54:12:41:37:7a:47:86:9d:2b:
4b:91:d9:98:bc:ad:39:49:dd:aa:6b:de:3c:ed:b1:
dc:46:d6:67:10:b0:9d:63:32:38:e8:1b:02:cd:75:
e1:b3:26:6c:a7:cc:70:f9:80:8c:2d:19:7e:10:62:
ff:d9:16:6a:6d:f0:56:c2:ad:24:f0:07:8e:c9:0e:
4c:97:6e:2c:0f:d5:ed:ac:40:07:3c:c2:70:49:35:
8a:a8:5c:ce:89:be:1f:e3:96:31:44:05:98:a3:97:
e9:1c:07:5d:f2:7b:fc:d2:56:ed:b7:67:a5:17:b3:
0d:40:b1:63:34:05:84:90:ec:58:1a:04:22:e4:e1:
a5:2e:17:96:30:a9:de:fc:95:3a:b3:fd:7c:73:4c:
a5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5C:6D:AF:88:57:77:81:7B:72:EB:1E:84:43:10:76:42:22:85:B4
X509v3 Authority Key Identifier:
keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/N1xtr4hXd4F7cusehEMQdkIihbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.200.0/23
213.179.210.0/23
IPv6:
2a00:1d23::/32
Signature Algorithm: sha256WithRSAEncryption
86:1f:db:aa:62:fa:0e:43:1a:a1:42:4c:40:c9:fe:54:db:d0:
ca:4c:f3:1e:0e:64:59:94:35:81:b4:29:26:8f:c4:f6:10:fa:
6c:bf:da:93:85:17:84:b5:aa:ea:ea:4c:66:0b:05:3e:d2:f8:
3c:16:5b:ce:e4:4d:7c:20:e6:88:6a:df:11:04:14:99:53:76:
48:97:8f:67:3c:f0:96:d5:79:a5:67:38:e1:79:a5:58:d0:f5:
ef:c8:f6:5d:a8:28:39:46:8c:a5:23:8c:c8:da:be:ca:9f:1b:
e6:ce:06:92:44:11:7f:c8:e3:52:0b:de:e0:95:25:f7:56:86:
90:66:89:bc:39:a1:ab:4b:b8:09:8b:1d:f2:72:6f:1c:ce:6d:
3f:8b:00:ec:ac:1d:9c:1c:ca:fe:56:27:7a:0f:32:97:9d:f4:
f4:50:5d:fb:36:a8:e2:dd:f1:d3:7a:78:d6:f2:44:e0:b5:26:
55:ad:37:31:2a:71:c9:cc:a5:86:00:17:a9:b9:f8:d9:dd:20:
3c:fc:7a:a5:a3:7b:11:66:1a:1e:cf:c6:7e:59:1b:d8:dc:80:
c5:b9:f0:0a:f1:18:99:16:5a:b4:0b:d7:2b:f3:6d:69:f1:d0:
ae:97:37:88:16:92:45:b5:96:ba:f4:e5:67:6d:71:74:9f:95:
f6:68:97:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:39:13 2025 by rpki-client