Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/2a9a70-808a-417c-b6da-ed6b8f76f097/1/XB7XYG3StKOIwawKcWZLYCYy-tE.roa
File: XB7XYG3StKOIwawKcWZLYCYy-tE.roa (raw, json)
Hash identifier: jmyMeV7/zgP/HkMYNsm8lNb3k97cthr7JDhEnBL7Saw=
Subject key identifier: 5C:1E:D7:60:6D:D2:B4:A3:88:C1:AC:0A:71:66:4B:60:26:32:FA:D1
Certificate issuer: /CN=57b7b462e4cef92dcbf44692ff0f851ee3e7a9d6
Certificate serial: 22D0B476
Authority key identifier: 57:B7:B4:62:E4:CE:F9:2D:CB:F4:46:92:FF:0F:85:1E:E3:E7:A9:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7e0YuTO-S3L9EaS_w-FHuPnqdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/2a9a70-808a-417c-b6da-ed6b8f76f097/1/XB7XYG3StKOIwawKcWZLYCYy-tE.roa
Signing time: Sat 01 Jan 2022 10:56:31 +0000
ROA not before: Sat 01 Jan 2022 10:56:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198949
IP address blocks: 185.5.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 584103030 (0x22d0b476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b7b462e4cef92dcbf44692ff0f851ee3e7a9d6
Validity
Not Before: Jan 1 10:56:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c1ed7606dd2b4a388c1ac0a71664b602632fad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b7:9f:47:55:ce:d3:bc:ef:32:9a:f5:cd:b1:
ea:9c:87:86:c6:6a:2f:25:dd:8c:2c:df:cb:fe:5f:
07:ac:30:dd:dc:01:f7:bf:be:67:74:95:1d:fb:32:
1e:7a:cd:48:ac:5b:b2:58:ba:02:a0:fe:2b:56:ca:
87:ba:9e:2a:19:40:d3:3d:d0:15:fa:24:86:0a:ac:
3e:6c:dc:8d:9c:1b:06:17:b8:50:6a:6a:22:55:b3:
7f:39:0f:4a:ea:5c:df:a8:53:d3:50:c6:52:cf:dc:
f3:c8:09:a4:b3:aa:12:45:0b:e4:07:b7:ee:be:20:
83:85:14:52:20:dc:e9:03:c5:c7:3b:1f:b0:60:7f:
7f:b1:02:eb:b7:f3:5a:0f:94:52:4c:b6:c1:a8:bf:
5f:28:9e:cd:30:4f:93:3a:93:43:24:c7:5e:0b:84:
79:e4:c9:91:50:ac:9a:c4:09:fe:c8:4d:a7:4a:a0:
64:63:34:c4:22:23:28:40:74:83:8b:7f:85:de:37:
f9:90:0f:d9:9c:c9:48:41:2a:e0:fb:b7:9b:db:e9:
d6:b1:b9:5c:79:c0:af:69:5a:78:d1:6d:5d:2a:68:
62:5d:30:6d:e7:69:81:33:b1:5b:69:dc:e6:61:11:
c9:9f:d4:23:6d:c7:ec:5b:35:f5:19:ee:4b:b9:5d:
22:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1E:D7:60:6D:D2:B4:A3:88:C1:AC:0A:71:66:4B:60:26:32:FA:D1
X509v3 Authority Key Identifier:
keyid:57:B7:B4:62:E4:CE:F9:2D:CB:F4:46:92:FF:0F:85:1E:E3:E7:A9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7e0YuTO-S3L9EaS_w-FHuPnqdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2a9a70-808a-417c-b6da-ed6b8f76f097/1/XB7XYG3StKOIwawKcWZLYCYy-tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2a9a70-808a-417c-b6da-ed6b8f76f097/1/V7e0YuTO-S3L9EaS_w-FHuPnqdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.240.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:df:c4:d8:35:92:f6:2e:5b:7c:75:ec:8b:e3:dc:f7:9c:26:
d7:c7:1d:81:34:0d:cf:9a:1e:79:2b:eb:12:2a:0a:29:1b:2a:
ae:46:30:2b:7e:9f:5a:26:8a:26:24:8c:17:72:9a:59:41:b2:
0c:ce:c8:89:82:19:2c:89:ec:17:45:41:fc:2c:99:9e:4c:0d:
b7:e0:fc:60:36:eb:ba:a2:09:75:b7:9d:8d:27:39:62:06:3f:
13:a1:39:eb:7e:f3:d3:4c:c7:94:67:90:7e:83:d6:7a:a2:c4:
56:5f:d3:d6:2a:96:58:90:9b:fd:25:8f:df:1b:c2:14:99:0f:
c5:1d:51:47:a9:1a:ac:73:6f:ad:22:b1:5a:a9:1c:83:0a:8b:
84:35:91:42:34:9c:fb:26:d0:47:d7:47:f5:bd:95:c1:ad:31:
b2:de:53:9e:c4:22:d0:d2:eb:6c:02:09:20:76:2c:34:82:bb:
5b:55:04:97:a1:21:44:7d:39:ec:69:5d:a3:11:19:38:31:14:
27:83:f8:61:0a:09:52:66:07:23:59:19:0a:65:17:ce:f2:4b:
e7:5d:f8:d7:69:16:a7:98:88:28:fe:f6:fc:95:06:47:27:23:
c0:cc:02:3a:b8:3f:b9:5c:6b:fe:e0:12:b2:e4:5d:b9:7f:1b:
cd:43:e1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:57 2025 by rpki-client