Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/0D0bBU7OipQHG-kBdRQA1hBsQKY.roa
File: 0D0bBU7OipQHG-kBdRQA1hBsQKY.roa (raw, json)
Hash identifier: 9i3kKE3Spr+waCOaaxPG3PkCbxSkDkU8DPqUZU+dfdc=
Subject key identifier: D0:3D:1B:05:4E:CE:8A:94:07:1B:E9:01:75:14:00:D6:10:6C:40:A6
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 0338BEDB
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/0D0bBU7OipQHG-kBdRQA1hBsQKY.roa
Signing time: Sat 01 Jan 2022 05:03:16 +0000
ROA not before: Sat 01 Jan 2022 05:03:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208764
IP address blocks: 185.244.94.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54050523 (0x338bedb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Jan 1 05:03:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d03d1b054ece8a94071be901751400d6106c40a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f4:73:94:6d:9b:c4:c1:55:70:b1:ef:55:b5:
f4:02:1a:d5:e4:1a:5a:70:13:f5:bf:82:7c:ab:63:
0d:37:31:00:15:a5:2f:db:53:90:73:da:35:0c:6f:
e1:50:1f:99:7c:39:9e:a7:4b:f3:b7:2c:52:2e:2b:
2c:06:97:bd:0e:33:48:2d:9c:2e:9e:4d:e1:92:b8:
f4:aa:18:e3:1d:ac:b7:b6:37:b0:3e:38:bc:48:7d:
9a:9d:d9:88:8e:5e:fa:38:27:b6:31:dd:c0:26:9a:
88:90:e3:d2:fe:b3:f5:87:38:ab:fd:4c:76:9f:72:
6c:bd:b6:26:97:4c:b4:9f:4c:d0:a5:16:56:73:19:
50:36:79:7b:b4:16:43:73:49:33:7f:87:9d:b6:63:
95:d5:e0:4e:5f:8a:c2:d7:b1:fb:e2:79:fc:a9:08:
ff:66:e1:96:37:15:2f:c9:46:5c:b5:66:82:a5:1c:
a2:94:5c:96:7b:33:07:a3:dd:2e:d7:64:ee:3a:21:
38:50:b9:40:07:60:89:28:0e:a9:09:eb:bc:ed:83:
79:73:ed:70:2f:c3:d8:0c:0b:27:56:50:17:25:54:
18:8f:9f:09:ba:da:8b:16:6e:ed:bb:f1:09:0e:bc:
bd:01:9f:06:5e:23:47:5a:17:ae:8c:63:be:c4:69:
5b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3D:1B:05:4E:CE:8A:94:07:1B:E9:01:75:14:00:D6:10:6C:40:A6
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/0D0bBU7OipQHG-kBdRQA1hBsQKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.94.0/23
Signature Algorithm: sha256WithRSAEncryption
60:9c:8a:7a:c2:dc:d9:34:8c:55:c3:32:94:ab:be:d6:bd:ef:
81:07:44:fe:d1:88:f0:ad:d0:67:76:f9:4a:9c:2f:fe:cb:72:
ac:95:37:32:2f:66:84:54:15:71:62:92:c2:1f:ad:c7:3e:80:
e7:ad:b8:3c:6b:38:48:03:a1:13:01:a5:af:a6:04:5c:d5:e7:
c2:57:7e:4f:a2:26:00:10:a8:31:ae:01:da:4d:62:22:7e:51:
d1:99:30:c1:7c:bc:fb:7e:12:ea:80:1a:2e:71:71:0e:91:fe:
cd:02:78:05:45:e1:02:c6:9c:57:ee:32:46:79:a5:2a:6c:91:
03:92:ae:c0:8d:da:b1:81:b4:f2:37:21:d8:0a:7f:54:a5:83:
cc:16:5e:ec:44:45:d4:39:5d:18:d9:1c:f3:27:ea:82:cb:29:
f6:25:04:8c:c4:13:71:5f:0a:99:3f:75:3f:37:44:88:b1:4c:
ba:ae:e4:42:7d:6d:b4:fe:e1:87:48:72:ff:b3:5b:45:5f:7a:
8e:d7:c9:cb:98:db:2d:92:b5:4d:34:18:c7:f3:21:ae:44:3f:
11:a5:fa:11:74:3c:eb:7f:aa:c1:ea:29:93:b9:e3:4b:e4:f2:
7e:22:2f:58:7e:16:0c:09:4c:76:a3:9f:85:bd:1d:f8:45:a8:
03:b0:8f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:01 2025 by rpki-client