Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/xD5-8ohxbv3o9rYGW3e1AXrEeRY.roa
File: xD5-8ohxbv3o9rYGW3e1AXrEeRY.roa (raw, json)
Hash identifier: YtUZbEaMqVAgWtQA0SamfVg2ChPmn185W/nt+muSp2Q=
Subject key identifier: C4:3E:7E:F2:88:71:6E:FD:E8:F6:B6:06:5B:77:B5:01:7A:C4:79:16
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 0183AD76BE3FD0FF1102BC89BA11483D7CC2
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/xD5-8ohxbv3o9rYGW3e1AXrEeRY.roa
Signing time: Thu 06 Oct 2022 13:23:03 +0000
ROA not before: Thu 06 Oct 2022 13:23:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3214
IP address blocks: 36.255.94.0/23 maxlen: 23
36.255.92.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ad:76:be:3f:d0:ff:11:02:bc:89:ba:11:48:3d:7c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Oct 6 13:23:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c43e7ef288716efde8f6b6065b77b5017ac47916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f8:e7:ea:f1:51:ec:34:2a:a3:80:96:8f:ec:
c4:97:69:f2:30:f9:95:f5:eb:c1:3a:d1:ab:1c:74:
a0:ee:83:2e:e2:84:30:1b:67:cc:cf:93:fe:a0:a1:
e7:95:15:59:f2:f6:4b:f0:4c:32:c0:7a:66:b3:0f:
f8:ff:4c:31:f1:42:43:96:be:bd:e4:d0:0b:1e:90:
11:e4:ab:86:f9:62:26:b4:7c:71:58:14:4c:b9:6d:
2a:d7:e9:82:ab:88:84:67:9a:b1:09:36:13:e3:62:
80:57:ea:32:db:4e:41:27:6a:f6:1c:5d:69:0a:ff:
a0:94:83:90:63:bb:5b:10:2a:98:ff:d2:3b:d8:e5:
5f:05:7c:7c:5a:c6:ba:75:84:4f:e9:b0:e4:55:70:
99:f7:bb:34:7a:d6:05:fa:f0:9b:78:b8:f4:fd:ca:
f8:0c:2a:d4:14:19:d1:52:19:20:7a:08:77:fb:5b:
1b:0b:c5:c6:f6:ac:5f:0a:95:2c:c2:46:cf:e5:f9:
1e:24:f7:02:95:47:a1:27:de:c7:d4:bc:88:ae:6b:
56:9c:ca:81:be:13:c6:ef:22:73:73:f4:91:e3:32:
06:f2:76:98:ea:e9:89:ea:5c:9d:11:4b:15:3c:94:
69:13:65:e8:f4:26:e6:9b:e0:bc:a9:29:2c:49:7c:
18:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3E:7E:F2:88:71:6E:FD:E8:F6:B6:06:5B:77:B5:01:7A:C4:79:16
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/xD5-8ohxbv3o9rYGW3e1AXrEeRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.92.0/22
Signature Algorithm: sha256WithRSAEncryption
62:62:3b:4f:e6:38:8d:f4:7c:d3:2b:bf:62:33:ee:8c:e2:3d:
53:30:7a:14:40:86:d6:c2:a0:c4:35:2f:26:8b:ef:83:fc:67:
d1:bb:96:15:76:f0:18:cb:e2:4b:bc:4b:3e:41:ce:bb:bc:d8:
4e:28:48:0e:7f:c8:d5:75:24:95:37:ad:e3:21:4a:9b:c2:58:
3c:e8:d3:5d:cf:53:90:e4:40:ed:d5:a7:86:0b:ac:b3:3d:11:
44:cb:18:16:4b:02:f9:13:b0:f4:35:76:35:3a:07:32:c8:7a:
ac:e6:cf:c0:45:fd:ff:d7:04:57:1a:ca:90:28:ba:6e:bc:2d:
dc:5d:03:23:4d:0e:6e:11:14:05:cc:49:5f:ac:8c:f5:73:b9:
ad:de:62:f7:8b:03:3d:7f:9f:2b:a2:3d:df:a5:2d:14:4c:d2:
1f:5c:76:9b:03:11:68:95:eb:35:dc:f1:c2:2a:73:70:29:7a:
d4:d4:a4:4c:87:e9:84:d6:1f:c6:fa:a9:99:72:40:00:b8:3f:
39:3d:20:de:6f:3d:3f:b7:21:2b:22:80:e7:8d:dc:85:ef:87:
13:3b:78:f3:98:5f:fd:71:bb:97:e8:de:56:9c:0e:5d:5d:48:
15:9e:1c:b2:44:23:25:88:13:d1:63:e1:f6:6a:a3:12:0b:f7:
fc:14:a9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:58:47 2025 by rpki-client