Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/xOUPe-nuk9yS-SJkGbwU2FDJ3rM.roa
File: xOUPe-nuk9yS-SJkGbwU2FDJ3rM.roa (raw, json)
Hash identifier: m4IwbtIpOYdK0rgWcxctW55TNaeNVf4X/lGEmlQIB3w=
Subject key identifier: C4:E5:0F:7B:E9:EE:93:DC:92:F9:22:64:19:BC:14:D8:50:C9:DE:B3
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 01856FF9459E63EDFD858F34FE245D0E8FF9
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/xOUPe-nuk9yS-SJkGbwU2FDJ3rM.roa
Signing time: Mon 02 Jan 2023 00:54:45 +0000
ROA not before: Mon 02 Jan 2023 00:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 185.229.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:45:9e:63:ed:fd:85:8f:34:fe:24:5d:0e:8f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Jan 2 00:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4e50f7be9ee93dc92f9226419bc14d850c9deb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:36:84:3c:9d:91:64:6a:bb:c4:5f:b8:88:f3:
8c:47:38:c0:34:a3:42:68:8e:77:ce:9d:f6:39:5f:
4d:da:57:1d:e5:1f:d6:2c:33:47:97:72:45:13:3a:
85:94:8b:ec:ce:75:da:aa:3d:76:da:06:38:85:b8:
8c:48:36:a4:f5:c1:ef:e6:41:04:51:a0:53:2c:b2:
fb:ae:b6:d7:31:82:9f:09:c6:b3:18:9d:f5:ae:69:
b2:53:37:aa:fa:fa:40:21:6f:f8:4a:f6:cd:9e:9a:
16:e4:ab:5d:6a:fc:c7:dd:e8:d7:94:83:79:35:36:
df:76:97:83:0e:9f:ce:50:78:7f:33:ed:ac:9b:fe:
10:46:02:a5:be:a7:fa:83:ec:66:26:34:48:d0:f7:
d8:4c:8f:46:29:47:eb:fd:b8:dc:c2:61:94:a7:2c:
9a:82:5b:72:6a:36:b7:24:76:5f:ca:52:cd:e7:19:
bf:85:e3:a9:32:fc:2f:85:2e:33:d7:c8:e1:0f:6c:
99:31:07:06:c7:03:27:a4:27:29:4f:7f:5e:8b:f1:
e0:b2:d3:79:17:2f:98:3d:a8:41:23:51:57:8f:e2:
6f:6d:86:1b:39:5a:5c:f1:c5:ff:6c:b7:e1:1e:1b:
15:51:3e:e0:c2:c0:e1:d5:b2:f6:69:8a:0e:2b:61:
c0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E5:0F:7B:E9:EE:93:DC:92:F9:22:64:19:BC:14:D8:50:C9:DE:B3
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/xOUPe-nuk9yS-SJkGbwU2FDJ3rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.203.0/24
Signature Algorithm: sha256WithRSAEncryption
26:3b:55:0f:ea:59:90:a1:cc:31:90:33:e6:36:ff:85:56:75:
71:81:12:3b:20:fd:3c:59:4e:aa:c6:40:ea:21:65:4e:f6:97:
73:3a:d6:02:74:2f:a0:47:dc:cf:12:ac:70:90:fa:89:df:df:
3a:89:13:9a:74:d9:35:91:cb:02:19:89:fc:90:ea:32:23:b2:
cc:8b:8b:0b:c6:ac:1a:47:8a:46:a4:be:ed:2e:e1:a1:64:38:
7c:e9:c1:05:80:40:4e:aa:92:1e:55:e5:39:d5:21:3c:9d:64:
25:da:02:58:0c:23:84:10:86:2d:17:16:44:1f:c4:0a:b2:87:
35:fa:8c:c7:ff:73:0c:25:b5:5f:f4:62:a2:0a:78:70:c4:3a:
07:38:57:2c:9a:3e:87:7f:a7:76:31:89:0b:85:07:ed:b2:36:
b2:54:f4:45:43:bb:b4:9b:8c:af:f7:16:ed:6a:63:ff:e8:74:
f9:0b:ce:68:11:c4:1a:f0:1f:30:fa:44:a9:c1:ce:8f:e1:30:
e0:2c:ca:7d:ea:7d:51:6d:92:79:e1:f7:4e:89:ac:05:b9:cd:
bb:ad:a8:2e:0c:83:0d:57:c6:13:f0:aa:50:a6:c3:a6:a2:df:
bf:eb:33:64:6b:05:e7:bc:7c:c3:11:49:d1:1e:fd:30:79:28:
00:c8:c8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:18:30 2025 by rpki-client