Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/l3dzhPt3C1Ao5H8BEo5BdmEolpE.roa
File: l3dzhPt3C1Ao5H8BEo5BdmEolpE.roa (raw, json)
Hash identifier: CPTo6r5ZozBV0VSU5k7zJMmoD6sWD3oDSQ0n92958n0=
Subject key identifier: 97:77:73:84:FB:77:0B:50:28:E4:7F:01:12:8E:41:76:61:28:96:91
Certificate issuer: /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial: 01CAA869
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/l3dzhPt3C1Ao5H8BEo5BdmEolpE.roa
Signing time: Sat 01 Jan 2022 03:00:00 +0000
ROA not before: Sat 01 Jan 2022 03:00:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212376
IP address blocks: 185.212.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30058601 (0x1caa869)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
Validity
Not Before: Jan 1 03:00:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97777384fb770b5028e47f01128e417661289691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a3:84:61:4b:15:8f:d4:4e:ec:78:4b:00:4a:
44:27:8a:5e:c2:23:03:c0:59:86:14:f0:ce:94:72:
0d:48:ab:d5:f4:3c:73:6c:19:4c:62:d1:89:98:7b:
91:b2:b1:2f:5d:c4:90:46:5a:e4:38:2d:46:cb:84:
f4:f4:ab:e4:3a:75:19:31:eb:bd:16:2d:ca:86:ed:
b0:5e:15:7f:a9:34:f8:33:60:48:58:3e:ae:78:48:
67:17:f3:89:dd:c4:4c:0a:69:5a:5c:ce:6f:fd:c7:
ee:8c:b7:53:8b:b1:2d:38:6e:56:1d:0d:14:df:c2:
7c:db:49:40:65:10:03:b2:1e:68:cf:dd:7e:d1:d1:
ff:06:7d:d3:34:cf:9d:7c:14:8b:d6:ed:e0:70:40:
b8:7d:00:3d:66:bd:cc:65:f9:60:0e:87:23:2f:af:
50:3e:12:43:78:2d:d5:fe:0c:35:a9:19:38:0a:2a:
ae:c2:40:9d:d9:67:22:7c:49:21:e1:2c:0a:b9:8d:
63:6b:84:e1:51:a2:cb:bb:0f:65:b9:bc:26:7b:4a:
90:6b:58:5f:80:a7:c9:4e:4c:25:b1:37:f2:bf:97:
6b:c7:ba:0c:8c:18:66:bf:ad:c5:fd:8d:9f:3e:be:
32:b7:04:3d:af:d3:57:a7:6c:c2:9b:ab:74:2e:9e:
98:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:77:73:84:FB:77:0B:50:28:E4:7F:01:12:8E:41:76:61:28:96:91
X509v3 Authority Key Identifier:
keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/l3dzhPt3C1Ao5H8BEo5BdmEolpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.33.0/24
Signature Algorithm: sha256WithRSAEncryption
44:04:a6:13:dd:36:61:c7:8a:04:b7:bb:c1:89:ba:b7:12:5b:
92:4a:e0:dc:e0:1d:ce:07:79:bf:28:6b:73:33:d3:c3:8c:30:
00:c7:99:e6:7c:85:34:06:7f:2b:92:c1:84:12:57:a4:89:f0:
1e:98:cf:9e:0b:f7:0f:f8:d1:05:42:a0:0b:35:83:85:7a:f0:
c1:13:f2:93:fb:27:76:af:e1:4e:d6:06:bf:e5:cf:6c:84:bd:
05:12:a0:db:46:95:97:46:b1:1b:b5:26:bd:e5:af:b0:b3:b3:
b5:ec:bc:95:d3:80:a0:4b:b5:98:ec:12:45:ae:68:07:b4:f0:
f8:7a:04:ab:da:8f:f3:e3:74:03:64:77:fa:1c:19:19:7e:29:
59:a7:f0:9b:f5:d4:76:89:a9:43:72:84:67:39:4c:ab:2f:05:
42:ea:95:ec:03:66:4e:ea:70:cd:71:9f:6a:c2:a0:d2:1e:b7:
57:b6:0b:20:99:f1:01:c4:10:79:85:f8:54:f6:2d:e3:b8:05:
37:d3:7d:bf:95:d0:f1:7d:6a:fe:eb:b4:22:93:d4:51:9a:c0:
d0:80:61:1f:80:b8:af:6b:94:62:40:41:40:24:33:aa:85:4a:
b1:dc:b3:3f:2a:9f:c5:63:40:c2:35:f8:f7:e4:da:01:86:ab:
61:f8:d2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:43:00 2025 by rpki-client