Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/609122-7bd3-4623-a96c-cda2a160d455/1/xAyIyrIr9nZRfQQ-0LfSkQstC0s.roa
File: xAyIyrIr9nZRfQQ-0LfSkQstC0s.roa (raw, json)
Hash identifier: AaJOocuq+616/wGDfCiGJlxW1K7kotOPq1XqN2LAu8M=
Subject key identifier: C4:0C:88:CA:B2:2B:F6:76:51:7D:04:3E:D0:B7:D2:91:0B:2D:0B:4B
Certificate issuer: /CN=a11a491d1a37062b46ee8df165e053421477d63f
Certificate serial: 0189BAC087630C1CB81A7927920F06ED8AE3
Authority key identifier: A1:1A:49:1D:1A:37:06:2B:46:EE:8D:F1:65:E0:53:42:14:77:D6:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRpJHRo3BitG7o3xZeBTQhR31j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/609122-7bd3-4623-a96c-cda2a160d455/1/xAyIyrIr9nZRfQQ-0LfSkQstC0s.roa
Signing time: Thu 03 Aug 2023 09:35:26 +0000
ROA not before: Thu 03 Aug 2023 09:35:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29396
IP address blocks: 185.184.188.0/24 maxlen: 24
185.184.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:c0:87:63:0c:1c:b8:1a:79:27:92:0f:06:ed:8a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11a491d1a37062b46ee8df165e053421477d63f
Validity
Not Before: Aug 3 09:35:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c40c88cab22bf676517d043ed0b7d2910b2d0b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:73:bd:f6:9d:75:5e:cd:48:fd:38:97:f7:2a:
2a:30:c1:6b:be:65:81:e9:df:aa:cc:fd:1a:99:27:
af:82:c8:1c:ac:b0:80:06:d1:99:81:04:77:dd:90:
fe:6f:05:be:13:02:35:f5:b0:9f:8f:25:b1:48:80:
ce:2b:5b:5a:3c:25:15:16:71:ef:b2:db:70:2d:d9:
37:b3:91:0f:3b:e4:7a:14:2a:cd:fa:4b:c6:66:e9:
ab:fd:62:b7:cf:53:c0:13:6e:21:89:5c:fe:b2:ae:
cc:6d:69:18:c3:a8:7c:43:45:e7:72:93:14:23:76:
40:fe:af:67:77:63:70:d9:f4:19:e4:c5:5c:8e:ab:
16:5c:ee:20:b6:1f:dc:55:6c:7d:fd:92:5a:e4:cf:
a3:bf:c4:dd:94:3e:f6:2d:0f:f7:3f:1a:88:35:f2:
08:70:43:74:83:fd:2b:74:4e:fc:c9:c1:12:24:40:
63:e8:1c:b2:2d:fc:78:ed:ca:7b:3f:24:b9:0a:1a:
78:9b:6f:01:5d:bd:b1:f5:28:4e:c6:90:5c:14:51:
a3:46:72:46:54:e6:fe:64:40:38:69:00:76:48:8e:
84:54:72:15:a2:61:dd:1f:e1:c5:4a:13:08:51:ad:
97:92:35:0a:56:9f:26:3f:ff:10:96:25:2b:83:84:
7c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0C:88:CA:B2:2B:F6:76:51:7D:04:3E:D0:B7:D2:91:0B:2D:0B:4B
X509v3 Authority Key Identifier:
keyid:A1:1A:49:1D:1A:37:06:2B:46:EE:8D:F1:65:E0:53:42:14:77:D6:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRpJHRo3BitG7o3xZeBTQhR31j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/609122-7bd3-4623-a96c-cda2a160d455/1/xAyIyrIr9nZRfQQ-0LfSkQstC0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/609122-7bd3-4623-a96c-cda2a160d455/1/oRpJHRo3BitG7o3xZeBTQhR31j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.188.0/22
Signature Algorithm: sha256WithRSAEncryption
05:87:b9:96:38:82:e8:59:ec:ff:1f:68:38:7f:e3:30:6a:32:
92:aa:1a:19:ee:e7:1d:12:d2:4d:cd:b0:b2:9a:a0:f2:e7:fb:
fa:81:fe:ce:08:e0:05:d7:8b:88:38:b8:2d:e6:71:4c:4d:d3:
8c:08:60:b3:ac:6a:cd:ce:6a:33:2f:c8:cf:88:e1:f6:e1:22:
cd:3b:e9:7b:ce:26:a7:63:19:f6:83:f1:ce:37:08:34:30:e6:
13:46:88:f3:19:e8:77:69:90:18:73:7c:bb:7e:c1:44:2c:b8:
4f:94:d6:4d:c9:ae:b1:d7:5e:79:e4:01:62:c9:eb:35:2c:0e:
e0:bd:3a:64:1a:51:6d:70:32:b7:db:cc:4d:47:5e:a7:9d:81:
f8:07:a6:d9:ac:de:66:b1:ce:30:73:9f:2d:18:c2:90:ab:b8:
d4:b8:e6:6c:20:a3:d9:4f:05:91:11:46:28:45:03:7f:a5:f8:
da:43:33:3b:25:c5:d3:86:ed:49:db:e1:c5:9d:54:ef:0e:c5:
e6:08:e1:e7:d2:6d:8c:ae:ee:a9:64:dd:7b:11:1f:1f:f5:19:
c3:97:7a:37:53:28:da:e1:be:0b:83:6c:9c:62:85:ab:81:d7:
8a:6b:1a:04:ac:98:42:96:16:5a:14:9d:ec:59:a9:ba:98:a8:
ec:04:ac:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:01:08 2025 by rpki-client