Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/b0e55f-4b7f-471b-b69c-7576f7d1148e/1/5FxJOtKKM7LGPrivYkVcdZMSY-w.roa
File: 5FxJOtKKM7LGPrivYkVcdZMSY-w.roa (raw, json)
Hash identifier: t3GOYYLpLksDuIkTO1mGYrC58Wa4kovYbNxrVjuBMX8=
Subject key identifier: E4:5C:49:3A:D2:8A:33:B2:C6:3E:B8:AF:62:45:5C:75:93:12:63:EC
Certificate issuer: /CN=0d3f228c8fc364d935943afae474b96ff648556a
Certificate serial: 037371A5
Authority key identifier: 0D:3F:22:8C:8F:C3:64:D9:35:94:3A:FA:E4:74:B9:6F:F6:48:55:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT8ijI_DZNk1lDr65HS5b_ZIVWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/b0e55f-4b7f-471b-b69c-7576f7d1148e/1/5FxJOtKKM7LGPrivYkVcdZMSY-w.roa
Signing time: Sat 01 Jan 2022 13:59:09 +0000
ROA not before: Sat 01 Jan 2022 13:59:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13274
IP address blocks: 185.210.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57897381 (0x37371a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3f228c8fc364d935943afae474b96ff648556a
Validity
Not Before: Jan 1 13:59:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e45c493ad28a33b2c63eb8af62455c75931263ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:90:64:9d:f5:5f:b1:fd:ae:ad:a5:f8:63:cf:
69:54:90:84:28:f1:96:80:dd:cf:a7:2d:8e:a8:22:
14:49:fd:90:ad:f6:09:7a:ed:fe:d7:78:99:e9:f3:
90:db:c6:cf:aa:33:42:cd:a4:47:46:20:fd:b4:3d:
5d:44:b2:36:cc:a6:79:4e:48:ea:90:20:5f:7f:e6:
82:60:f8:c4:1f:5d:51:98:d2:16:9d:e9:27:67:1d:
27:7a:d0:84:17:09:ce:80:60:66:36:9d:e6:3e:02:
b9:11:b2:09:2f:19:d0:f5:d0:04:45:58:ef:75:04:
90:37:81:7b:fe:66:15:35:cc:70:9b:9f:00:6f:f3:
b7:69:7d:0b:e2:6e:e2:44:51:e3:92:fc:84:a1:59:
21:dd:88:3c:e4:8a:f5:c8:46:12:fe:5f:f1:04:52:
17:49:23:15:fb:55:74:59:7a:4e:d6:8c:25:02:c4:
36:01:96:d3:b5:ee:2b:77:55:b7:f3:b4:29:0c:2a:
1f:d2:27:f7:dc:78:82:ef:9f:6f:b4:72:ac:9f:3a:
7c:8f:aa:15:47:d7:a7:43:de:65:9e:af:1e:33:2b:
21:8a:1a:f4:d8:3e:5b:4b:91:f8:14:9c:98:55:58:
ef:72:42:92:e4:d5:9e:fe:c4:62:e1:45:01:99:0c:
6a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5C:49:3A:D2:8A:33:B2:C6:3E:B8:AF:62:45:5C:75:93:12:63:EC
X509v3 Authority Key Identifier:
keyid:0D:3F:22:8C:8F:C3:64:D9:35:94:3A:FA:E4:74:B9:6F:F6:48:55:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT8ijI_DZNk1lDr65HS5b_ZIVWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/b0e55f-4b7f-471b-b69c-7576f7d1148e/1/5FxJOtKKM7LGPrivYkVcdZMSY-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/b0e55f-4b7f-471b-b69c-7576f7d1148e/1/DT8ijI_DZNk1lDr65HS5b_ZIVWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.158.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:8c:a9:fd:bf:d1:3a:a2:5f:5d:cb:e6:bb:76:24:f3:0e:09:
8b:ce:17:3f:c4:28:a3:09:d8:f3:89:92:97:fe:2e:70:ee:4b:
74:f9:d0:6a:8c:d1:93:a3:8a:d5:b3:17:45:cb:23:83:13:57:
dc:50:b6:47:04:a9:4b:ba:f3:1f:fe:4d:3f:54:44:15:bf:79:
3e:ec:2b:82:77:19:4f:0c:40:ce:2c:c3:26:00:03:05:5a:78:
e7:2e:cb:cd:64:2d:2b:a4:fa:83:bf:2b:1c:2b:d2:5b:f1:7d:
4f:c4:b5:21:34:6d:c2:1a:53:3a:64:e3:fc:2d:a4:30:4e:59:
b7:88:20:a6:5f:66:43:43:09:5d:95:40:7a:22:11:85:70:98:
6d:d6:7d:98:cf:09:de:2d:f7:08:78:db:b7:7b:87:3f:bd:a5:
28:62:97:fa:bb:6d:43:ee:54:20:08:48:a9:98:9c:48:1d:c7:
c4:14:68:12:e9:98:3d:c9:b4:3b:4f:3d:ab:af:89:98:3d:cc:
46:e6:af:5b:e2:11:30:db:69:3e:bf:79:43:f0:25:8b:05:d6:
a7:28:d2:2c:85:a6:65:a7:62:98:c4:f5:53:94:d2:de:c2:f7:
5f:90:b0:60:15:d4:19:26:f4:2f:c0:4d:b4:f3:3a:07:71:57:
84:1b:46:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:33 2025 by rpki-client