Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/04c71b-1fd1-4d50-8f16-ad236b49cd6f/1/rQJ2B9-uSBPZlU-uECGDRRw_dxE.roa
File: rQJ2B9-uSBPZlU-uECGDRRw_dxE.roa (raw, json)
Hash identifier: C6ikkXpPVtP4rfBQCMdGjFnpGxa7fA5iQdhfAMamN+8=
Subject key identifier: AD:02:76:07:DF:AE:48:13:D9:95:4F:AE:10:21:83:45:1C:3F:77:11
Certificate issuer: /CN=7151fed5b3d987a2e36acf704e62f6914129d2b4
Certificate serial: 01BB2ABC
Authority key identifier: 71:51:FE:D5:B3:D9:87:A2:E3:6A:CF:70:4E:62:F6:91:41:29:D2:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVH-1bPZh6Ljas9wTmL2kUEp0rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/04c71b-1fd1-4d50-8f16-ad236b49cd6f/1/rQJ2B9-uSBPZlU-uECGDRRw_dxE.roa
Signing time: Sat 01 Jan 2022 12:55:32 +0000
ROA not before: Sat 01 Jan 2022 12:55:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48715
IP address blocks: 185.173.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29043388 (0x1bb2abc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7151fed5b3d987a2e36acf704e62f6914129d2b4
Validity
Not Before: Jan 1 12:55:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad027607dfae4813d9954fae102183451c3f7711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:07:8b:a4:e1:37:76:ef:b4:7d:d0:e5:3a:
ee:99:86:a0:08:fa:e7:86:a2:27:a7:bd:45:0d:70:
10:88:cd:63:15:10:4c:c6:12:3d:8d:7a:5e:f3:fd:
60:c7:04:34:54:b5:b1:6d:3d:c8:f9:12:b2:11:1a:
1d:71:ad:b0:6d:62:a8:af:73:e3:58:ca:68:c3:d9:
94:69:9f:e4:07:94:e3:15:c5:13:3b:d6:ec:1d:fd:
49:eb:1c:6f:ef:b9:f4:16:5a:1d:6e:fd:e2:08:19:
2c:d4:44:7a:3c:3b:b6:63:06:e3:02:2e:ea:98:c7:
12:ad:bf:1e:5e:a6:6f:7d:1f:f9:b3:83:c8:09:82:
83:ef:b5:bb:b6:4c:79:74:f2:44:76:45:14:0f:c6:
a0:9d:c6:21:7b:d2:66:b8:17:ac:bf:cd:26:8d:54:
c4:cc:38:5d:b0:e7:48:3b:c4:6c:6e:8d:7c:48:52:
fc:01:a2:ce:3f:69:d0:c5:85:a5:6d:7e:55:4d:e5:
87:aa:26:3b:9b:39:3d:9e:34:25:35:4e:e0:37:e0:
69:9a:54:99:36:f6:1f:98:7c:38:42:ec:5b:db:c3:
a2:d6:dc:df:1c:96:e9:4b:fb:ec:3e:71:c4:38:61:
00:7e:2b:37:52:0a:a4:17:59:4e:7c:fc:d6:f0:a9:
a5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:02:76:07:DF:AE:48:13:D9:95:4F:AE:10:21:83:45:1C:3F:77:11
X509v3 Authority Key Identifier:
keyid:71:51:FE:D5:B3:D9:87:A2:E3:6A:CF:70:4E:62:F6:91:41:29:D2:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVH-1bPZh6Ljas9wTmL2kUEp0rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/04c71b-1fd1-4d50-8f16-ad236b49cd6f/1/rQJ2B9-uSBPZlU-uECGDRRw_dxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/04c71b-1fd1-4d50-8f16-ad236b49cd6f/1/cVH-1bPZh6Ljas9wTmL2kUEp0rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:c1:dc:00:1a:67:42:90:0c:51:21:78:30:21:dc:79:b9:45:
c9:f1:b4:9c:98:be:9e:d4:63:ba:41:c8:8e:e7:b9:ae:48:5a:
b2:5a:ab:31:22:cc:09:e0:9b:29:b1:2f:64:fd:e4:c3:01:a7:
89:c2:b0:7b:b5:be:c1:ee:b7:ff:c3:13:7c:b6:3d:d1:2f:91:
46:b7:f9:76:3c:9a:b7:81:0f:eb:5f:48:56:30:9a:f4:a6:4d:
b3:93:92:4f:8b:0d:ff:76:77:e4:44:d7:6f:9a:c4:3c:7b:4b:
8a:2e:f1:bc:31:19:cb:50:7f:ff:8f:8b:d4:26:84:a8:d8:0f:
cc:f6:23:44:40:cd:0b:6d:10:ca:7d:81:ff:d3:cb:62:08:da:
88:80:02:49:95:4c:b5:67:a4:78:a8:c7:7f:ce:e9:b9:dc:58:
49:4e:1f:e5:fc:51:25:cd:06:8a:31:e3:13:2c:19:3c:5e:e8:
aa:74:38:bf:79:50:2b:6b:dd:33:b0:68:fa:69:52:7d:75:6f:
84:45:ac:8a:21:6b:14:de:b2:f0:c8:37:53:20:8e:78:cf:29:
d4:a6:92:d1:ed:3a:96:b7:ea:68:46:91:18:1a:9b:c9:94:6f:
47:b3:a3:be:61:3a:a1:29:9a:2f:3d:dd:42:eb:7a:77:b6:56:
cc:ce:03:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:02:51 2025 by rpki-client