Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/1-5LsEZUdOL-qB4x8cirnmjS4hfo.roa
File: 1-5LsEZUdOL-qB4x8cirnmjS4hfo.roa (raw, json)
Hash identifier: r9KJIi0Q9GXWnthS74zToTJ3JDVomQik8/pBBZLbJrI=
Subject key identifier: FB:92:EC:11:95:1D:38:BF:AA:07:8C:7C:72:2A:E7:9A:34:B8:85:FA
Certificate issuer: /CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0
Certificate serial: 018CC26CFECDA135D8AA902ABAA3A94651EC
Authority key identifier: 7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/1-5LsEZUdOL-qB4x8cirnmjS4hfo.roa
Signing time: Mon 01 Jan 2024 00:29:32 +0000
ROA not before: Mon 01 Jan 2024 00:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12703
IP address blocks: 185.71.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:fe:cd:a1:35:d8:aa:90:2a:ba:a3:a9:46:51:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0
Validity
Not Before: Jan 1 00:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb92ec11951d38bfaa078c7c722ae79a34b885fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:73:53:63:3b:ac:76:77:17:89:1c:0b:c1:0a:
d3:06:7e:d6:59:c4:1f:8d:b9:b6:cd:5d:bf:99:7d:
91:1c:ee:9f:a2:85:11:36:bf:ac:7a:5e:8b:d9:6b:
5b:42:39:af:80:81:66:3c:15:6e:a3:b8:ba:39:7f:
ed:9a:85:50:bf:96:4d:c6:73:47:fc:b8:5e:bd:7b:
68:c9:d7:42:ab:fa:39:e5:01:09:63:24:f4:98:5e:
d3:c2:eb:d6:e8:38:b5:96:c7:3e:6b:88:cf:ac:ee:
fe:16:b8:9f:7c:f4:0f:d8:b9:25:c2:3a:64:d0:99:
1d:af:2b:ae:42:52:9e:90:30:f4:04:e7:11:cf:27:
e7:c5:41:9e:90:f7:53:a9:29:7c:f5:06:7f:3f:fd:
7e:7e:5b:11:19:6d:1c:56:ea:50:e0:2a:1c:a3:4a:
1d:65:cb:54:c9:f3:d3:b7:ad:5f:0e:ad:24:54:47:
10:dc:a0:f7:65:c9:77:73:55:0a:a5:64:3a:fe:5e:
f6:4e:8a:de:31:4a:48:5c:b7:6e:5e:e1:1f:65:ac:
f3:75:5b:72:10:ea:da:be:6b:1f:b0:6d:be:29:40:
63:fe:e5:5a:4e:d1:07:09:97:12:a9:88:48:db:50:
eb:f0:b9:61:b2:99:7b:10:3e:37:61:a1:a9:d8:61:
0c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:92:EC:11:95:1D:38:BF:AA:07:8C:7C:72:2A:E7:9A:34:B8:85:FA
X509v3 Authority Key Identifier:
keyid:7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/1-5LsEZUdOL-qB4x8cirnmjS4hfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.184.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:9d:73:93:4a:11:30:78:07:c1:14:09:43:45:89:33:7e:0f:
93:9d:6d:64:a5:74:b4:1c:8a:a6:1b:b3:d4:9b:81:53:50:74:
ae:31:8e:11:77:ad:5a:f8:df:bf:25:17:00:b5:65:fd:db:3b:
21:22:a5:57:42:3c:1a:93:13:e0:50:b8:41:ce:ec:12:16:da:
01:af:04:6f:15:6b:29:31:29:d2:77:87:be:a8:e5:bb:18:37:
4c:c4:fb:79:ea:1a:cf:78:f3:81:35:3a:f7:c8:73:fe:d0:7b:
12:2c:0e:68:d0:f9:07:34:46:9f:cc:e8:fc:39:a0:c3:4d:5a:
ca:64:2e:67:1b:6e:6d:c2:26:92:ed:5f:46:1c:e0:99:3e:68:
9b:4f:c2:39:51:0c:97:71:dd:f0:c2:37:93:36:a0:fc:16:7e:
b8:c8:05:3f:48:eb:34:c3:98:00:1d:24:1e:97:ec:df:1d:80:
94:c5:ce:1a:e8:d7:50:48:13:9f:97:1c:6c:5b:ff:26:1a:56:
15:15:43:cf:03:34:2d:63:6c:0a:df:4d:47:51:a0:f0:a1:66:
e5:7e:c2:38:48:9f:e8:20:f0:56:a6:e2:0a:aa:16:ab:3d:90:
f5:49:98:ea:01:75:a6:d4:af:58:14:02:b8:5c:c2:f4:aa:69:
95:00:01:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:09:57 2025 by rpki-client