Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/XbuRgryKUbvm8SuPJSKnc0re5sQ.roa
File: XbuRgryKUbvm8SuPJSKnc0re5sQ.roa (raw, json)
Hash identifier: 4k/RZNIwVC30wvo3WW5kzaUEJnWDuf7/ifibcc6lE+s=
Subject key identifier: 5D:BB:91:82:BC:8A:51:BB:E6:F1:2B:8F:25:22:A7:73:4A:DE:E6:C4
Certificate issuer: /CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
Certificate serial: 0F20A665
Authority key identifier: 10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/XbuRgryKUbvm8SuPJSKnc0re5sQ.roa
Signing time: Sat 01 Jan 2022 12:03:15 +0000
ROA not before: Sat 01 Jan 2022 12:03:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51055
IP address blocks: 185.194.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253797989 (0xf20a665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
Validity
Not Before: Jan 1 12:03:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5dbb9182bc8a51bbe6f12b8f2522a7734adee6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c1:03:87:56:ad:61:de:ad:ca:80:66:53:f2:
4b:c1:d4:b5:5b:2e:1b:e9:42:9b:31:51:b0:14:90:
fb:9e:9b:ce:69:36:82:dc:0a:16:da:c2:60:63:de:
14:91:71:85:db:0c:3c:7b:c4:d8:43:fb:de:e5:13:
68:ac:02:7d:1a:48:76:4d:43:85:89:c0:a3:9a:9f:
4e:70:01:e2:04:34:93:c5:fd:26:bc:f9:e7:33:32:
05:49:b0:59:f3:44:b1:6b:e4:30:f4:0b:f4:c0:b8:
7a:8e:4c:98:93:4d:83:a2:fc:78:ee:84:43:53:e2:
ec:9a:e2:48:5f:68:d7:da:2c:81:2a:4e:ed:23:7a:
5b:48:cb:0a:ed:80:46:e7:8e:72:a2:44:d1:d2:ea:
e4:00:83:5b:e2:82:ae:38:58:16:1d:04:1b:3f:6a:
0b:37:08:cc:1f:58:c5:3f:de:6e:02:67:51:10:8f:
03:2d:89:30:08:7e:7b:a6:44:bb:c2:29:67:de:fc:
14:93:7a:46:12:3f:38:d6:62:25:00:4b:d3:2a:2e:
14:1f:82:92:b1:58:52:f2:05:76:8a:dc:aa:db:be:
9e:78:bd:0b:04:18:42:75:36:1f:cc:96:a3:6e:fe:
65:3b:ce:fc:e6:89:3a:46:4d:a4:ab:79:f0:ea:7a:
8e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BB:91:82:BC:8A:51:BB:E6:F1:2B:8F:25:22:A7:73:4A:DE:E6:C4
X509v3 Authority Key Identifier:
keyid:10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/XbuRgryKUbvm8SuPJSKnc0re5sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.114.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:01:ee:4e:bc:46:a1:4a:e6:e8:33:71:af:09:48:92:58:5f:
4b:aa:45:d4:ea:bf:81:b0:66:7d:a2:9c:59:a5:e9:9b:bd:a4:
86:81:5d:87:ac:20:45:f9:e6:68:2e:c9:5b:07:39:f6:30:f2:
cb:cd:a1:6c:32:14:0a:b9:e2:6d:ff:56:f5:5e:d4:ca:e3:24:
19:8f:b0:c6:a4:7f:fc:75:8a:f7:ee:5d:dd:8f:20:62:3a:94:
ba:74:26:39:64:a6:92:c2:7a:10:48:e7:8d:6e:47:18:33:fa:
9b:01:96:6e:6f:c6:49:5f:dc:12:21:d6:94:0d:af:b0:7e:81:
cf:dc:5b:8a:f0:f6:92:93:88:ba:d1:fa:32:30:18:2c:02:a3:
a6:dc:9d:5b:fa:30:49:d0:ab:aa:4f:77:20:0c:1d:c0:da:f2:
70:fd:79:3e:c0:97:4b:da:4b:19:95:09:09:0f:ba:30:8d:c2:
aa:a3:26:57:c3:27:79:e8:f1:6b:b6:0e:e4:43:2f:a2:96:80:
0f:0b:77:02:84:e7:fd:a8:6c:e1:48:0b:d5:a5:b3:35:99:45:
fe:dd:01:10:0d:58:a2:2b:b5:d4:e6:b7:d3:df:51:a9:92:24:
e7:54:e6:9d:89:79:bf:4b:42:71:9c:8e:f8:e4:85:b7:68:b6:
36:2e:85:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:36:32 2025 by rpki-client