Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f6524d-6a16-4859-9862-558252a62e3c/1/IRbtCOmCEtA1gc-0cF4pjlXgzrw.roa
File: IRbtCOmCEtA1gc-0cF4pjlXgzrw.roa (raw, json)
Hash identifier: P6dMfyIUaDMs7+rwXowgOchNID+pCUDnQRzLsLecXlk=
Subject key identifier: 21:16:ED:08:E9:82:12:D0:35:81:CF:B4:70:5E:29:8E:55:E0:CE:BC
Certificate issuer: /CN=c04c9d31a1f3592e787b3aa59698f9d4a703ae1f
Certificate serial: 018345FF121573E2D4A7AE02F8DBA0F35C72
Authority key identifier: C0:4C:9D:31:A1:F3:59:2E:78:7B:3A:A5:96:98:F9:D4:A7:03:AE:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wEydMaHzWS54ezqllpj51KcDrh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f6524d-6a16-4859-9862-558252a62e3c/1/IRbtCOmCEtA1gc-0cF4pjlXgzrw.roa
Signing time: Fri 16 Sep 2022 11:11:27 +0000
ROA not before: Fri 16 Sep 2022 11:11:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208476
IP address blocks: 185.140.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:45:ff:12:15:73:e2:d4:a7:ae:02:f8:db:a0:f3:5c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04c9d31a1f3592e787b3aa59698f9d4a703ae1f
Validity
Not Before: Sep 16 11:11:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2116ed08e98212d03581cfb4705e298e55e0cebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e8:74:39:69:1e:c1:ea:42:cb:11:27:60:cd:
f5:18:7e:3b:d3:9d:33:0e:e6:0b:13:33:26:06:83:
a5:5e:92:7f:4b:df:09:39:05:ad:e7:20:36:b7:38:
28:e3:57:9b:8d:82:d8:f5:91:cf:a6:77:d7:84:5f:
b3:62:95:80:3c:9b:c3:60:62:66:1d:1e:4f:13:06:
3c:30:5d:b3:00:61:3b:4a:73:71:d7:0f:df:20:ce:
e6:c4:13:c4:75:36:9d:e4:14:20:5a:09:d8:92:56:
ae:b5:b3:44:da:bf:58:93:74:ca:cb:87:d5:74:91:
83:32:02:26:f3:22:5e:38:4d:1c:a7:ac:78:7c:61:
ac:78:42:95:eb:97:88:bd:6e:3a:b9:fd:0e:51:a8:
8a:61:1f:7a:c5:30:39:9f:a0:14:20:53:50:de:d9:
81:54:7a:b8:ce:be:88:c5:96:34:4b:da:a9:c2:18:
31:95:13:29:70:4a:e1:1f:1f:2f:88:53:28:69:ca:
2c:ec:1e:4a:02:f3:f2:ac:14:b0:a1:26:ac:a0:9a:
23:8a:a1:64:84:02:3c:e6:cc:28:e4:2e:72:5f:b9:
6a:ec:b2:6c:4d:d9:48:e2:ee:8c:4c:5b:ec:1d:ef:
1b:40:3a:58:ae:42:61:1a:25:e6:ef:85:d4:42:84:
af:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:16:ED:08:E9:82:12:D0:35:81:CF:B4:70:5E:29:8E:55:E0:CE:BC
X509v3 Authority Key Identifier:
keyid:C0:4C:9D:31:A1:F3:59:2E:78:7B:3A:A5:96:98:F9:D4:A7:03:AE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wEydMaHzWS54ezqllpj51KcDrh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f6524d-6a16-4859-9862-558252a62e3c/1/IRbtCOmCEtA1gc-0cF4pjlXgzrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f6524d-6a16-4859-9862-558252a62e3c/1/wEydMaHzWS54ezqllpj51KcDrh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.53.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:be:20:5c:31:e6:05:17:61:48:b1:3f:81:d5:3f:55:e1:1a:
1c:ce:7b:42:f0:e6:97:1a:83:3e:6a:4f:1e:a8:06:de:cb:4e:
4f:b9:93:1c:f6:75:c7:ad:aa:48:ee:7c:44:e2:8a:d1:e6:6d:
b6:b4:c0:61:51:e8:64:0d:38:35:66:e9:c1:99:aa:fd:e9:13:
d8:40:5a:50:37:42:05:e7:22:93:c3:0c:d9:30:0a:c2:86:17:
4c:24:39:af:94:4f:ae:e0:31:0b:a7:eb:b6:cf:d7:2b:bb:eb:
4a:50:8c:de:ef:46:e7:59:cb:cf:0f:98:33:65:0f:04:f3:23:
fa:f7:03:ce:d9:08:de:7b:ad:c6:d7:af:f7:63:f0:03:b5:43:
f4:4a:59:29:da:04:3c:ed:9d:92:bc:2b:9b:ee:dc:b1:5b:83:
7b:9e:dd:35:10:33:60:f5:c8:e0:e1:49:33:5c:8b:13:ce:b7:
70:16:2e:66:74:56:bd:f8:04:a9:56:3c:3c:33:7c:37:1a:97:
a0:3c:ad:a8:97:36:9b:93:40:8c:ae:02:79:1a:63:01:19:94:
c1:c5:0d:4a:92:0a:0e:c4:a5:47:1c:56:43:d1:ee:eb:c1:7c:
3c:82:74:99:48:66:64:8b:eb:e4:10:a1:33:1e:f4:75:85:f8:
28:c6:fa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 10:01:53 2025 by rpki-client