Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f6524d-6a16-4859-9862-558252a62e3c/1/o4EcKKxntHH3RN6BqOZgZ-4oLC4.roa
File: o4EcKKxntHH3RN6BqOZgZ-4oLC4.roa (raw, json)
Hash identifier: lNk7aNwlAOFSdqSPaoe/dmId0/l7kzCEYxsFl0xyW68=
Subject key identifier: A3:81:1C:28:AC:67:B4:71:F7:44:DE:81:A8:E6:60:67:EE:28:2C:2E
Certificate issuer: /CN=c04c9d31a1f3592e787b3aa59698f9d4a703ae1f
Certificate serial: 01833C5216B68B2C9D66C5709154DB7FDA72
Authority key identifier: C0:4C:9D:31:A1:F3:59:2E:78:7B:3A:A5:96:98:F9:D4:A7:03:AE:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wEydMaHzWS54ezqllpj51KcDrh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f6524d-6a16-4859-9862-558252a62e3c/1/o4EcKKxntHH3RN6BqOZgZ-4oLC4.roa
Signing time: Wed 14 Sep 2022 14:05:55 +0000
ROA not before: Wed 14 Sep 2022 14:05:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 185.140.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3c:52:16:b6:8b:2c:9d:66:c5:70:91:54:db:7f:da:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04c9d31a1f3592e787b3aa59698f9d4a703ae1f
Validity
Not Before: Sep 14 14:05:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3811c28ac67b471f744de81a8e66067ee282c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:55:7d:5b:39:03:0b:6a:25:1b:e2:78:6d:
de:e9:21:b7:07:c1:52:2e:c0:ec:9b:0e:ac:66:d3:
87:3d:c8:5e:3c:d5:c7:70:a7:d6:70:a0:bc:2a:4d:
45:7e:60:4d:bf:b6:1e:6b:dd:ec:45:f9:5a:69:70:
86:6b:3c:e1:18:d1:cb:a4:a3:26:d5:ed:e1:a4:0d:
ac:16:f1:2c:fb:64:df:3d:7e:88:97:b3:5b:f0:89:
94:94:e5:22:7a:de:72:da:c1:49:18:99:9c:3d:f2:
59:03:1e:dc:92:5a:0e:19:99:1f:c8:21:8a:3d:4b:
77:c7:2e:5b:7e:e2:04:f0:df:98:32:68:bb:d7:47:
fd:14:76:ce:35:4c:ba:d6:af:66:a7:0c:4d:9a:c7:
a5:05:b5:20:87:1c:79:9b:f3:96:a2:11:0e:14:43:
ff:aa:44:0b:b9:4f:54:73:ae:a0:65:dc:cc:b3:04:
e7:aa:48:17:c7:0b:dd:0d:da:6e:7c:9b:3e:6f:55:
fd:50:f7:99:45:17:c1:4f:21:d8:33:9b:fe:d4:b2:
18:8a:4c:05:16:ac:75:80:e8:0c:58:71:15:70:ec:
17:50:2b:70:26:ff:e6:45:22:f8:d6:4d:31:26:0c:
ba:de:d1:d1:fc:53:d3:f3:a6:1d:ba:2d:11:df:d3:
24:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:81:1C:28:AC:67:B4:71:F7:44:DE:81:A8:E6:60:67:EE:28:2C:2E
X509v3 Authority Key Identifier:
keyid:C0:4C:9D:31:A1:F3:59:2E:78:7B:3A:A5:96:98:F9:D4:A7:03:AE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wEydMaHzWS54ezqllpj51KcDrh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f6524d-6a16-4859-9862-558252a62e3c/1/o4EcKKxntHH3RN6BqOZgZ-4oLC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f6524d-6a16-4859-9862-558252a62e3c/1/wEydMaHzWS54ezqllpj51KcDrh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.53.0/24
Signature Algorithm: sha256WithRSAEncryption
70:38:be:a0:8d:c2:c3:74:1d:35:c2:1a:6e:6f:64:4e:42:a5:
7e:47:e7:97:a8:82:26:cb:e6:db:40:03:94:53:09:7a:6c:36:
c8:2f:fb:69:6a:c8:65:f9:be:0f:65:eb:7d:a8:fb:13:ee:44:
6a:dc:b9:fb:12:48:d3:2c:fb:55:5d:b3:ee:a0:40:0a:77:3a:
25:19:2c:1d:68:53:d3:62:54:50:45:1a:3d:e4:93:79:50:8f:
f6:ac:54:7d:e4:7a:1b:be:34:38:a2:41:a7:ff:6b:29:8d:fc:
81:0a:ee:bc:ba:5c:ec:17:35:94:96:09:03:38:af:82:90:6d:
0d:e4:51:b3:da:40:d9:af:21:0c:92:ca:51:08:1e:08:2e:4a:
f3:a7:a7:5f:e1:c9:04:51:b4:e3:ea:e5:9e:d1:78:60:e7:43:
c5:4f:72:d6:b5:19:dd:fb:47:49:37:7f:2a:5a:b1:94:e8:68:
3b:25:fd:63:2a:fc:97:66:47:24:ae:ac:67:e5:bc:2b:1a:a5:
d4:b5:e0:bf:51:85:eb:c5:0c:65:c1:14:f2:9a:83:66:d5:75:
a0:9b:f3:ec:f5:88:16:a3:63:bc:80:36:8c:5f:4e:7b:af:77:
4b:4e:fe:8c:12:2d:cf:ca:50:9f:0f:7f:f8:2b:56:5d:48:30:
fa:fd:2d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:35:01 2025 by rpki-client