Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/pbyg6dkWzk8y85gQz4dEcMlbgrE.roa
File: pbyg6dkWzk8y85gQz4dEcMlbgrE.roa (raw, json)
Hash identifier: WxelSedqjy0KNVbUNrBb/KhiciF2tc6nF+k3Y+9GHAc=
Subject key identifier: A5:BC:A0:E9:D9:16:CE:4F:32:F3:98:10:CF:87:44:70:C9:5B:82:B1
Certificate issuer: /CN=f4ba7c145898b8ae3d2b3a1c71c50ab19a93f647
Certificate serial: 01873B15257B2F8D2ECD0EF5076642923D35
Authority key identifier: F4:BA:7C:14:58:98:B8:AE:3D:2B:3A:1C:71:C5:0A:B1:9A:93:F6:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Lp8FFiYuK49KzocccUKsZqT9kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/pbyg6dkWzk8y85gQz4dEcMlbgrE.roa
Signing time: Sat 01 Apr 2023 04:30:54 +0000
ROA not before: Sat 01 Apr 2023 04:30:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212384
IP address blocks: 185.94.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3b:15:25:7b:2f:8d:2e:cd:0e:f5:07:66:42:92:3d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ba7c145898b8ae3d2b3a1c71c50ab19a93f647
Validity
Not Before: Apr 1 04:30:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5bca0e9d916ce4f32f39810cf874470c95b82b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:84:15:bb:06:fc:37:78:21:21:e0:17:95:b5:
a6:cb:2f:80:ca:9b:34:85:d2:31:b0:be:1e:3b:33:
b4:02:72:2e:aa:9e:3d:4d:9d:0d:45:4f:28:cd:b0:
b5:db:fc:61:47:73:b3:75:06:a8:41:23:b5:4c:10:
a9:a4:fc:13:9b:ad:59:bd:e2:e8:a9:e1:74:91:f6:
a1:db:ba:9e:96:56:7e:44:f3:42:8e:d9:9f:21:5f:
b3:61:d1:de:33:7f:8e:e3:2e:9d:e5:f0:91:59:b6:
43:fc:30:61:de:47:5d:c5:81:d5:0d:47:22:3d:96:
24:5d:91:b8:78:41:bd:87:c4:56:ef:6a:49:85:55:
9b:b8:be:dc:45:e8:20:99:e7:9d:e2:0f:03:7e:00:
4c:a1:d6:b4:03:0b:fb:bf:96:1e:6c:37:8b:e0:ca:
23:94:d5:65:1c:26:e8:bd:f0:09:d5:5d:ff:a5:93:
dc:ad:99:da:24:1c:d1:ce:5a:17:4a:ec:27:bd:8a:
a6:cf:da:a3:3b:59:d5:13:01:9c:5e:5e:06:dd:e2:
20:27:8a:22:05:5e:10:d8:2b:cc:81:82:ea:4c:57:
86:8f:7e:8b:cd:87:1f:a1:a4:f2:f8:bc:9b:c3:6b:
bf:55:ac:bc:6f:83:c9:b4:ec:50:c4:db:90:4a:2e:
31:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BC:A0:E9:D9:16:CE:4F:32:F3:98:10:CF:87:44:70:C9:5B:82:B1
X509v3 Authority Key Identifier:
keyid:F4:BA:7C:14:58:98:B8:AE:3D:2B:3A:1C:71:C5:0A:B1:9A:93:F6:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Lp8FFiYuK49KzocccUKsZqT9kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/pbyg6dkWzk8y85gQz4dEcMlbgrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/9Lp8FFiYuK49KzocccUKsZqT9kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.64.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:2b:cd:e5:44:ca:db:04:08:3a:89:cd:42:3b:f9:3a:d7:0e:
d9:ea:c7:87:bf:49:ba:1f:9e:40:0d:5b:72:b5:d5:80:0f:f5:
83:e7:30:00:92:bc:8e:26:3c:d4:86:3d:73:4f:39:52:9d:29:
bd:aa:2f:a1:46:df:af:1c:24:b1:6a:a2:43:ff:9c:17:7b:b8:
d4:85:96:36:77:3b:30:bc:08:9b:18:be:58:33:a7:06:e3:16:
62:55:60:ea:f8:c1:da:8a:6c:95:91:16:8b:7b:90:8c:52:38:
5c:a8:0a:b0:9d:38:26:88:e7:fa:0b:4d:56:45:88:82:aa:1b:
08:40:2d:6f:bc:79:fc:1e:bb:a2:9f:61:f0:d3:8e:9f:e1:e0:
7c:9c:70:4a:31:fe:01:e1:97:a3:b1:5a:55:47:7a:54:f6:49:
b8:af:05:0b:20:df:f3:3d:65:32:4f:e1:61:c7:e9:17:c9:99:
0a:63:ae:cd:fe:b2:b6:f1:20:e5:90:c9:39:0d:a1:18:ec:ba:
e9:bf:ac:71:e0:2b:49:8b:85:16:a8:87:a2:a6:ea:61:5a:f9:
41:57:bb:ca:b0:5d:db:56:7e:d4:1d:17:48:e0:ac:19:9f:11:
c8:4b:77:39:f2:01:38:b9:f1:ce:46:fe:b9:d9:ab:50:d0:99:
08:57:cb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:27 2025 by rpki-client