Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/_xcIQcrm4noRq8C0ZoCPTZiOCWs.roa
File: _xcIQcrm4noRq8C0ZoCPTZiOCWs.roa (raw, json)
Hash identifier: +umQkbTDLA3XudEv4u8EibqqHd0r0Zew/gszN5k+/5Y=
Subject key identifier: FF:17:08:41:CA:E6:E2:7A:11:AB:C0:B4:66:80:8F:4D:98:8E:09:6B
Certificate issuer: /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Certificate serial: 01941FFAA6023DD8831FC655A528992B216A
Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/_xcIQcrm4noRq8C0ZoCPTZiOCWs.roa
Signing time: Wed 01 Jan 2025 03:48:27 +0000
ROA not before: Wed 01 Jan 2025 03:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 185.237.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a6:02:3d:d8:83:1f:c6:55:a5:28:99:2b:21:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Validity
Not Before: Jan 1 03:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff170841cae6e27a11abc0b466808f4d988e096b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f1:ac:42:a0:f5:bf:f0:69:b2:41:c4:af:1d:
96:88:19:4b:aa:1e:86:b0:69:11:e6:fc:1f:9d:8a:
e0:90:c8:8d:61:8b:c6:e9:23:f6:38:e9:89:84:79:
c3:94:f8:fe:a6:d5:4f:63:8c:80:e9:39:4c:77:00:
f2:be:57:c0:95:15:f9:10:18:2b:05:c1:4d:c3:ec:
57:3b:2b:57:8b:d3:0a:47:d5:42:25:1f:da:8f:79:
89:73:f6:1c:da:ac:23:8e:3d:9f:fd:df:aa:aa:19:
77:a4:27:3b:8f:11:aa:58:cc:f8:50:69:e2:41:70:
c5:f6:b9:f6:87:48:8e:ee:77:f0:c2:ce:ec:1e:ea:
e3:61:07:5d:62:0d:fc:08:40:bd:7b:66:d9:73:fb:
46:23:78:9e:c1:d4:93:85:cc:79:a2:92:4b:3d:f5:
04:07:03:7d:71:c5:80:b8:7e:73:44:8d:5c:41:4d:
cc:2c:e8:22:5a:b0:18:cc:bf:af:90:b2:38:e8:a9:
c9:96:5b:ae:33:61:17:cf:56:ae:59:cf:1b:f3:45:
02:2e:52:cd:4c:ee:cb:48:2e:5b:e6:be:12:84:8c:
e6:45:3e:98:5d:e6:c3:0b:39:91:f3:3b:4e:18:47:
ec:08:ad:19:bf:a8:ba:a8:6e:d3:d4:4e:5a:3a:9f:
6f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:17:08:41:CA:E6:E2:7A:11:AB:C0:B4:66:80:8F:4D:98:8E:09:6B
X509v3 Authority Key Identifier:
keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/_xcIQcrm4noRq8C0ZoCPTZiOCWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.200.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:e5:b1:06:4f:c0:8b:16:a9:06:95:67:60:96:a4:46:88:69:
5f:43:e8:dd:14:aa:70:60:05:4b:0f:ac:b9:8f:be:53:2c:2c:
cd:b0:5d:ca:21:7a:76:69:d7:fc:86:db:bd:09:29:98:a1:9b:
08:af:e2:1d:a0:05:07:28:7d:60:40:5d:a3:fb:c4:65:ed:93:
cd:2b:c8:77:ce:83:fd:09:d1:67:76:29:3a:42:36:23:94:61:
26:f6:4a:e4:a2:c4:09:72:7e:82:2c:ca:bf:4f:49:ac:6a:7a:
d2:ff:10:38:be:b7:ab:dc:c7:a1:d2:a9:e4:0f:c0:82:19:3e:
ce:a7:1e:c6:42:d4:df:9d:b9:5d:25:61:04:16:20:bd:3f:60:
b2:12:ad:b5:4a:15:3b:85:90:50:ac:83:5c:78:fb:c5:5c:58:
b9:82:bc:b0:ed:1b:48:46:47:ca:6c:4d:98:43:fb:ea:e5:11:
a6:27:4f:a3:6d:25:b3:ce:5d:c6:ad:be:de:ef:b3:6a:f8:63:
96:08:12:ed:da:9d:f6:04:ff:fe:38:ce:fc:7d:ef:99:85:80:
6f:fc:32:49:b9:9d:4f:19:3d:b4:44:ea:83:3e:a4:13:d2:03:
a7:60:1e:40:bc:94:2c:60:7f:21:05:4b:89:5f:78:0c:e7:a8:
5d:0e:51:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:47:34 2025 by rpki-client