Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1eabe3-8a75-4b4e-822e-59a163899616/1/ex6gppxDvGIHnT_U_ePRBLDl4rQ.roa
File: ex6gppxDvGIHnT_U_ePRBLDl4rQ.roa (raw, json)
Hash identifier: XsEHUMF+eWEtmHCReT3hbHjX1XJde0H7DfDCRevcBHA=
Subject key identifier: 7B:1E:A0:A6:9C:43:BC:62:07:9D:3F:D4:FD:E3:D1:04:B0:E5:E2:B4
Certificate issuer: /CN=a9bd0de14ea5caf42990c28f09be160c726f8648
Certificate serial: 04EC78E7
Authority key identifier: A9:BD:0D:E1:4E:A5:CA:F4:29:90:C2:8F:09:BE:16:0C:72:6F:86:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb0N4U6lyvQpkMKPCb4WDHJvhkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1eabe3-8a75-4b4e-822e-59a163899616/1/ex6gppxDvGIHnT_U_ePRBLDl4rQ.roa
Signing time: Mon 07 Feb 2022 13:21:35 +0000
ROA not before: Mon 07 Feb 2022 13:21:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14907
IP address blocks: 185.71.138.0/24 maxlen: 24
2001:67c:930::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82606311 (0x4ec78e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9bd0de14ea5caf42990c28f09be160c726f8648
Validity
Not Before: Feb 7 13:21:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b1ea0a69c43bc62079d3fd4fde3d104b0e5e2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:8d:0b:45:67:db:6b:62:e9:0d:b4:f4:b4:
0e:1e:a9:fe:c5:ca:6e:3f:48:f3:77:d5:cf:10:1c:
c3:a7:fc:e4:d7:c2:0c:21:4d:e3:6c:1c:47:f7:19:
9e:ce:53:08:4d:1c:08:5b:2f:07:82:92:8a:a0:7b:
7e:5c:87:bb:53:af:96:d6:81:4f:34:ed:da:86:54:
db:ac:4a:72:5a:a1:3a:e9:a8:c9:cb:f3:71:9a:88:
0e:cc:72:24:1f:77:e4:9e:96:85:8d:cf:8e:06:fc:
72:01:7b:6a:cc:09:fe:44:ed:09:02:c0:43:1d:fe:
39:ae:6f:a3:f7:6f:54:20:c6:98:1b:68:8d:22:4a:
21:c6:e7:35:61:43:3f:82:4f:87:66:82:e9:7a:4f:
cb:35:90:2c:67:cc:a6:0f:33:8e:37:57:10:2d:78:
1f:fb:a1:0a:32:1e:7e:b1:38:e6:9f:42:ef:d6:65:
fd:34:c7:ef:b0:9e:78:4f:6a:48:9d:df:32:14:27:
e9:2f:c3:ec:ee:08:82:d5:59:34:7b:63:de:78:4e:
7a:44:5f:59:f6:f7:2b:06:62:4e:e7:18:13:82:76:
e2:0b:20:89:a7:ef:dd:7e:ea:92:d7:d9:53:ca:1c:
41:9f:ef:6e:74:1e:f7:69:a9:c5:46:46:82:d5:7d:
f8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1E:A0:A6:9C:43:BC:62:07:9D:3F:D4:FD:E3:D1:04:B0:E5:E2:B4
X509v3 Authority Key Identifier:
keyid:A9:BD:0D:E1:4E:A5:CA:F4:29:90:C2:8F:09:BE:16:0C:72:6F:86:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb0N4U6lyvQpkMKPCb4WDHJvhkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1eabe3-8a75-4b4e-822e-59a163899616/1/ex6gppxDvGIHnT_U_ePRBLDl4rQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1eabe3-8a75-4b4e-822e-59a163899616/1/qb0N4U6lyvQpkMKPCb4WDHJvhkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.138.0/24
IPv6:
2001:67c:930::/48
Signature Algorithm: sha256WithRSAEncryption
3e:13:13:e6:27:49:ee:b5:c8:9d:41:3a:29:c8:99:bd:d4:30:
52:fd:ee:50:4b:92:cf:ed:42:57:f9:32:3c:2a:97:e6:be:99:
03:60:63:44:2a:e3:1d:84:36:c8:42:92:d6:09:e5:86:ee:37:
b4:27:db:0c:88:5e:21:4b:91:5a:46:8f:c9:af:a3:9c:c6:0f:
24:6a:e6:c1:6c:6e:b0:eb:6f:21:bc:b7:6d:cf:cf:28:33:ef:
80:c1:4f:67:f8:d1:81:d9:e9:df:97:6b:ce:04:63:92:7c:ed:
84:6c:31:9d:e3:82:ee:46:7f:db:df:aa:79:97:3b:f9:c6:f9:
b5:07:aa:90:ee:85:8a:46:b6:d2:15:b6:98:b3:37:95:2e:67:
d9:05:cb:f4:9e:b4:05:6d:9d:35:d3:f3:0c:0d:f0:11:cc:96:
21:19:ab:c3:19:e3:9c:fc:be:0b:c4:b8:e8:ad:8e:ec:13:3f:
a1:32:0d:d2:ac:fa:59:9e:11:f1:80:ed:61:07:51:c5:a7:ee:
7e:c6:1e:80:a4:81:aa:3f:62:d2:da:c8:c7:02:fb:db:aa:4a:
e1:13:3c:3b:e7:5b:7f:6c:5c:a3:2d:5a:33:25:49:df:9c:96:
c7:a2:ea:e1:3f:23:63:8e:96:45:09:11:e7:b9:6c:4d:73:1d:
b8:da:53:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:50:42 2025 by rpki-client