Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1eabe3-8a75-4b4e-822e-59a163899616/1/gr6QzYIhMJEZVfILMrWASZvKHdk.roa
File: gr6QzYIhMJEZVfILMrWASZvKHdk.roa (raw, json)
Hash identifier: yfbCKcw7yvUboteMhF4mY37h4KBke1P18J5Dqj+1K0o=
Subject key identifier: 82:BE:90:CD:82:21:30:91:19:55:F2:0B:32:B5:80:49:9B:CA:1D:D9
Certificate issuer: /CN=a9bd0de14ea5caf42990c28f09be160c726f8648
Certificate serial: 0499CA30
Authority key identifier: A9:BD:0D:E1:4E:A5:CA:F4:29:90:C2:8F:09:BE:16:0C:72:6F:86:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb0N4U6lyvQpkMKPCb4WDHJvhkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1eabe3-8a75-4b4e-822e-59a163899616/1/gr6QzYIhMJEZVfILMrWASZvKHdk.roa
Signing time: Sat 01 Jan 2022 14:04:56 +0000
ROA not before: Sat 01 Jan 2022 14:04:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14907
IP address blocks: 185.71.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77187632 (0x499ca30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9bd0de14ea5caf42990c28f09be160c726f8648
Validity
Not Before: Jan 1 14:04:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82be90cd822130911955f20b32b580499bca1dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:0a:6b:db:4f:58:50:23:e0:02:e5:ed:b8:5f:
70:56:f5:b8:1f:20:30:53:b9:92:31:03:82:ca:77:
1d:1e:ec:49:bb:a9:09:aa:45:bf:bc:42:32:24:cc:
41:44:70:25:ff:2e:32:59:6f:70:ab:e6:c3:59:14:
ee:42:bd:08:80:fc:2a:a9:d4:76:33:fb:5c:2a:3e:
9e:d0:19:3e:d5:96:c8:cf:d0:ac:a1:cd:0e:90:ad:
2b:df:c6:b4:79:d6:f5:11:7d:55:11:f5:82:9b:26:
ef:3c:3b:83:5b:9a:5a:59:cb:10:d4:a7:f4:87:2e:
78:89:18:fb:43:d6:a7:49:c9:79:21:73:bc:d7:36:
49:f1:98:00:a1:f9:ce:5a:90:a1:a1:81:8f:e9:69:
e5:67:61:66:72:57:90:26:a9:03:7e:ce:1c:51:83:
fb:31:6f:fd:27:b7:eb:e9:20:16:f7:ce:5b:32:0f:
56:c4:ce:55:bf:69:af:8b:de:39:be:b7:c9:c4:c7:
2d:50:6f:6c:9f:da:ac:de:b2:1c:51:c4:ba:cd:09:
7e:73:e0:f5:19:16:69:a0:da:9b:c6:fe:f3:c7:e9:
2f:3b:f5:99:e9:ae:ce:3a:53:3d:63:88:f4:2b:9b:
c1:51:60:4c:c3:56:4c:bd:63:42:5c:78:eb:de:29:
73:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BE:90:CD:82:21:30:91:19:55:F2:0B:32:B5:80:49:9B:CA:1D:D9
X509v3 Authority Key Identifier:
keyid:A9:BD:0D:E1:4E:A5:CA:F4:29:90:C2:8F:09:BE:16:0C:72:6F:86:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb0N4U6lyvQpkMKPCb4WDHJvhkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1eabe3-8a75-4b4e-822e-59a163899616/1/gr6QzYIhMJEZVfILMrWASZvKHdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1eabe3-8a75-4b4e-822e-59a163899616/1/qb0N4U6lyvQpkMKPCb4WDHJvhkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.138.0/24
Signature Algorithm: sha256WithRSAEncryption
61:32:10:ae:80:11:9d:54:e3:bc:6a:e2:64:15:14:c6:b0:1b:
cc:00:66:8e:b3:73:04:91:d0:16:35:9c:d5:5b:84:c3:53:be:
5a:8e:43:b4:6a:01:05:ec:9f:5f:a1:d9:13:20:a0:ee:f3:de:
8b:d6:c5:6c:a9:23:a1:69:f5:f4:99:a4:5b:4f:89:ad:cd:4d:
42:42:e4:5f:4f:f2:aa:40:71:4d:b4:5a:39:20:97:61:36:ee:
4c:73:4d:8e:99:a5:d5:bc:82:d7:19:03:91:cb:3e:11:82:55:
bc:e9:11:30:38:58:a2:88:a0:04:80:6e:dd:3a:64:18:0f:06:
1a:cb:8f:bf:73:b7:c7:b1:f7:a5:72:3e:5c:c6:28:5f:1d:10:
71:15:40:e2:2f:e2:c9:fd:62:3d:ba:cf:54:21:bf:81:f8:94:
8a:68:e1:da:48:cd:dc:53:8a:96:c3:5e:4a:a7:38:3f:4f:4c:
d2:87:95:b1:a3:85:2e:3c:80:83:92:ac:cc:01:2a:8f:5c:6c:
5a:62:f5:40:55:ee:f4:01:62:f0:71:a8:4f:86:20:44:0a:6f:
a9:f7:4f:ba:5c:d3:9b:91:eb:9a:bf:40:5d:c3:38:07:76:14:
f2:f3:2c:1a:79:57:cf:bd:35:d9:ea:45:67:65:63:f3:f2:1c:
56:ab:3e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:41:17 2025 by rpki-client