Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/SVy81mzqY3SfsH0yq7zn24eR-r8.roa
File: SVy81mzqY3SfsH0yq7zn24eR-r8.roa (raw, json)
Hash identifier: CKuaOs8z/XVFTY8Ns8RGiQC0sZM/JctLBcvjemwQ17I=
Subject key identifier: 49:5C:BC:D6:6C:EA:63:74:9F:B0:7D:32:AB:BC:E7:DB:87:91:FA:BF
Certificate issuer: /CN=d20542a6135524142194caa708e7db2cca6b4e63
Certificate serial: 01823410229B04A7DC35830D2A3466B96544
Authority key identifier: D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/SVy81mzqY3SfsH0yq7zn24eR-r8.roa
Signing time: Mon 25 Jul 2022 06:34:08 +0000
ROA not before: Mon 25 Jul 2022 06:34:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204565
IP address blocks: 185.242.37.0/24 maxlen: 24
185.242.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:34:10:22:9b:04:a7:dc:35:83:0d:2a:34:66:b9:65:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20542a6135524142194caa708e7db2cca6b4e63
Validity
Not Before: Jul 25 06:34:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=495cbcd66cea63749fb07d32abbce7db8791fabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8f:51:30:36:30:d3:2f:a3:dd:6a:e3:e7:91:
83:fd:94:72:49:64:1c:b8:1d:d9:42:9b:67:67:f7:
2c:00:4b:0f:c5:0f:f6:1d:1d:39:7f:c1:52:2f:36:
1f:43:09:2a:0c:5d:97:30:eb:07:2c:b5:4b:c8:a0:
bc:97:b6:fc:1e:0f:35:14:3b:09:cd:98:db:55:3d:
14:e8:ca:ea:08:5a:e9:8d:bb:7d:bd:6b:4c:4e:57:
70:ef:0b:f1:26:1f:99:8e:f0:e2:1e:73:b8:be:86:
14:53:e7:a2:20:fe:20:1e:18:03:c6:20:a9:ed:81:
8d:20:6d:04:d0:9a:e7:60:3d:4f:c1:72:61:04:8c:
2e:02:07:68:b4:50:f5:2b:00:59:0e:1d:66:8b:5e:
57:5a:92:aa:3a:04:18:b6:4c:d7:42:07:d1:b8:10:
b9:00:33:4d:25:71:f1:93:81:6c:5e:24:1a:e2:71:
63:89:05:ef:96:62:7d:96:73:c4:ba:62:7f:ae:26:
83:d7:6d:ff:f4:8e:df:ce:48:4a:e1:24:dc:32:f6:
79:2b:9f:d0:18:06:60:f1:02:02:29:fa:5e:ed:ea:
4a:80:f9:70:d4:ff:24:4b:88:3c:79:a5:06:7a:e9:
21:c9:f0:48:cb:fc:f5:5a:00:bf:b3:71:c8:f8:5d:
44:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5C:BC:D6:6C:EA:63:74:9F:B0:7D:32:AB:BC:E7:DB:87:91:FA:BF
X509v3 Authority Key Identifier:
keyid:D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/SVy81mzqY3SfsH0yq7zn24eR-r8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.36.0/23
Signature Algorithm: sha256WithRSAEncryption
24:e0:aa:c4:77:8a:c6:74:0f:63:f8:19:76:c4:5a:f3:8f:22:
1f:8b:d4:d2:29:92:dd:bd:48:2e:b4:9e:cd:fb:65:5e:b3:37:
80:25:1a:03:f3:7f:eb:e1:55:9c:8f:96:38:cf:69:3a:f1:d8:
76:07:58:fc:e5:d1:e9:47:5b:20:45:06:81:7d:67:ac:04:de:
84:db:da:fe:fa:06:a5:75:6f:ca:3b:6c:42:06:63:d9:ba:e9:
d5:a0:25:4d:4b:72:94:09:ca:18:61:86:85:1d:8d:4e:32:f5:
05:45:ee:e8:61:da:f4:a3:ef:17:d4:cf:8a:d4:03:dd:f3:6e:
fa:5d:12:32:9f:1c:5d:61:51:f5:a3:27:ff:41:44:22:d9:ce:
60:ac:b9:81:b2:39:35:3e:0a:3a:11:ce:44:22:a8:9b:39:6d:
11:9a:09:f9:b3:70:cb:f6:1a:e1:11:21:f0:5a:f4:73:fe:48:
86:5e:5a:2c:ab:50:d0:18:03:2c:7b:58:5f:f9:4c:c0:fa:68:
28:83:6c:5b:30:c0:da:d8:17:d0:7e:41:07:fa:2e:31:82:af:
b4:a6:1d:6a:25:6c:45:4a:73:a7:56:cf:c6:e3:32:24:3a:b2:
82:b9:c6:6f:71:af:7e:c5:aa:7b:d4:35:71:fe:d9:fa:c4:95:
26:34:1a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:43:55 2025 by rpki-client