Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bb0dda-3dee-4c2c-88ae-8f709e427f9d/1/bUU3vh85GbzIy4qrDBMMqpkwxjw.roa
File: bUU3vh85GbzIy4qrDBMMqpkwxjw.roa (raw, json)
Hash identifier: eudEZ56lA1lcp4ksBYhySU8XijN4mjhX6dJlL92et/8=
Subject key identifier: 6D:45:37:BE:1F:39:19:BC:C8:CB:8A:AB:0C:13:0C:AA:99:30:C6:3C
Certificate issuer: /CN=11751d79f269bb64007764b69a9ae9c7d77ce5bc
Certificate serial: 086B24DE
Authority key identifier: 11:75:1D:79:F2:69:BB:64:00:77:64:B6:9A:9A:E9:C7:D7:7C:E5:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXUdefJpu2QAd2S2mprpx9d85bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bb0dda-3dee-4c2c-88ae-8f709e427f9d/1/bUU3vh85GbzIy4qrDBMMqpkwxjw.roa
Signing time: Sat 01 Jan 2022 14:00:00 +0000
ROA not before: Sat 01 Jan 2022 14:00:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 185.114.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141239518 (0x86b24de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11751d79f269bb64007764b69a9ae9c7d77ce5bc
Validity
Not Before: Jan 1 14:00:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d4537be1f3919bcc8cb8aab0c130caa9930c63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:84:5b:a6:92:f0:35:5f:3c:0b:4b:20:12:
5f:1d:2d:07:da:09:8e:68:95:38:d4:18:8b:d5:3f:
24:0b:ce:7b:22:21:2a:87:c6:e1:02:5d:45:fd:e5:
94:6a:bf:0b:d5:14:35:30:ae:b1:f3:91:3a:5d:fc:
e8:44:87:62:e8:62:89:82:f5:0f:ac:11:58:15:e9:
02:7f:26:1a:2c:f0:6c:bd:b3:77:5c:b4:47:93:45:
d6:eb:2f:79:2b:b1:ca:8e:f1:b5:49:26:28:09:4c:
b3:02:13:08:97:86:31:08:6e:b2:a9:79:64:8c:22:
97:d3:ab:36:0f:46:c5:f8:70:b9:1e:e7:00:89:0a:
8d:f0:ad:60:a4:13:eb:dd:42:30:37:99:4d:c4:71:
e4:9e:99:33:29:69:58:56:86:50:32:1b:3a:fd:5c:
5c:ad:9c:94:56:29:39:70:d3:fb:4f:62:b9:e0:e2:
dc:78:b5:e8:a6:e8:5c:1b:85:d2:42:7c:de:ba:56:
fc:e8:a2:7e:72:d9:ca:fa:0e:61:b0:c1:77:34:94:
40:85:14:2f:3c:1a:ab:5b:ea:e3:92:34:6a:88:a9:
13:26:44:a2:21:29:16:fa:0f:97:e7:58:76:c7:ae:
ae:d4:93:b9:7f:7b:2d:35:df:99:f5:f9:e3:bb:b2:
50:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:45:37:BE:1F:39:19:BC:C8:CB:8A:AB:0C:13:0C:AA:99:30:C6:3C
X509v3 Authority Key Identifier:
keyid:11:75:1D:79:F2:69:BB:64:00:77:64:B6:9A:9A:E9:C7:D7:7C:E5:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXUdefJpu2QAd2S2mprpx9d85bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bb0dda-3dee-4c2c-88ae-8f709e427f9d/1/bUU3vh85GbzIy4qrDBMMqpkwxjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bb0dda-3dee-4c2c-88ae-8f709e427f9d/1/EXUdefJpu2QAd2S2mprpx9d85bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.64.0/22
Signature Algorithm: sha256WithRSAEncryption
32:9f:9e:ac:69:29:8b:ca:9c:7a:94:ef:88:f4:4c:38:86:43:
52:69:d4:92:89:67:c1:1d:e9:f5:88:70:7d:2b:36:48:c9:44:
50:c9:16:8d:f9:17:d1:57:d1:cb:c5:4d:61:81:26:00:a8:8c:
c7:8c:0a:92:05:b1:d4:b8:1e:37:39:85:c0:6e:23:62:a3:e9:
d1:b8:3d:71:70:12:a2:7f:99:f0:07:2d:fb:6c:c4:cb:18:a5:
5e:17:56:c9:37:fa:a7:22:c7:f6:6c:96:15:c7:07:ec:fd:63:
d5:d6:e4:e1:94:34:3a:af:e8:5b:8c:6b:0c:c4:17:05:8a:52:
82:c4:b2:e8:8e:7d:5a:7a:b8:e3:62:7a:85:51:47:35:3b:e7:
19:27:d2:80:d0:e9:74:1c:ce:bb:42:ea:66:3c:a2:d4:91:b1:
f9:5e:0e:df:bb:4d:c6:e1:57:0e:ef:c7:f5:74:97:dc:24:57:
14:34:3e:3e:b7:bd:3d:d5:09:e7:b2:4c:d8:42:40:5d:b3:1f:
2b:14:f6:aa:a0:54:86:46:e2:76:36:3c:11:94:25:9c:b6:a9:
de:a0:79:c5:35:1b:db:be:fe:0c:8b:6b:e4:0a:9a:15:e4:36:
7e:32:86:03:3b:e7:d0:52:27:0e:29:1f:b6:8a:91:ab:66:fb:
9b:3b:ed:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:11:07 2025 by rpki-client