Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6b0707-1584-41db-899b-3abed42221f6/1/wGfbxVvzYf8zK0y43XjI7kQp5IA.roa
File: wGfbxVvzYf8zK0y43XjI7kQp5IA.roa (raw, json)
Hash identifier: 8ckOMTY7Fz2EXvc0bMNioReMCEaZpMteZnLWbUU0LLc=
Subject key identifier: C0:67:DB:C5:5B:F3:61:FF:33:2B:4C:B8:DD:78:C8:EE:44:29:E4:80
Certificate issuer: /CN=376688c837023671bc5e87d83ffa1783b7ceab4e
Certificate serial: 02D78D1B
Authority key identifier: 37:66:88:C8:37:02:36:71:BC:5E:87:D8:3F:FA:17:83:B7:CE:AB:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2aIyDcCNnG8XofYP_oXg7fOq04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6b0707-1584-41db-899b-3abed42221f6/1/wGfbxVvzYf8zK0y43XjI7kQp5IA.roa
Signing time: Fri 10 Jun 2022 13:08:02 +0000
ROA not before: Fri 10 Jun 2022 13:08:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207456
IP address blocks: 185.196.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47680795 (0x2d78d1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376688c837023671bc5e87d83ffa1783b7ceab4e
Validity
Not Before: Jun 10 13:08:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c067dbc55bf361ff332b4cb8dd78c8ee4429e480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:66:6c:78:f0:a8:ec:26:2a:09:e8:78:7e:eb:
7e:07:03:a6:d9:1a:0a:22:86:32:f0:4d:e1:ce:c7:
da:4c:49:e0:79:87:92:4a:e9:95:94:9b:c6:33:98:
d5:06:9d:3d:b7:d6:76:38:53:ca:42:b9:ca:e5:2c:
0e:cd:2f:47:a3:c1:9f:9a:04:75:56:43:03:c7:7e:
d6:04:65:4f:04:20:fa:e1:ec:76:fb:a9:98:b4:62:
64:a3:65:3b:82:76:a5:68:49:ee:29:a6:9d:3c:39:
a0:23:58:23:d0:84:9e:b6:45:c3:9a:df:ac:63:5b:
a3:cc:cb:24:79:21:bb:88:05:6f:66:f3:fc:3a:31:
f0:c5:25:be:1d:b9:45:35:f1:47:85:de:fd:a0:1c:
1d:48:1a:e7:e7:a3:a1:3e:1a:89:47:87:4b:67:fa:
e6:68:c3:64:b0:07:ca:30:05:a3:e9:5b:e4:81:21:
44:76:e6:23:8c:79:e0:af:07:73:b3:21:cf:1f:55:
44:e0:2a:ba:ad:fa:ce:b3:e5:ba:af:fe:1d:bc:18:
24:51:d7:9c:5c:8f:e4:11:47:27:4a:90:11:ea:e5:
0a:f8:5a:da:ea:23:97:45:59:9e:a8:3b:c5:f5:44:
f2:27:e2:f6:0b:23:78:e0:d8:f6:ea:4a:4b:56:1e:
4c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:67:DB:C5:5B:F3:61:FF:33:2B:4C:B8:DD:78:C8:EE:44:29:E4:80
X509v3 Authority Key Identifier:
keyid:37:66:88:C8:37:02:36:71:BC:5E:87:D8:3F:FA:17:83:B7:CE:AB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2aIyDcCNnG8XofYP_oXg7fOq04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6b0707-1584-41db-899b-3abed42221f6/1/wGfbxVvzYf8zK0y43XjI7kQp5IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6b0707-1584-41db-899b-3abed42221f6/1/N2aIyDcCNnG8XofYP_oXg7fOq04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:29:48:10:2c:28:9f:4a:f9:40:f4:df:92:17:9f:cf:35:49:
b6:fd:95:5f:c6:7f:08:5f:f7:8a:33:3f:e8:8c:1e:27:4b:90:
fa:e6:d6:fc:e8:7e:1e:5b:1e:93:03:71:1d:8f:42:e2:29:1e:
eb:85:32:62:c3:d1:98:c0:b8:e6:ff:a1:e3:76:6c:01:ce:17:
85:2a:9f:c7:fb:8a:c3:dc:a2:7b:50:dd:2d:26:c3:ee:ef:da:
ca:6b:14:06:78:86:16:78:6b:3c:03:7e:01:2f:da:97:38:ed:
d1:be:c6:bb:f3:9b:c9:ae:7c:36:f4:67:5b:8f:61:38:c1:38:
48:2f:35:2e:cd:fd:6d:cd:48:d3:8d:34:8e:7a:ae:fd:56:93:
9e:ed:47:84:08:4f:bf:d1:e6:64:93:f5:42:24:d3:f1:fe:f1:
93:37:9d:ae:0a:ce:d2:90:20:91:12:01:b5:56:d2:44:23:aa:
fb:1d:fa:6c:a9:21:be:48:f5:3b:38:5a:b7:f7:9b:f8:d2:e0:
17:e3:dd:67:a7:9d:68:a4:32:be:4f:a2:61:12:e8:fa:bb:d0:
17:31:7b:d2:60:77:b5:dc:8a:38:8f:96:07:9a:28:0c:18:fc:
e1:48:4a:e4:35:a1:8a:62:32:87:86:cb:fa:9f:7c:9f:58:e5:
6e:eb:84:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:55 2025 by rpki-client