Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/c4JIOIQNrQiM4QGjba0cBN4g66w.roa
File: c4JIOIQNrQiM4QGjba0cBN4g66w.roa (raw, json)
Hash identifier: Cl5S+/GqYldUxK7gljLN00Ta/Re5CLfiS1fqUd6xrVM=
Subject key identifier: 73:82:48:38:84:0D:AD:08:8C:E1:01:A3:6D:AD:1C:04:DE:20:EB:AC
Certificate issuer: /CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
Certificate serial: 018514E1B14B4E3D1D3177EFCBF9008BD826
Authority key identifier: 1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/c4JIOIQNrQiM4QGjba0cBN4g66w.roa
Signing time: Thu 15 Dec 2022 08:23:33 +0000
ROA not before: Thu 15 Dec 2022 08:23:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209390
IP address blocks: 185.108.64.0/22 maxlen: 22
185.108.64.0/24 maxlen: 24
185.108.65.0/24 maxlen: 24
185.108.66.0/24 maxlen: 24
2a06:6280::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:14:e1:b1:4b:4e:3d:1d:31:77:ef:cb:f9:00:8b:d8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
Validity
Not Before: Dec 15 08:23:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73824838840dad088ce101a36dad1c04de20ebac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2d:a2:ef:26:9b:fb:92:54:c7:46:55:eb:d6:
df:d1:d7:41:84:a1:6e:dc:27:74:4b:63:ff:7e:87:
6c:62:d1:b4:3e:f2:54:9d:4a:ca:62:c0:c6:51:b3:
8b:c2:86:10:ec:8c:9c:7f:0a:a8:62:25:43:b3:be:
a3:60:50:4e:4b:00:77:c1:99:7c:8a:e2:84:64:9d:
ff:2f:01:04:de:be:f1:00:51:49:b4:70:a6:fe:04:
3a:36:9f:6c:a9:2c:d7:9a:5a:0a:14:71:88:f4:00:
ac:b7:f4:84:0f:b9:7a:a2:4c:4e:0c:44:dd:59:e4:
e2:07:97:b1:10:bc:83:3c:65:f3:c0:9d:35:46:ab:
87:c3:17:a2:09:05:b4:ae:45:19:4b:4a:9c:79:88:
da:29:5d:d6:01:9d:b7:3a:ee:8e:43:24:fb:5c:cd:
32:35:4a:e4:be:2c:aa:1b:4e:19:f6:99:0e:6d:43:
c2:97:98:b3:1d:7b:0f:cd:57:5a:1a:b5:e5:7f:f3:
25:c4:83:50:63:26:0a:06:a2:be:cf:8d:61:b6:b5:
5f:51:84:b0:79:70:83:2c:95:1b:2a:95:93:51:cc:
ff:d6:97:19:63:be:35:b9:b3:8d:6f:9a:14:51:ac:
57:89:97:76:83:10:a2:d1:13:a0:1b:2c:c2:c8:d6:
ac:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:82:48:38:84:0D:AD:08:8C:E1:01:A3:6D:AD:1C:04:DE:20:EB:AC
X509v3 Authority Key Identifier:
keyid:1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/c4JIOIQNrQiM4QGjba0cBN4g66w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.64.0/22
IPv6:
2a06:6280::/29
Signature Algorithm: sha256WithRSAEncryption
26:1c:34:44:a3:61:65:4a:11:a2:e9:22:40:d6:0c:02:3d:09:
c2:27:94:8e:9a:5a:5a:88:f8:6c:72:5d:31:0b:3a:a6:16:d7:
02:48:27:e0:08:d4:57:d9:86:8f:dc:29:89:6d:3b:eb:42:0d:
08:9a:94:db:47:76:21:53:08:62:d8:e3:3e:13:2e:fc:55:b6:
be:80:9d:19:c4:5c:4a:cc:90:7a:95:7a:04:69:6f:f7:02:4e:
9a:c9:cd:33:90:43:93:29:8e:21:eb:91:68:79:02:d3:02:40:
f7:e7:47:ed:a9:c6:c3:52:d6:22:8a:5f:b1:3e:7d:fa:b9:6c:
3b:7f:bc:7e:7c:1a:89:17:6a:8b:8c:37:f1:b2:75:c0:13:9b:
41:26:fb:d2:e5:89:e9:93:dc:24:5d:d3:68:64:d3:80:a2:85:
d9:be:55:6a:7e:d9:5b:a7:b1:35:66:6f:02:6d:c7:b3:52:8b:
c9:63:ce:50:94:2b:33:ab:8f:c7:f0:a4:67:30:d0:45:99:e3:
2b:38:90:e7:12:b9:d4:f0:ad:d1:ff:8a:2f:1b:8b:8d:22:f9:
86:59:7a:99:f2:d7:2a:de:55:35:85:f3:7b:50:d9:d8:f6:02:
b8:9f:12:0c:da:11:19:02:1f:55:db:ad:f9:2b:5c:6c:16:8d:
43:e5:c5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:12:35 2025 by rpki-client