Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/41c170-eb39-4750-bed3-f9c749dd4b48/1/sGSwdkDF8KF_JkcfglmHglliOd4.roa
File: sGSwdkDF8KF_JkcfglmHglliOd4.roa (raw, json)
Hash identifier: DKEm6gItG85ISst26a4Bomklsxjpnw+2cAYznwGrMhw=
Subject key identifier: B0:64:B0:76:40:C5:F0:A1:7F:26:47:1F:82:59:87:82:59:62:39:DE
Certificate issuer: /CN=6ecf2d3d727f4affac30faa6d0572294ad42cc9b
Certificate serial: 0184A3B8AFA5D845B28953307AEA837A991C
Authority key identifier: 6E:CF:2D:3D:72:7F:4A:FF:AC:30:FA:A6:D0:57:22:94:AD:42:CC:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bs8tPXJ_Sv-sMPqm0FcilK1CzJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/41c170-eb39-4750-bed3-f9c749dd4b48/1/sGSwdkDF8KF_JkcfglmHglliOd4.roa
Signing time: Wed 23 Nov 2022 09:01:40 +0000
ROA not before: Wed 23 Nov 2022 09:01:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.209.8.0/22 maxlen: 24
194.36.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a3:b8:af:a5:d8:45:b2:89:53:30:7a:ea:83:7a:99:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ecf2d3d727f4affac30faa6d0572294ad42cc9b
Validity
Not Before: Nov 23 09:01:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b064b07640c5f0a17f26471f82598782596239de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1e:21:be:2b:6d:81:74:3a:20:3a:7c:d5:49:
a5:7b:bf:24:60:f2:8a:50:9b:0f:b9:64:f1:27:3f:
2e:1c:0f:bc:4c:1c:e1:a3:04:53:19:bd:e2:15:29:
73:5e:62:53:88:8a:0e:3a:48:ce:a1:be:15:7e:3b:
e3:6f:79:6f:6b:f0:93:ae:c4:e6:0f:f1:03:da:5c:
4d:57:76:e4:ac:59:cf:46:c7:64:f8:40:2e:18:c8:
38:b0:27:98:15:13:05:bd:ef:f2:3c:c9:63:15:89:
3f:34:8e:30:6e:54:ef:5f:83:ff:b5:fd:de:a4:fd:
37:5a:f4:6d:cf:e2:a2:a4:ca:f0:e5:37:35:42:ff:
19:85:40:37:0b:2f:cd:3b:28:ac:5b:23:91:c1:85:
67:18:17:f1:9c:6b:80:dd:39:9b:68:3d:29:cc:16:
f9:bd:64:70:fd:c3:0f:40:d6:01:ad:44:a3:ff:63:
91:a3:91:4d:4e:db:8e:eb:26:d8:ad:c7:5a:68:86:
e2:0f:b2:a7:78:19:43:3d:8f:5e:f0:41:6e:20:42:
d2:96:ff:95:e1:b8:86:56:e9:d1:0a:a8:c4:23:08:
32:8c:eb:d5:78:94:b5:75:a3:e1:65:7d:c5:f7:19:
ce:ee:67:37:af:35:64:07:9b:23:2f:b0:6f:33:db:
71:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:64:B0:76:40:C5:F0:A1:7F:26:47:1F:82:59:87:82:59:62:39:DE
X509v3 Authority Key Identifier:
keyid:6E:CF:2D:3D:72:7F:4A:FF:AC:30:FA:A6:D0:57:22:94:AD:42:CC:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bs8tPXJ_Sv-sMPqm0FcilK1CzJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/41c170-eb39-4750-bed3-f9c749dd4b48/1/sGSwdkDF8KF_JkcfglmHglliOd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/41c170-eb39-4750-bed3-f9c749dd4b48/1/bs8tPXJ_Sv-sMPqm0FcilK1CzJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.8.0/22
194.36.104.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:1f:57:2b:5a:6e:90:24:6a:3d:fe:2c:14:d8:18:9b:39:63:
d4:a1:77:c0:98:45:32:da:de:16:b2:2e:e0:92:4e:12:d6:37:
a3:4d:05:6a:8c:3d:d4:02:28:52:f4:c8:27:83:15:07:c4:93:
f9:9c:ca:12:1e:5f:1e:29:fc:4b:8a:52:6f:c0:ab:bd:b2:ab:
9a:25:7c:13:14:49:fa:55:1a:29:a8:41:32:a8:8c:62:6a:a6:
fd:bc:19:03:95:8a:c1:97:9a:ff:95:09:c6:ad:69:f8:cc:4b:
31:03:23:ad:15:5a:23:f1:32:43:3e:db:f6:1b:34:28:5a:eb:
f9:23:1c:ac:5f:90:c4:cb:a2:54:07:ae:b8:47:e8:98:45:89:
81:81:13:e9:dc:21:29:e9:0e:04:5b:0b:18:8f:d4:9d:a7:54:
b8:0a:a2:08:4e:6f:57:bf:67:20:fa:bc:60:31:7a:9e:99:4e:
df:b7:04:a0:61:31:95:91:db:2a:8f:aa:62:b9:39:ea:62:ce:
5d:a0:0c:13:f0:28:d1:59:36:2e:81:58:26:59:c3:7d:b6:0a:
82:0f:5f:b4:b1:ad:0d:04:c7:9b:88:1b:4c:19:13:58:5c:e5:
44:3e:dd:4d:bb:71:bd:99:e4:f9:98:70:d6:b9:b2:9c:df:85:
2c:9c:cb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:00 2025 by rpki-client