Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bcfacf-0b1f-4abd-a947-1d3887006477/1/6hpyoNA5vH-ChACKIP26g47wtl8.roa
File: 6hpyoNA5vH-ChACKIP26g47wtl8.roa (raw, json)
Hash identifier: fSZ/9KxKSzbwTCXTWiFPfsB/c0iThL5Bcnt4SnYtUXU=
Subject key identifier: EA:1A:72:A0:D0:39:BC:7F:82:84:00:8A:20:FD:BA:83:8E:F0:B6:5F
Certificate issuer: /CN=b725f575b785678774e226dc49f29ebb12696d17
Certificate serial: 0B24B940
Authority key identifier: B7:25:F5:75:B7:85:67:87:74:E2:26:DC:49:F2:9E:BB:12:69:6D:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyX1dbeFZ4d04ibcSfKeuxJpbRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bcfacf-0b1f-4abd-a947-1d3887006477/1/6hpyoNA5vH-ChACKIP26g47wtl8.roa
Signing time: Sat 01 Jan 2022 02:02:03 +0000
ROA not before: Sat 01 Jan 2022 02:02:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199786
IP address blocks: 185.50.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186956096 (0xb24b940)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b725f575b785678774e226dc49f29ebb12696d17
Validity
Not Before: Jan 1 02:02:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea1a72a0d039bc7f8284008a20fdba838ef0b65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b0:94:7a:01:7f:15:fe:bf:e1:30:86:7b:ec:
e5:1a:2d:07:ef:ee:ac:c7:17:d7:19:8e:c2:a6:f0:
9a:3a:86:1f:1d:a1:6f:72:c7:e1:1d:1f:ba:d8:b6:
15:e0:7c:6e:64:07:a1:48:c2:70:39:68:f0:f2:82:
1e:dd:aa:98:92:c8:a7:b8:de:73:24:e4:f7:25:2f:
42:2c:df:86:d1:ca:cd:bd:0f:2e:a2:68:0b:99:59:
cb:65:1d:33:27:67:91:f7:fb:78:19:e7:8c:94:5e:
4f:c5:43:6f:0e:1a:e3:f7:51:c4:e5:af:ed:fd:fc:
ec:aa:f1:79:ab:1f:c3:e2:5c:d2:80:8d:bb:3a:37:
91:85:d6:fe:c9:83:33:f4:70:24:a3:19:23:f4:66:
9d:18:c6:9c:db:5b:2c:12:0e:bc:58:f9:98:b5:c0:
af:78:b2:2d:98:2d:eb:fb:bf:d8:91:cf:0e:0d:29:
01:50:7a:7a:7d:7c:df:0f:f6:aa:c3:eb:fd:28:3d:
d3:86:61:93:23:fb:be:0b:9f:fc:6b:f9:90:f1:f5:
27:ba:d4:45:e5:43:5d:1e:e8:61:c8:fd:3c:49:2f:
04:26:9a:cd:4a:7e:89:77:06:2b:b1:00:3f:6a:ab:
95:7c:9e:15:19:07:f0:55:6b:d9:c7:f6:29:f0:49:
f9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1A:72:A0:D0:39:BC:7F:82:84:00:8A:20:FD:BA:83:8E:F0:B6:5F
X509v3 Authority Key Identifier:
keyid:B7:25:F5:75:B7:85:67:87:74:E2:26:DC:49:F2:9E:BB:12:69:6D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyX1dbeFZ4d04ibcSfKeuxJpbRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bcfacf-0b1f-4abd-a947-1d3887006477/1/6hpyoNA5vH-ChACKIP26g47wtl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bcfacf-0b1f-4abd-a947-1d3887006477/1/tyX1dbeFZ4d04ibcSfKeuxJpbRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.140.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:87:72:70:2b:2f:b2:0e:e0:b6:b6:57:de:d4:b6:fb:59:16:
3f:de:f1:20:9d:df:95:d9:63:1b:9c:9d:37:65:5c:aa:61:7c:
71:73:f9:d6:db:2c:54:75:59:93:fc:04:e7:11:73:54:47:45:
7d:40:7e:51:8d:ba:d6:00:c0:47:7c:15:b4:20:52:a7:9d:45:
61:64:bd:9b:c7:7a:53:72:90:a8:07:82:71:c9:3e:b0:52:f1:
10:8f:9b:cd:87:7b:11:aa:7c:c5:b5:0d:cb:2f:3e:9b:71:87:
05:73:18:0b:53:e2:2c:fa:ef:9a:f4:0e:fe:55:f8:9b:2e:30:
d4:6d:46:e8:67:84:7b:7d:73:67:05:2c:67:61:f7:17:da:b1:
a5:7e:cc:22:59:3a:54:87:15:c9:8b:25:af:0f:d0:57:e8:09:
5a:74:61:40:d9:9b:6c:e1:b7:b3:fd:98:25:cc:6d:ec:e7:66:
51:79:b8:0f:6f:36:7b:4f:e7:09:a2:56:cc:32:e5:d0:d8:cd:
30:13:f7:54:35:4a:cf:86:45:22:c6:79:3c:16:3b:3c:1f:83:
52:21:7a:f2:cf:b3:76:de:e3:10:5e:04:f2:25:b8:6b:72:f2:
06:9e:76:ea:b7:79:3b:e7:42:70:33:e3:8a:e1:f4:e3:2c:88:
c4:80:f6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:48 2025 by rpki-client