Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/6bbb62-a915-41af-887f-99e65d1cca64/1/pL7o8U9M7-qMqFnjOYx25vsB76w.roa
File: pL7o8U9M7-qMqFnjOYx25vsB76w.roa (raw, json)
Hash identifier: iKBbF/d2pvXj3WuKZ+GkKO5Ur50wV2Y9S2crP87NoWM=
Subject key identifier: A4:BE:E8:F1:4F:4C:EF:EA:8C:A8:59:E3:39:8C:76:E6:FB:01:EF:AC
Certificate issuer: /CN=33c676946369f548ce6218fe473f3da4d1a5d1a8
Certificate serial: 01E07F8B
Authority key identifier: 33:C6:76:94:63:69:F5:48:CE:62:18:FE:47:3F:3D:A4:D1:A5:D1:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8Z2lGNp9UjOYhj-Rz89pNGl0ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bbb62-a915-41af-887f-99e65d1cca64/1/pL7o8U9M7-qMqFnjOYx25vsB76w.roa
Signing time: Sat 01 Jan 2022 09:55:20 +0000
ROA not before: Sat 01 Jan 2022 09:55:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211803
IP address blocks: 185.238.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31489931 (0x1e07f8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c676946369f548ce6218fe473f3da4d1a5d1a8
Validity
Not Before: Jan 1 09:55:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4bee8f14f4cefea8ca859e3398c76e6fb01efac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:30:a5:d8:e5:2f:c1:d8:d5:f5:62:6b:11:
fb:cc:59:26:4c:66:56:3f:66:db:51:41:ff:be:b8:
46:4d:aa:d6:17:2d:f6:cf:44:fe:bf:21:c6:b8:44:
c8:cb:df:ba:74:2e:7c:59:91:60:62:a0:9e:71:1e:
87:e3:47:da:c7:41:ff:43:3a:ce:21:b0:fe:90:99:
9f:93:8d:aa:22:74:54:f8:7e:0d:d0:4b:fc:e1:a4:
bd:e3:aa:ae:13:fa:e3:1a:ed:44:4c:98:b6:0a:ee:
fe:bf:1a:c1:cc:e0:98:ba:7e:d7:e1:66:9d:99:97:
d8:38:83:8a:0d:67:7f:15:2c:7e:f6:54:e8:55:34:
5c:b5:3b:12:c8:91:19:ba:fc:a0:95:d4:09:25:bb:
0f:b6:f2:fe:0a:70:a3:9a:bc:3a:cc:36:0d:1d:fa:
4b:02:ef:0f:44:e6:57:62:8e:a6:5e:04:08:66:eb:
cb:68:9e:0a:a9:0e:3b:2c:63:85:e3:ec:c1:36:ce:
29:87:c0:4f:97:5d:32:30:04:12:21:5a:ad:c1:f3:
bc:86:76:9d:f7:04:6b:d6:28:51:95:77:16:af:e5:
93:22:29:6e:06:c7:ab:21:29:68:d6:ec:69:40:35:
3f:52:24:f4:cb:ed:8b:1c:12:c5:b4:6a:15:e9:35:
7b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BE:E8:F1:4F:4C:EF:EA:8C:A8:59:E3:39:8C:76:E6:FB:01:EF:AC
X509v3 Authority Key Identifier:
keyid:33:C6:76:94:63:69:F5:48:CE:62:18:FE:47:3F:3D:A4:D1:A5:D1:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Z2lGNp9UjOYhj-Rz89pNGl0ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bbb62-a915-41af-887f-99e65d1cca64/1/pL7o8U9M7-qMqFnjOYx25vsB76w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bbb62-a915-41af-887f-99e65d1cca64/1/M8Z2lGNp9UjOYhj-Rz89pNGl0ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.112.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:61:d3:ad:70:7d:e9:6b:69:31:b0:7b:07:c7:34:38:8b:38:
f2:55:5d:e5:3e:5c:50:be:ca:72:a0:d0:c0:3c:f3:3b:8b:88:
3c:16:c6:14:98:99:b8:60:fc:31:94:20:fa:e1:f7:7e:bf:38:
e9:12:6d:6f:3a:14:bb:72:3d:fa:e2:52:8d:8c:89:9c:1d:fa:
a0:91:99:77:47:32:0c:6e:1b:45:4f:58:91:cf:a3:c8:5c:06:
be:be:17:29:c6:7e:e7:ec:c7:1a:5b:d1:95:ba:73:8d:2d:d6:
0f:95:97:d6:de:fa:ed:84:c3:68:ad:4b:65:8c:ec:90:aa:98:
56:27:9c:c0:fb:d6:bb:ab:1e:de:96:c6:cb:3c:14:e7:c7:8e:
ca:af:b1:ca:d9:73:a6:13:f0:bd:61:3e:c2:34:e0:3e:55:15:
d8:3b:3f:f2:e4:a5:1e:4b:5b:1b:02:35:93:0f:34:75:e6:1f:
5a:fb:e7:54:4d:a6:fe:94:72:ea:65:40:06:3c:20:24:86:22:
08:f5:1d:f1:01:a5:b2:b8:da:ad:71:1a:d5:fe:b6:22:42:bc:
49:46:54:ae:11:26:98:11:0a:02:35:65:0f:87:d8:c6:60:4c:
ea:66:24:15:c3:7a:00:d0:3e:48:2a:18:27:9c:2e:09:6b:55:
30:08:80:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:14:14 2025 by rpki-client