Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/954876-d45c-4669-a1cd-6cbc38d4ea4c/1/Ir0xOQ2UCIB9o1a0lCD4qlSBA48.roa
File: Ir0xOQ2UCIB9o1a0lCD4qlSBA48.roa (raw, json)
Hash identifier: wB8J/N7bJHSkxEu/e6PHHzaY+XFoPdUYDuDqCaROTmM=
Subject key identifier: 22:BD:31:39:0D:94:08:80:7D:A3:56:B4:94:20:F8:AA:54:81:03:8F
Certificate issuer: /CN=82fd6ce85e919ab9bfad3f32dd9808f614009dc0
Certificate serial: 0186BB0436F806F1FA0EF6E6C7637D723CC2
Authority key identifier: 82:FD:6C:E8:5E:91:9A:B9:BF:AD:3F:32:DD:98:08:F6:14:00:9D:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gv1s6F6Rmrm_rT8y3ZgI9hQAncA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/954876-d45c-4669-a1cd-6cbc38d4ea4c/1/Ir0xOQ2UCIB9o1a0lCD4qlSBA48.roa
Signing time: Tue 07 Mar 2023 07:41:00 +0000
ROA not before: Tue 07 Mar 2023 07:41:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211270
IP address blocks: 185.84.158.128/25 maxlen: 25
185.84.158.0/24 maxlen: 24
185.84.157.0/24 maxlen: 24
185.84.156.0/22 maxlen: 22
185.84.159.0/24 maxlen: 24
185.84.156.0/24 maxlen: 24
2a12:fac0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:04:36:f8:06:f1:fa:0e:f6:e6:c7:63:7d:72:3c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fd6ce85e919ab9bfad3f32dd9808f614009dc0
Validity
Not Before: Mar 7 07:41:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22bd31390d9408807da356b49420f8aa5481038f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8f:ff:9b:d3:c7:23:b2:df:28:d5:6e:c4:6c:
aa:99:ec:48:ef:53:26:4c:4e:ca:0d:64:b1:06:6d:
a1:e2:b2:ea:37:f5:23:e2:71:f3:7c:91:3c:ba:27:
b3:af:50:a8:51:9c:40:8b:5a:39:f0:5d:74:d0:bb:
d8:5c:e8:8f:b3:82:ac:58:fe:d7:96:8b:b6:70:06:
f0:d2:59:8c:8b:a3:8b:e7:bc:47:ff:f0:70:fa:8b:
84:f1:da:76:aa:ce:6f:8d:2f:3f:6d:f3:9f:35:20:
9c:e9:5b:0d:5a:2e:68:dd:35:c2:9c:18:3d:ee:df:
f6:54:d9:d5:e5:13:b0:02:ac:8e:08:96:27:9d:1e:
9e:24:f8:ca:93:07:a6:38:f3:ad:50:4b:e6:f7:9b:
7f:b6:50:8f:a4:01:b2:fa:a3:2a:97:2a:c2:f6:d6:
68:55:3e:a3:fa:d9:24:df:fe:47:4b:ab:93:a2:84:
e6:1a:84:91:f6:b0:57:b8:ff:f6:41:1d:90:7c:74:
d5:a7:40:3c:66:de:69:55:16:09:47:c7:cc:68:c4:
70:a2:67:36:80:b4:c0:bc:74:a3:7d:20:21:57:58:
e8:47:20:9e:47:d7:e0:8d:b4:b6:b0:49:dd:15:a7:
a8:91:57:6b:06:e2:22:c8:87:dc:e8:85:e7:03:d0:
b2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BD:31:39:0D:94:08:80:7D:A3:56:B4:94:20:F8:AA:54:81:03:8F
X509v3 Authority Key Identifier:
keyid:82:FD:6C:E8:5E:91:9A:B9:BF:AD:3F:32:DD:98:08:F6:14:00:9D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv1s6F6Rmrm_rT8y3ZgI9hQAncA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/954876-d45c-4669-a1cd-6cbc38d4ea4c/1/Ir0xOQ2UCIB9o1a0lCD4qlSBA48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/954876-d45c-4669-a1cd-6cbc38d4ea4c/1/gv1s6F6Rmrm_rT8y3ZgI9hQAncA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.156.0/22
IPv6:
2a12:fac0::/32
Signature Algorithm: sha256WithRSAEncryption
67:dc:be:85:e2:40:24:a0:33:33:0d:eb:6f:22:af:30:91:9d:
94:6e:82:35:56:58:33:a5:85:e7:cf:3c:7e:90:01:39:72:be:
c1:9b:f3:54:ab:d5:56:bf:0d:c3:08:d6:06:eb:fa:7e:4b:c0:
18:8b:1b:b6:cb:7b:bb:34:2b:77:da:7b:fe:6c:ef:58:48:28:
34:eb:f4:33:b8:d3:96:79:aa:df:c3:12:5c:35:22:b7:66:77:
6e:44:c9:0a:7f:82:c9:88:ad:d0:a5:5f:ae:45:46:4f:31:61:
b3:1a:55:47:26:c8:6c:f9:8a:ff:84:9c:04:ad:a2:36:c4:d3:
11:07:5e:d0:56:4e:af:83:5b:c7:47:7c:3f:33:ab:bd:06:5d:
42:18:3e:35:04:6e:af:af:8d:b2:f9:47:ca:b6:9f:cb:44:67:
08:4a:01:7a:95:28:1e:cf:9b:03:3e:69:31:4f:62:04:d6:de:
12:56:09:d6:8c:b3:ab:bc:7e:47:3f:bf:eb:17:92:0c:a6:3b:
2f:01:ba:07:fc:78:f4:ae:25:e8:ea:ba:dc:05:70:93:a9:4d:
b2:0a:f7:18:e5:b7:e1:7b:cb:7d:c8:b9:9f:9a:19:9a:c3:90:
c3:af:ae:aa:53:6d:f4:42:bd:ed:8d:29:f3:cc:5c:67:0d:ae:
e9:ca:89:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:28 2025 by rpki-client