Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/sxE--2M3-CEKutD7kc3XYk7SzFw.roa
File: sxE--2M3-CEKutD7kc3XYk7SzFw.roa (raw, json)
Hash identifier: B/i9pHkpIcvuAMYO5sH2j+DVrgIPQA4C6/72qRik9/Q=
Subject key identifier: B3:11:3E:FB:63:37:F8:21:0A:BA:D0:FB:91:CD:D7:62:4E:D2:CC:5C
Certificate issuer: /CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Certificate serial: 019427480D539C043ABD1A5636BA06D7DB33
Authority key identifier: 75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/sxE--2M3-CEKutD7kc3XYk7SzFw.roa
Signing time: Thu 02 Jan 2025 13:50:20 +0000
ROA not before: Thu 02 Jan 2025 13:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49223
IP address blocks: 185.43.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:0d:53:9c:04:3a:bd:1a:56:36:ba:06:d7:db:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Validity
Not Before: Jan 2 13:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3113efb6337f8210abad0fb91cdd7624ed2cc5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:a2:fe:38:9f:63:2e:5a:ad:70:51:ed:86:
fc:96:ee:af:64:b1:e6:63:5c:8c:13:e4:cc:7e:61:
0c:b3:26:2a:65:c2:eb:27:0b:14:fb:62:fb:ca:0c:
8e:fe:b9:40:4a:4f:a1:8d:3a:7d:04:d6:95:7c:32:
a3:40:93:9d:ce:5c:4d:28:a9:e4:7c:0e:62:7b:a9:
64:d3:06:0c:c8:6b:ed:23:e1:81:b3:07:02:43:bb:
ba:42:a5:3f:00:da:26:89:92:b2:c5:37:ca:24:58:
55:36:15:89:91:51:b2:1d:bf:d4:e3:06:97:95:4d:
e5:da:56:79:a9:67:84:be:dc:21:b2:a2:67:13:23:
8d:7b:c7:e9:b9:fd:f9:5e:6a:e9:38:f5:16:98:ae:
9b:f1:ac:2f:25:e6:a2:b7:95:9b:b8:ce:eb:71:e6:
80:2b:4d:4b:8a:c8:a0:6c:33:85:96:df:35:bb:0c:
b4:a3:c9:15:0c:bb:50:a8:20:2d:25:2d:c1:d6:67:
8a:48:5e:3e:0a:83:d9:c5:a0:63:ec:fd:ee:12:8c:
25:28:ee:fc:1a:68:47:c3:8e:51:6c:2a:aa:f8:a6:
77:ea:9c:d6:a9:a9:f2:49:8c:1d:22:d7:00:bd:e9:
cc:ae:e6:ec:2e:d0:17:b7:f5:12:39:30:e4:9c:8a:
af:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:11:3E:FB:63:37:F8:21:0A:BA:D0:FB:91:CD:D7:62:4E:D2:CC:5C
X509v3 Authority Key Identifier:
keyid:75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/sxE--2M3-CEKutD7kc3XYk7SzFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.236.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:24:02:fc:d4:7f:d8:b0:d8:fe:b1:b3:50:3e:bb:a4:e8:1c:
17:cb:3e:6d:78:2d:85:fc:26:af:d7:23:1b:8f:9b:c4:22:72:
25:c9:49:ed:a4:7f:a6:5b:b0:fe:e1:dd:01:8b:a3:d9:42:dd:
a3:5c:47:4f:48:f8:89:b9:77:fe:7b:65:b3:ff:46:d8:90:f9:
47:1e:cd:9a:12:ce:d0:a1:ee:d2:e2:1e:26:dd:45:12:c0:1e:
6c:14:f0:96:63:66:3b:d3:78:d2:09:ae:1c:5a:d6:5c:71:7d:
1e:5d:8c:c1:e3:ed:eb:68:71:27:bb:8d:25:e6:57:1b:61:ff:
e8:00:a5:fb:38:51:8e:72:74:5a:ce:2c:47:6a:fc:2f:1d:d8:
ac:8e:a7:14:94:0e:d3:0f:0f:25:95:19:58:8f:c4:a2:82:b2:
83:a6:87:18:f3:65:89:48:0d:1a:41:4f:eb:6c:7e:27:39:47:
8f:31:29:51:95:60:ea:8a:4a:1c:b3:8e:d9:0b:a1:9a:cb:da:
5d:8c:49:24:1a:44:69:8f:42:bb:51:c6:de:5e:7e:0b:e4:44:
e0:c6:1a:89:92:7e:54:ea:8b:46:81:63:51:04:71:fa:17:b2:
62:1b:bb:47:58:c8:21:33:7e:0c:04:4b:00:01:50:32:19:2f:
f5:7c:f4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:07:29 2025 by rpki-client