Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/4c1b8b-aa6b-4eb1-b913-605341a393c3/1/dYEjSfrle7Gwp1DMRxwJLehoxqE.roa
File: dYEjSfrle7Gwp1DMRxwJLehoxqE.roa (raw, json)
Hash identifier: T1+6iVTAnzKClDfTnkaL2Lh+zhV2S+187oMwKS45hNI=
Subject key identifier: 75:81:23:49:FA:E5:7B:B1:B0:A7:50:CC:47:1C:09:2D:E8:68:C6:A1
Certificate issuer: /CN=c4638485e75c4d8a36018ca36d78932110486127
Certificate serial: 05D676E4
Authority key identifier: C4:63:84:85:E7:5C:4D:8A:36:01:8C:A3:6D:78:93:21:10:48:61:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGOEhedcTYo2AYyjbXiTIRBIYSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/4c1b8b-aa6b-4eb1-b913-605341a393c3/1/dYEjSfrle7Gwp1DMRxwJLehoxqE.roa
Signing time: Tue 05 Apr 2022 05:21:36 +0000
ROA not before: Tue 05 Apr 2022 05:21:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51468
IP address blocks: 185.10.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97941220 (0x5d676e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4638485e75c4d8a36018ca36d78932110486127
Validity
Not Before: Apr 5 05:21:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75812349fae57bb1b0a750cc471c092de868c6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d8:0f:fa:85:b6:3f:87:fa:dd:cc:51:7d:5e:
c7:5d:cb:6d:53:bb:e3:f4:db:21:39:b4:38:42:ef:
0a:bc:f7:03:0c:c0:bd:4a:1e:2f:3b:39:58:ec:0b:
c9:9f:54:91:ed:56:7c:97:9d:cc:0b:bd:f1:1c:cd:
44:d8:ee:ef:01:59:3c:03:01:e5:5c:98:58:e4:48:
71:81:d3:52:0d:64:87:21:9b:33:dc:44:48:cf:f1:
fe:a3:69:8d:23:15:24:71:fd:7d:70:0c:94:d0:0d:
56:91:50:31:4c:18:3d:70:00:5d:df:aa:3b:28:87:
bc:9c:af:b3:d1:b3:40:3d:73:a1:8d:6e:cc:25:8e:
5e:d0:4f:b8:bc:49:47:34:71:87:a9:c3:3c:32:38:
77:4e:ef:15:a2:38:2a:fc:4a:1f:38:9d:15:6c:e1:
95:c1:ad:f1:cc:2c:84:08:58:c3:ac:ee:4d:90:37:
e4:02:08:ce:12:36:af:15:0f:c0:f5:15:e9:66:f6:
73:86:24:1d:f8:ba:e5:92:1d:42:97:fd:32:da:a4:
5d:f5:36:9b:d4:05:25:81:47:c5:e3:2c:22:ce:cf:
92:0d:62:97:7a:aa:ea:6e:60:f5:4e:b7:07:a7:b7:
58:f1:89:33:73:70:b5:e1:63:c9:49:27:a2:f9:2d:
57:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:81:23:49:FA:E5:7B:B1:B0:A7:50:CC:47:1C:09:2D:E8:68:C6:A1
X509v3 Authority Key Identifier:
keyid:C4:63:84:85:E7:5C:4D:8A:36:01:8C:A3:6D:78:93:21:10:48:61:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGOEhedcTYo2AYyjbXiTIRBIYSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/4c1b8b-aa6b-4eb1-b913-605341a393c3/1/dYEjSfrle7Gwp1DMRxwJLehoxqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/4c1b8b-aa6b-4eb1-b913-605341a393c3/1/xGOEhedcTYo2AYyjbXiTIRBIYSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.11.0/24
Signature Algorithm: sha256WithRSAEncryption
52:0c:c2:8a:28:f7:d6:67:30:08:61:39:18:a0:5e:8f:a7:a8:
6a:90:fd:03:f3:3b:c8:37:ec:74:5d:b2:ab:6c:f2:e4:cf:8b:
74:cf:16:e3:60:a9:68:6e:75:ad:ac:33:2e:cf:ac:4d:fe:f4:
9b:91:29:b1:a0:44:64:fa:20:d1:27:62:0f:be:db:1d:58:42:
9a:6f:d9:28:cd:59:b7:0b:ea:6e:5a:d6:7a:de:b1:5e:60:65:
6c:40:50:09:d4:d0:34:c9:c1:4e:9e:85:a6:cc:a4:59:34:6b:
8e:c6:40:68:95:42:f6:ce:c2:db:b7:7a:d9:02:64:63:b9:71:
27:45:6a:48:25:b9:1d:41:f2:af:33:c4:af:1a:ab:17:e2:1e:
33:99:3a:ba:65:4f:79:3d:65:c8:29:52:2b:36:4c:31:7b:ec:
c1:e6:29:dc:18:da:c5:21:8d:19:64:93:93:df:09:cb:9f:f0:
18:ab:13:50:51:74:a0:b1:df:7c:b0:8e:b5:87:f0:64:28:97:
b6:bb:bc:80:9a:c0:af:ea:a2:c4:08:88:d9:c1:a6:a7:3a:a0:
e4:32:5e:45:6b:71:c1:e5:70:42:ab:62:18:b5:68:3b:93:c3:
13:86:b6:73:60:97:2a:03:6b:c6:29:c4:d7:f7:72:a1:15:e5:
a6:16:6d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:11:36 2025 by rpki-client