Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/53a03e-5571-456f-88a6-831817955d33/1/4vT391ZOKWB8DOz3JytRzicjoMU.roa
File: 4vT391ZOKWB8DOz3JytRzicjoMU.roa (raw, json)
Hash identifier: Rkigf/D5WivVzqkMdWnhjPe8ljR5B/cQpNgFC6KBG8Y=
Subject key identifier: E2:F4:F7:F7:56:4E:29:60:7C:0C:EC:F7:27:2B:51:CE:27:23:A0:C5
Certificate issuer: /CN=77c51066d4f53dae10e69674dced3f032dd72efd
Certificate serial: 0187284F28CDDD0215A9AF9F9EBB8E9C5057
Authority key identifier: 77:C5:10:66:D4:F5:3D:AE:10:E6:96:74:DC:ED:3F:03:2D:D7:2E:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8UQZtT1Pa4Q5pZ03O0_Ay3XLv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/53a03e-5571-456f-88a6-831817955d33/1/4vT391ZOKWB8DOz3JytRzicjoMU.roa
Signing time: Tue 28 Mar 2023 13:01:29 +0000
ROA not before: Tue 28 Mar 2023 13:01:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 185.138.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:28:4f:28:cd:dd:02:15:a9:af:9f:9e:bb:8e:9c:50:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c51066d4f53dae10e69674dced3f032dd72efd
Validity
Not Before: Mar 28 13:01:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2f4f7f7564e29607c0cecf7272b51ce2723a0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cb:d6:56:c7:9b:40:27:36:db:fc:9f:60:bc:
40:6a:48:1b:1f:7c:87:64:2f:49:0f:9e:1c:87:b5:
aa:c7:3d:ac:24:26:6e:39:c7:83:e0:77:84:93:98:
6b:6c:f4:93:e5:06:0a:a3:10:8a:25:88:6c:df:cb:
91:58:33:c7:85:e7:7f:28:2f:07:16:be:4f:d6:5f:
58:28:0c:a3:32:59:3f:6c:7c:18:1f:70:5b:f1:71:
72:c2:51:59:37:c5:7b:fa:1f:d1:af:03:16:96:ff:
95:6f:cb:ed:8e:f9:34:c5:07:7d:ad:1e:73:01:10:
8a:57:c1:64:dd:72:d9:cb:a0:5c:9c:a4:96:45:ea:
77:5f:39:87:f4:ad:a0:36:78:d3:9e:10:84:79:c6:
b0:81:89:04:a1:86:b7:c2:38:0d:8a:65:91:5d:de:
61:52:37:62:e9:21:32:ad:12:08:ac:18:da:b5:7d:
ca:fd:86:fb:a9:59:1b:72:a3:29:92:e9:e0:d9:5d:
19:32:ab:0e:48:e0:85:53:94:7c:cb:45:fc:a0:7d:
a8:cd:55:2d:df:05:82:fa:17:59:47:4c:5b:7e:03:
84:cb:45:d2:09:e3:5c:f5:2a:09:e9:13:70:d9:9b:
bf:15:2f:44:df:70:44:d0:6f:f6:55:1c:10:d1:3f:
b1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F4:F7:F7:56:4E:29:60:7C:0C:EC:F7:27:2B:51:CE:27:23:A0:C5
X509v3 Authority Key Identifier:
keyid:77:C5:10:66:D4:F5:3D:AE:10:E6:96:74:DC:ED:3F:03:2D:D7:2E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8UQZtT1Pa4Q5pZ03O0_Ay3XLv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/53a03e-5571-456f-88a6-831817955d33/1/4vT391ZOKWB8DOz3JytRzicjoMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/53a03e-5571-456f-88a6-831817955d33/1/d8UQZtT1Pa4Q5pZ03O0_Ay3XLv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.166.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:b7:6e:df:9e:67:37:3f:90:81:a1:53:03:ba:ea:f0:64:03:
f8:5a:a4:88:55:79:bc:d6:40:98:78:3f:3e:75:d3:5e:54:50:
7a:8e:ca:e3:4e:18:92:29:57:69:2d:a4:7f:d8:f3:6e:df:76:
86:bd:ea:07:0d:97:b0:4c:43:1a:22:cc:c0:25:e3:11:f2:f7:
79:f2:da:8e:ce:d6:61:c3:81:91:6e:75:76:58:0c:65:5c:a2:
b2:74:34:b9:16:53:bd:4b:0e:ee:be:96:c9:41:01:55:d8:2b:
f5:43:67:b1:d3:48:cf:2a:c6:5d:de:bf:ec:73:cd:aa:a8:a0:
4c:05:8c:22:76:02:dc:24:42:b0:37:ee:7c:d2:3e:5d:4d:1f:
a2:c3:7f:59:46:2d:02:89:9f:ab:99:37:b4:e6:a8:74:08:e2:
f4:d6:2c:d8:4d:5a:12:6b:d9:c5:f1:89:e4:0b:90:a7:9e:16:
01:19:80:22:7a:30:d1:f5:7a:f3:a8:4e:ef:12:aa:21:f0:22:
e0:de:f2:a9:74:71:e6:3c:a2:45:d3:72:86:6c:27:29:cd:67:
31:9f:fc:b0:5d:72:e2:e0:28:71:f1:e3:15:ca:85:59:94:43:
dd:75:f8:79:c3:2a:d9:5b:f9:71:3b:db:cc:1f:8c:8a:19:3e:
73:41:85:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:17:40 2025 by rpki-client