Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/53a03e-5571-456f-88a6-831817955d33/1/IGY0YRe8NNoCKTP2v6-xEO_gxlM.roa
File: IGY0YRe8NNoCKTP2v6-xEO_gxlM.roa (raw, json)
Hash identifier: ZnfwwD6/pQV2ZQkSjiuS8pfhli74+Iy0lpZ2QyUnyro=
Subject key identifier: 20:66:34:61:17:BC:34:DA:02:29:33:F6:BF:AF:B1:10:EF:E0:C6:53
Certificate issuer: /CN=77c51066d4f53dae10e69674dced3f032dd72efd
Certificate serial: 018571D7A351E01953922B5169CA9AB6F1C6
Authority key identifier: 77:C5:10:66:D4:F5:3D:AE:10:E6:96:74:DC:ED:3F:03:2D:D7:2E:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8UQZtT1Pa4Q5pZ03O0_Ay3XLv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/53a03e-5571-456f-88a6-831817955d33/1/IGY0YRe8NNoCKTP2v6-xEO_gxlM.roa
Signing time: Mon 02 Jan 2023 09:37:15 +0000
ROA not before: Mon 02 Jan 2023 09:37:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.138.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:a3:51:e0:19:53:92:2b:51:69:ca:9a:b6:f1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c51066d4f53dae10e69674dced3f032dd72efd
Validity
Not Before: Jan 2 09:37:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2066346117bc34da022933f6bfafb110efe0c653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:07:2b:9e:67:4f:ce:9a:c3:c1:71:4a:35:f3:
b6:90:29:40:41:db:dd:f0:1e:01:d7:8c:d3:0f:f7:
58:9a:15:4e:74:1f:46:3a:b2:53:a9:e0:83:57:29:
fc:08:01:ec:94:c7:ca:02:24:64:46:03:5b:36:f5:
f0:8d:6a:61:3a:ee:9d:81:f6:e2:5d:e7:f6:ba:d6:
2b:c2:a7:de:f4:bc:98:76:11:cc:e7:99:92:e2:51:
65:8b:8a:50:39:33:0a:59:65:ab:e9:0e:27:c8:0a:
0e:8f:3a:52:48:4c:cc:ff:e3:67:50:e7:43:b8:a4:
4b:ba:cd:9b:56:ae:63:a4:80:31:63:90:47:d3:53:
52:93:5a:f9:b7:75:cd:b6:51:9e:db:93:7a:ab:9f:
9e:0b:31:aa:13:ab:83:09:ac:a1:5f:15:8b:ce:39:
cb:16:49:23:20:3c:32:71:17:59:36:7a:ac:54:24:
95:b6:d8:5f:51:96:9b:67:04:18:49:dc:11:18:1f:
bc:da:de:03:ec:9f:52:c0:7b:09:b0:cf:d6:ff:14:
b7:80:42:76:4a:9c:6d:49:8b:5d:5d:ea:50:a7:d4:
95:c0:4a:44:71:ba:d5:30:06:6f:81:db:4d:fd:30:
bb:75:7b:38:b4:b4:d3:02:a2:25:77:a6:91:b2:ab:
66:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:66:34:61:17:BC:34:DA:02:29:33:F6:BF:AF:B1:10:EF:E0:C6:53
X509v3 Authority Key Identifier:
keyid:77:C5:10:66:D4:F5:3D:AE:10:E6:96:74:DC:ED:3F:03:2D:D7:2E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8UQZtT1Pa4Q5pZ03O0_Ay3XLv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/53a03e-5571-456f-88a6-831817955d33/1/IGY0YRe8NNoCKTP2v6-xEO_gxlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/53a03e-5571-456f-88a6-831817955d33/1/d8UQZtT1Pa4Q5pZ03O0_Ay3XLv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.166.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:8e:bf:67:c1:8d:ba:9d:f2:7a:ad:b5:61:82:ab:76:b4:4d:
fe:d2:24:f0:62:d0:42:e5:62:b2:47:4c:aa:53:7d:72:06:23:
22:68:b2:d2:f4:7e:96:a4:a1:57:72:8b:ec:68:b0:30:52:c2:
23:95:b4:ea:42:41:40:54:de:0d:74:13:cf:51:de:62:a9:8d:
41:2d:45:4b:78:81:34:07:fe:56:b4:23:61:88:b7:9c:a8:4e:
d2:68:ef:f3:a0:81:ff:92:62:3f:3f:94:79:e9:24:77:c1:53:
06:c1:a7:e7:62:1d:16:d6:97:e0:19:89:1d:ad:21:7a:e6:d9:
ad:1c:8a:48:71:89:ff:45:d0:59:10:be:00:fa:c9:56:1d:1f:
d3:e5:38:c5:26:d3:74:9c:68:5c:ce:49:b1:a1:41:d7:fd:4c:
9e:2f:67:e0:e3:05:d4:5a:87:c1:cf:10:83:37:8f:ea:d0:56:
f0:13:33:a1:37:26:ad:5c:fc:01:cc:a0:e9:a3:75:27:75:59:
24:f6:59:c7:b7:61:a3:db:4e:e7:0e:24:a7:9c:17:5e:3e:55:
d0:d9:1e:b8:83:7b:fa:74:5a:c0:29:ca:ac:95:7e:f8:6f:dc:
42:61:ef:be:a8:2a:c3:66:e2:d9:64:0b:48:fb:83:71:a6:8b:
ad:b2:1a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:22:58 2025 by rpki-client