Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/6-SOdE9Ct5s-6p-8Tk0ukbWwQ3A.roa
File: 6-SOdE9Ct5s-6p-8Tk0ukbWwQ3A.roa (raw, json)
Hash identifier: QPh2sfqCvCB6gbT4Uyxp6pH72Yxw1ylWbZPgkCyzHXI=
Subject key identifier: EB:E4:8E:74:4F:42:B7:9B:3E:EA:9F:BC:4E:4D:2E:91:B5:B0:43:70
Certificate issuer: /CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Certificate serial: 026D5A9D
Authority key identifier: 44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/6-SOdE9Ct5s-6p-8Tk0ukbWwQ3A.roa
Signing time: Sat 01 Jan 2022 10:55:16 +0000
ROA not before: Sat 01 Jan 2022 10:55:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 185.127.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40721053 (0x26d5a9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Validity
Not Before: Jan 1 10:55:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebe48e744f42b79b3eea9fbc4e4d2e91b5b04370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0d:a2:e4:71:e7:fe:80:f9:5b:fe:6f:e7:d6:
73:f8:1c:c3:40:83:74:7f:c2:e8:d0:45:5b:03:94:
30:79:ba:db:40:eb:52:16:36:db:38:78:6e:4b:3f:
5e:d5:85:9b:a7:fe:bd:cb:76:09:d2:c5:c0:3f:14:
51:0b:49:4f:66:7f:9b:03:60:5b:92:d6:89:57:5e:
af:92:1f:a5:f6:a6:1d:9c:50:c9:1d:c8:b2:e4:29:
73:43:3f:41:00:f4:c3:8e:d0:4f:33:ad:db:6a:b2:
1a:72:a4:0b:c9:2f:ad:0e:74:21:87:3b:10:4c:6b:
b5:2d:97:24:3e:72:43:c3:7f:08:43:5e:19:5b:db:
a1:f6:66:54:6f:6b:8b:d1:97:6d:7a:45:1d:eb:43:
98:b6:1e:ff:f0:db:a8:52:ce:56:fa:d4:b2:7f:04:
96:d1:aa:b1:2d:c7:9b:ba:97:24:34:63:8a:8e:3e:
c2:74:e2:ff:2d:c0:e0:a5:f8:1c:51:93:c2:44:7b:
89:bf:0d:cb:3d:28:ca:0f:2a:88:b9:92:5d:fc:02:
9a:1b:f4:20:a7:49:90:4b:c5:3f:73:8f:ca:56:3e:
43:2e:b6:9a:c7:c3:62:f6:58:8f:b2:ed:ae:3c:b8:
41:f6:57:12:d6:d3:f4:56:1c:72:e7:62:30:79:67:
70:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E4:8E:74:4F:42:B7:9B:3E:EA:9F:BC:4E:4D:2E:91:B5:B0:43:70
X509v3 Authority Key Identifier:
keyid:44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/6-SOdE9Ct5s-6p-8Tk0ukbWwQ3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/RHTPPi-okrX90_MNyCde4QYuHQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.166.0/23
Signature Algorithm: sha256WithRSAEncryption
24:84:bc:c3:57:f5:9d:28:9f:58:01:0a:6a:e0:2a:74:97:08:
b9:31:19:26:32:48:f6:64:8b:f7:4d:a0:00:55:1c:50:4d:57:
54:38:a0:94:6a:0d:79:07:45:8a:46:80:d1:9c:e0:27:b2:0a:
82:0d:d9:eb:e4:c2:5a:8b:55:75:c4:b3:aa:ab:32:41:62:6b:
1f:26:18:b6:6b:a9:0b:1f:bd:e2:f1:59:fa:b9:d6:17:9e:49:
d6:a1:79:73:48:3d:67:af:5e:81:29:3e:fe:40:f8:45:be:bf:
b4:ba:a1:e0:99:d7:bf:5c:50:90:60:da:8b:1b:eb:f3:60:77:
f3:e9:11:e8:c2:86:df:b5:15:67:ac:c6:91:7e:3b:25:f7:c5:
19:aa:c0:25:52:1f:a0:47:fa:c9:79:33:32:0f:f0:b6:3a:9a:
0e:d1:9b:03:72:1b:1f:a9:2b:2d:02:eb:ac:7e:29:3e:45:15:
50:e6:6f:14:b5:31:ae:a9:25:3a:2d:97:05:54:52:04:e0:a8:
15:7e:f7:9d:7d:53:9c:f6:2b:37:db:eb:1a:da:38:58:a4:99:
84:b3:58:54:6e:ff:3f:66:4d:b0:c0:78:84:6b:ec:80:53:39:
b0:6a:4c:fc:f2:8b:46:d3:74:41:41:74:f6:ad:54:f4:cf:49:
7f:e7:57:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:58:51 2025 by rpki-client