Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/561b1d-9f7f-47e8-8798-2cb8fe15d32e/1/I7QZxU1HNy08lRYyFCk8RbxHK6I.roa
File: I7QZxU1HNy08lRYyFCk8RbxHK6I.roa (raw, json)
Hash identifier: P67bUASRwA8Arsj51hRWzmJzDko6mZn3LJTWbVv6RtA=
Subject key identifier: 23:B4:19:C5:4D:47:37:2D:3C:95:16:32:14:29:3C:45:BC:47:2B:A2
Certificate issuer: /CN=d8d2e4b1677111da521a1e2c2db3dc33222a3cb6
Certificate serial: 0ACFD40F
Authority key identifier: D8:D2:E4:B1:67:71:11:DA:52:1A:1E:2C:2D:B3:DC:33:22:2A:3C:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NLksWdxEdpSGh4sLbPcMyIqPLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/561b1d-9f7f-47e8-8798-2cb8fe15d32e/1/I7QZxU1HNy08lRYyFCk8RbxHK6I.roa
Signing time: Sat 01 Jan 2022 12:02:57 +0000
ROA not before: Sat 01 Jan 2022 12:02:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24961
IP address blocks: 185.171.218.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181392399 (0xacfd40f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d2e4b1677111da521a1e2c2db3dc33222a3cb6
Validity
Not Before: Jan 1 12:02:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23b419c54d47372d3c95163214293c45bc472ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:e9:d6:db:1b:84:7f:f7:c1:3b:6a:04:20:
88:74:46:64:d3:ba:38:7e:fd:85:f1:78:d8:bf:87:
74:1f:74:6c:cf:8f:61:6e:31:a8:bb:c4:9c:63:cd:
88:76:35:7f:85:bb:08:4c:44:eb:a8:54:3f:10:fb:
69:8d:3d:7c:e3:a1:7d:c0:0f:d9:d5:56:c1:50:db:
13:af:be:16:51:15:47:92:93:31:46:0d:af:66:ef:
58:47:65:b3:a4:c3:cf:ff:83:e6:9b:5f:8a:36:5b:
42:75:46:fd:b6:a8:e5:28:68:46:cf:09:31:ff:8d:
10:54:a4:9d:14:de:ca:e7:ce:ea:0b:6e:df:f7:e4:
ee:d8:a0:54:75:44:2b:7c:06:39:6f:0c:0a:75:bc:
87:72:23:d8:07:11:ac:10:6f:55:47:97:df:b5:77:
a4:71:c1:69:c4:5f:16:09:12:ee:c0:e7:f0:96:86:
7f:81:94:75:98:31:c7:97:27:5f:bb:86:ce:1d:0a:
ab:d3:78:c9:7c:58:3c:3e:24:0a:25:b3:5d:f1:e4:
ba:9b:25:0e:5d:73:a7:8f:93:84:d2:a5:d1:00:94:
2f:57:39:0a:eb:e1:79:29:8c:8c:38:d9:8c:43:64:
62:6e:71:02:6a:18:b6:d0:ae:24:1c:9f:de:42:85:
2c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B4:19:C5:4D:47:37:2D:3C:95:16:32:14:29:3C:45:BC:47:2B:A2
X509v3 Authority Key Identifier:
keyid:D8:D2:E4:B1:67:71:11:DA:52:1A:1E:2C:2D:B3:DC:33:22:2A:3C:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NLksWdxEdpSGh4sLbPcMyIqPLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/561b1d-9f7f-47e8-8798-2cb8fe15d32e/1/I7QZxU1HNy08lRYyFCk8RbxHK6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/561b1d-9f7f-47e8-8798-2cb8fe15d32e/1/2NLksWdxEdpSGh4sLbPcMyIqPLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.218.0/23
Signature Algorithm: sha256WithRSAEncryption
72:2d:e9:71:fd:25:6e:25:2f:16:80:4f:57:71:2a:d1:f3:d3:
a9:39:41:c3:b9:fb:4f:cf:b0:c8:39:dd:d8:59:6b:0c:5a:1b:
bb:89:dd:b7:84:68:d2:dc:d1:ec:be:f8:02:b9:1f:08:5b:df:
2c:7f:d7:80:b5:15:39:b5:a1:01:34:00:0e:82:2d:fb:b6:ee:
49:d1:7b:dd:3d:85:89:12:d6:f7:e7:d2:bf:39:bf:c8:ed:a7:
6e:3c:57:80:65:1e:ad:2e:28:ef:48:02:27:b6:e3:3d:55:f6:
94:5f:cc:77:cd:2a:ab:6d:d0:fb:05:c0:f0:ac:02:88:02:be:
f2:40:f3:e1:dc:c6:06:01:a8:6f:1d:6b:22:23:d1:19:f7:67:
2d:99:71:d2:38:c3:7d:e0:be:4c:e9:13:40:ea:4b:83:6b:e2:
5f:67:27:86:16:f5:d9:cf:82:69:af:ef:9e:fa:91:aa:cc:77:
26:21:d8:01:dd:7c:d8:f3:8e:79:14:6e:dd:35:44:e5:92:7e:
21:e7:c5:5d:b3:72:75:1a:a0:08:8b:f9:66:c4:39:2d:9d:af:
be:86:74:7c:73:81:7b:11:ca:73:e6:e8:dc:5a:e5:e5:9f:91:
aa:21:06:ad:3b:a9:f1:4d:41:d0:93:85:da:c7:cd:4e:de:44:
ce:eb:dc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:18:56 2025 by rpki-client