Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1b8cb9-e49d-434c-8c75-501628c5a7c8/1/rgPQLpcGeEn-sTQPzNPCRZmO-Jo.roa
File: rgPQLpcGeEn-sTQPzNPCRZmO-Jo.roa (raw, json)
Hash identifier: 95NI57KdrLRG7e8oPtRAEkWeicE9zJj72vAQVDrpmj4=
Subject key identifier: AE:03:D0:2E:97:06:78:49:FE:B1:34:0F:CC:D3:C2:45:99:8E:F8:9A
Certificate issuer: /CN=1a349707197c73e414bf642c6042c7bfad600e54
Certificate serial: 01856D788EE60C149B93C7E8306FEBBFED1F
Authority key identifier: 1A:34:97:07:19:7C:73:E4:14:BF:64:2C:60:42:C7:BF:AD:60:0E:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjSXBxl8c-QUv2QsYELHv61gDlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1b8cb9-e49d-434c-8c75-501628c5a7c8/1/rgPQLpcGeEn-sTQPzNPCRZmO-Jo.roa
Signing time: Sun 01 Jan 2023 13:14:55 +0000
ROA not before: Sun 01 Jan 2023 13:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43402
IP address blocks: 185.185.92.0/22 maxlen: 24
2a0b:5080::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:8e:e6:0c:14:9b:93:c7:e8:30:6f:eb:bf:ed:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a349707197c73e414bf642c6042c7bfad600e54
Validity
Not Before: Jan 1 13:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae03d02e97067849feb1340fccd3c245998ef89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3d:7c:d2:f7:cb:93:32:2c:32:e7:49:e5:52:
de:1b:ca:c4:be:7b:9a:aa:0b:0a:37:91:eb:46:fa:
fa:20:ad:c2:85:e2:eb:c3:1a:72:49:0b:7d:6d:80:
8f:1d:2e:19:bc:92:05:00:b2:1b:c1:4b:42:e8:27:
29:23:73:d8:4b:3c:a7:ba:c9:5d:f0:53:91:bd:ad:
59:d9:aa:61:7b:cd:cd:ad:3c:e9:bf:2a:af:a7:71:
6a:1f:c4:c6:17:13:e2:4c:95:7c:9d:bf:8b:37:73:
a3:d4:95:bf:f1:cb:ec:fc:23:f4:76:96:d1:58:a2:
02:b2:62:93:54:6e:d8:15:ab:82:19:3b:3c:d8:f4:
f4:1e:d1:20:14:5e:46:71:da:80:ed:6e:eb:d2:f6:
4c:9e:3d:cc:58:f1:09:f3:fe:cc:90:08:70:e2:1a:
43:9b:35:bd:f0:fd:95:54:0a:81:75:fe:a3:69:32:
f3:8f:70:24:b1:4c:55:61:9c:0c:8a:06:16:16:5c:
26:87:77:64:58:96:87:26:63:e2:d6:0c:47:e0:6a:
01:c0:d9:c9:01:ec:15:e1:08:36:a3:1a:69:3b:7e:
30:b9:fc:65:e5:da:30:db:2b:87:8e:09:a8:11:34:
0d:6f:e8:2a:a9:29:63:37:3c:f3:c1:22:64:40:a5:
15:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:03:D0:2E:97:06:78:49:FE:B1:34:0F:CC:D3:C2:45:99:8E:F8:9A
X509v3 Authority Key Identifier:
keyid:1A:34:97:07:19:7C:73:E4:14:BF:64:2C:60:42:C7:BF:AD:60:0E:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjSXBxl8c-QUv2QsYELHv61gDlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1b8cb9-e49d-434c-8c75-501628c5a7c8/1/rgPQLpcGeEn-sTQPzNPCRZmO-Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1b8cb9-e49d-434c-8c75-501628c5a7c8/1/GjSXBxl8c-QUv2QsYELHv61gDlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.92.0/22
IPv6:
2a0b:5080::/29
Signature Algorithm: sha256WithRSAEncryption
85:09:83:cd:8a:98:0c:8d:d9:e6:3e:cf:df:8a:75:fc:d3:6d:
63:f5:78:22:d2:1f:b1:94:12:90:62:4b:91:0b:b3:84:13:cb:
40:1c:cd:83:15:ac:e8:76:ac:44:88:97:02:29:e0:9d:5b:ba:
eb:88:db:2c:3a:93:3d:ed:25:43:71:94:4c:8f:d3:da:02:71:
57:ea:65:2e:0b:b4:c2:79:fa:03:0f:da:4d:a5:d5:31:0f:ce:
8e:b5:41:79:bc:21:eb:4c:e2:5b:4d:5d:15:0f:09:fa:12:4a:
85:5e:0f:b0:cd:ca:f1:0c:d2:8c:62:f3:95:00:d4:8c:87:a8:
27:c8:8e:87:ef:75:c4:8c:13:70:72:46:16:43:3f:c3:42:30:
42:8a:7e:8a:d4:db:c7:d8:52:72:86:38:07:ef:00:12:1c:e0:
33:9c:15:70:b1:52:6a:69:1f:e4:e2:75:d0:73:b5:50:62:07:
a2:9b:6d:18:42:0a:dd:62:fe:2b:27:54:4d:37:d0:46:24:ae:
7c:14:65:e7:21:91:85:2b:0b:59:c2:de:60:38:96:5b:9a:2f:
95:8f:a3:0a:e8:d6:f7:46:06:fe:f3:53:c3:30:5f:16:03:15:
85:47:7c:65:b2:e7:8d:3c:4d:5a:40:de:03:be:c1:1c:e9:d5:
ba:68:b5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:30 2025 by rpki-client