Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9d8427-8e60-4429-84b3-345d064da7bf/1/FkJUSgDVpyntA0sUXJgDYsZy3X4.roa
File: FkJUSgDVpyntA0sUXJgDYsZy3X4.roa (raw, json)
Hash identifier: ZX/QB/wupr5/PhRQ81TszRhrW66wmiPZ6/k0KIAmpzc=
Subject key identifier: 16:42:54:4A:00:D5:A7:29:ED:03:4B:14:5C:98:03:62:C6:72:DD:7E
Certificate issuer: /CN=34a9eb6c4d3a57c9a56456ddbf0012b81750b1d3
Certificate serial: 0185A5B6E55A14FC71E9F031613372C0094C
Authority key identifier: 34:A9:EB:6C:4D:3A:57:C9:A5:64:56:DD:BF:00:12:B8:17:50:B1:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKnrbE06V8mlZFbdvwASuBdQsdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9d8427-8e60-4429-84b3-345d064da7bf/1/FkJUSgDVpyntA0sUXJgDYsZy3X4.roa
Signing time: Thu 12 Jan 2023 11:21:45 +0000
ROA not before: Thu 12 Jan 2023 11:21:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 185.138.164.0/24 maxlen: 24
2a11:4c02::/32 maxlen: 32
2a11:4c03::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a5:b6:e5:5a:14:fc:71:e9:f0:31:61:33:72:c0:09:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a9eb6c4d3a57c9a56456ddbf0012b81750b1d3
Validity
Not Before: Jan 12 11:21:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1642544a00d5a729ed034b145c980362c672dd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a0:e1:2c:c2:29:64:e8:40:cd:51:a0:df:ea:
58:96:21:13:be:35:03:12:8b:d0:28:63:5a:0a:0a:
e7:e9:d8:cc:93:a8:9f:01:d5:88:59:4b:47:92:7e:
97:97:0e:ac:e9:be:57:b8:a1:5e:dd:39:c0:b4:47:
3e:7e:6b:d3:9d:21:b7:7f:09:6c:39:07:11:0e:e2:
58:3b:65:0b:3b:81:b4:23:0c:2f:56:73:68:b0:d6:
90:03:3d:ec:d5:ef:af:6f:70:b9:3c:5f:ea:c2:b9:
d5:59:dc:fd:68:af:b4:9b:a4:34:3c:4f:c8:fb:13:
e0:c4:5d:18:b1:95:5d:12:a2:23:81:be:8b:b6:b0:
f5:27:0e:ba:8a:02:87:23:4a:e4:0c:2b:86:4d:0d:
69:fd:73:a7:a3:18:41:da:03:4a:70:93:32:e9:5d:
47:de:53:a3:ed:4c:99:0c:61:1f:e1:3c:aa:dc:5c:
63:cf:4d:6c:dd:f0:24:b8:9a:aa:7d:72:dc:81:9a:
39:ab:cf:a6:07:e9:2e:67:df:95:b1:84:80:65:e7:
33:60:f4:ac:32:23:1a:fe:33:27:ae:a0:13:32:65:
5c:03:10:1e:5f:78:74:98:0f:89:8c:14:0b:80:a3:
5f:f2:44:a8:b6:e8:d9:a4:c6:3c:a9:95:a0:cd:2a:
4d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:42:54:4A:00:D5:A7:29:ED:03:4B:14:5C:98:03:62:C6:72:DD:7E
X509v3 Authority Key Identifier:
keyid:34:A9:EB:6C:4D:3A:57:C9:A5:64:56:DD:BF:00:12:B8:17:50:B1:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKnrbE06V8mlZFbdvwASuBdQsdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9d8427-8e60-4429-84b3-345d064da7bf/1/FkJUSgDVpyntA0sUXJgDYsZy3X4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9d8427-8e60-4429-84b3-345d064da7bf/1/NKnrbE06V8mlZFbdvwASuBdQsdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.164.0/24
IPv6:
2a11:4c02::/31
Signature Algorithm: sha256WithRSAEncryption
41:d6:e5:f4:1e:8a:33:f4:c4:80:36:83:ec:e3:89:d2:99:6d:
12:4e:05:00:97:fa:a3:a4:79:25:f0:e1:70:3d:69:c8:3b:7d:
81:68:4c:81:2e:cb:5d:54:56:40:42:9a:98:47:21:f3:09:bb:
50:0c:3c:80:79:09:5f:91:90:ee:c3:aa:df:af:63:51:1f:bd:
5c:9f:fd:9d:db:2c:68:db:33:2c:c8:f6:62:84:53:76:70:6a:
39:fc:ea:d3:4b:ed:d6:88:39:78:72:d4:c0:e9:63:0d:d5:53:
8a:18:67:29:05:67:4a:76:1b:b3:48:ad:4d:fd:92:07:e9:5b:
99:93:c4:9c:3c:8e:16:07:e5:3c:61:78:32:6f:18:3f:fc:52:
27:22:86:56:f7:bc:32:b0:fc:af:9e:54:64:cf:65:5b:0b:d8:
ed:be:16:6e:c4:a9:ef:43:79:1d:99:43:c0:3e:c7:f2:90:92:
f6:26:2c:13:f1:fa:c3:e3:7d:95:89:d1:65:ec:f2:b6:d5:9f:
f5:21:96:55:4c:cd:3f:f0:bb:81:3e:a4:92:fd:e1:4f:ae:16:
32:bd:d7:bd:de:eb:b3:a9:46:9d:c3:fa:6e:2b:6d:12:41:2e:
c1:60:3a:0a:b0:e8:5c:9c:7c:2b:7e:d8:bd:e7:d9:05:d9:d2:
8f:20:e7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:01:09 2025 by rpki-client