Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/789da3-7c3e-4499-8ce5-5b9ff9622fe2/1/v2w73BF7AcU1S7rNsHroWxPSFMU.roa
File: v2w73BF7AcU1S7rNsHroWxPSFMU.roa (raw, json)
Hash identifier: cfx4jqgQGG4TmJoYALOAjk5dK+uZMkdOgFt7XfTm+98=
Subject key identifier: BF:6C:3B:DC:11:7B:01:C5:35:4B:BA:CD:B0:7A:E8:5B:13:D2:14:C5
Certificate issuer: /CN=b645c06b4775e92ba1f214e342f8c5e378608334
Certificate serial: 094A8D5B
Authority key identifier: B6:45:C0:6B:47:75:E9:2B:A1:F2:14:E3:42:F8:C5:E3:78:60:83:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkXAa0d16Suh8hTjQvjF43hggzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/789da3-7c3e-4499-8ce5-5b9ff9622fe2/1/v2w73BF7AcU1S7rNsHroWxPSFMU.roa
Signing time: Sat 01 Jan 2022 08:56:31 +0000
ROA not before: Sat 01 Jan 2022 08:56:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205852
IP address blocks: 185.204.72.0/23 maxlen: 23
185.204.74.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155880795 (0x94a8d5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b645c06b4775e92ba1f214e342f8c5e378608334
Validity
Not Before: Jan 1 08:56:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf6c3bdc117b01c5354bbacdb07ae85b13d214c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:34:33:d4:68:f0:44:a2:d4:ed:7f:94:f8:
f3:e2:89:ef:3d:d4:87:05:b2:dc:ff:50:d6:2a:60:
71:b4:8d:5f:2a:fc:f4:48:59:a5:08:f9:5c:79:9e:
51:1a:33:84:cc:c9:cf:a8:20:35:36:90:6b:3e:ce:
11:da:79:a8:26:3f:05:de:97:a2:cf:1a:7b:51:86:
82:93:d3:6b:f6:7f:42:1f:60:26:65:1f:33:25:58:
73:c2:6d:ec:43:8b:d1:b8:15:fd:31:f6:3b:2d:35:
e4:85:34:a9:67:4c:d3:0f:cd:f1:d4:ed:33:ea:69:
a9:19:f6:60:5f:9d:35:e2:92:84:44:7a:69:66:8f:
26:46:98:fd:8b:d6:bb:18:cd:8f:f3:0f:42:26:cd:
56:f6:f6:99:82:14:e7:a8:62:89:43:af:93:24:54:
e4:64:14:ce:92:e4:a2:29:d0:02:27:e2:2c:58:14:
fc:d6:59:86:20:7d:15:1e:3b:c6:22:8f:9f:08:f7:
5c:3b:74:68:c8:99:5c:ba:88:a0:81:3f:7d:69:e7:
e8:f8:74:4f:f9:03:e8:c7:01:1d:d9:d3:0e:da:ee:
ea:4e:40:29:37:f3:1d:4f:61:54:88:1d:61:19:5c:
69:7d:a4:91:dd:54:d5:4e:3b:c5:cd:ef:8c:bf:57:
d3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6C:3B:DC:11:7B:01:C5:35:4B:BA:CD:B0:7A:E8:5B:13:D2:14:C5
X509v3 Authority Key Identifier:
keyid:B6:45:C0:6B:47:75:E9:2B:A1:F2:14:E3:42:F8:C5:E3:78:60:83:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkXAa0d16Suh8hTjQvjF43hggzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/789da3-7c3e-4499-8ce5-5b9ff9622fe2/1/v2w73BF7AcU1S7rNsHroWxPSFMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/789da3-7c3e-4499-8ce5-5b9ff9622fe2/1/tkXAa0d16Suh8hTjQvjF43hggzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.72.0/22
Signature Algorithm: sha256WithRSAEncryption
85:4b:fc:5e:b2:ef:db:5b:8d:08:56:01:e7:33:40:ce:0c:7a:
ac:6a:9e:66:64:34:53:a2:7d:58:3e:c5:8a:09:29:8e:00:7d:
d4:1a:78:0c:cc:f3:22:6a:6e:24:99:72:f8:6c:f4:b2:5e:7c:
d4:f0:14:07:bb:35:f1:f7:fb:72:5b:14:b6:55:27:5c:b1:6e:
db:7d:95:95:b4:cf:9d:eb:6c:4d:de:a3:11:00:0d:b4:ea:ef:
a1:09:fb:db:46:12:15:fc:c0:d2:15:56:f7:fd:7b:2a:4a:a2:
64:fa:93:49:2a:be:9d:75:17:4e:0a:44:06:8c:4b:eb:ee:21:
f2:73:d3:95:83:4f:93:e4:51:51:ff:ce:dc:5a:d9:ff:c2:0b:
d2:f7:45:35:db:fd:06:c1:e0:a8:64:ff:ec:07:e5:d4:69:b3:
c2:82:e4:d5:b4:ff:13:bd:b8:49:41:9c:c0:ad:31:d4:31:05:
48:c6:60:87:64:c1:ff:92:56:62:94:df:00:26:1a:09:d2:f7:
82:ec:4a:8f:4d:a1:24:26:52:f3:c1:6d:d1:77:06:06:e5:d6:
1e:1e:54:6d:71:b5:3e:fe:cd:21:d3:6d:27:64:bf:c0:5a:68:
4c:b1:d3:68:94:8a:75:f0:dd:15:8f:35:b4:0c:18:27:00:00:
99:e0:34:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:35 2025 by rpki-client