Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/_Sn3RhfY--fiVliyrSpcw_Dpx8U.roa
File: _Sn3RhfY--fiVliyrSpcw_Dpx8U.roa (raw, json)
Hash identifier: 0DlsX3tbgemelzimR5EC4gu2Xnu0fF/hzb1n4QMYZI8=
Subject key identifier: FD:29:F7:46:17:D8:FB:E7:E2:56:58:B2:AD:2A:5C:C3:F0:E9:C7:C5
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 0194266C0355998E56AA54098D7A5546795B
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/_Sn3RhfY--fiVliyrSpcw_Dpx8U.roa
Signing time: Thu 02 Jan 2025 09:50:00 +0000
ROA not before: Thu 02 Jan 2025 09:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201679
IP address blocks: 185.64.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:03:55:99:8e:56:aa:54:09:8d:7a:55:46:79:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Jan 2 09:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd29f74617d8fbe7e25658b2ad2a5cc3f0e9c7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a4:08:86:77:03:51:d1:21:42:8d:1b:54:08:
e6:c2:48:8b:02:99:4d:60:83:63:bb:9f:47:b1:5f:
97:be:dc:11:45:94:0c:98:e3:60:02:1c:bd:9b:49:
5a:67:7c:87:99:5a:45:3d:a7:7c:d7:1e:2c:00:9b:
e0:55:1e:ea:2a:e0:c0:96:1b:63:ab:6c:15:44:24:
62:41:00:5f:46:9c:d2:3f:3e:b4:50:3d:70:56:b7:
1b:51:ac:d0:4c:38:f4:67:32:31:87:5e:a0:38:5f:
fa:ce:76:99:99:27:2e:2e:2f:d0:5f:61:36:4b:75:
c2:24:be:eb:6a:5c:ce:21:6e:12:fd:b3:ac:4d:92:
e4:7f:4d:7d:e3:ae:fb:68:fe:f3:fa:ec:e9:a8:00:
34:73:69:4d:4e:ef:04:da:b0:64:9a:0b:d3:0b:f3:
36:f2:8f:3e:c2:a9:ea:f3:c1:4f:20:48:ff:0b:b9:
aa:bc:49:77:75:3e:5d:33:0d:61:ea:53:4d:03:7e:
59:ae:e0:90:28:98:39:57:af:df:63:54:9f:fc:b2:
3c:3b:99:52:d0:b5:ec:3a:41:b6:2e:48:8e:78:38:
af:76:d0:be:57:e6:c3:b7:bc:23:c1:9c:94:48:7f:
99:69:83:bc:43:d9:0e:f6:fd:3b:51:c0:be:8d:e9:
be:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:29:F7:46:17:D8:FB:E7:E2:56:58:B2:AD:2A:5C:C3:F0:E9:C7:C5
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/_Sn3RhfY--fiVliyrSpcw_Dpx8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.132.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:8b:b7:a8:f3:f8:2b:80:db:10:33:df:2d:0a:bd:fa:c3:dc:
c0:38:68:f9:42:d8:1f:ca:32:f4:e0:f3:e9:c4:2a:7a:2f:b3:
77:54:8a:56:06:74:92:ec:fb:e3:b2:f8:fd:48:27:4e:67:d1:
db:3c:99:f1:61:56:4d:ae:8c:1b:0c:43:1f:58:94:fb:34:4d:
02:de:03:59:cb:7c:de:47:a9:da:b6:7d:ff:2f:1c:77:6a:16:
04:38:5f:8e:c6:fd:0f:b3:b5:76:f2:d0:ab:99:b0:94:df:b9:
21:d8:30:68:c1:49:1c:20:75:80:c9:3d:a6:d2:8b:a1:34:cd:
f7:80:6b:58:23:49:ec:7f:c7:c0:13:62:b9:1d:62:5b:bf:9d:
10:cd:1b:cf:d1:f5:0c:bc:0a:37:e1:5d:1e:30:77:ce:6f:b5:
3c:5c:67:c1:f7:e4:88:2b:08:ab:c0:a6:4b:d7:b7:2e:73:34:
45:39:98:e0:4e:01:ce:76:7b:58:8b:ea:d3:f5:ba:f5:9c:40:
86:95:e8:89:b3:e2:56:c5:69:f7:83:5f:5e:84:eb:2c:c0:3d:
5c:1a:78:32:b3:72:34:42:ad:77:37:bd:a7:ad:3a:20:69:d4:
b1:aa:9e:69:61:44:25:c8:63:a6:19:14:e1:1c:e6:09:31:91:
1e:5a:90:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:27 2025 by rpki-client