Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/661d4e-cd6a-477f-919c-81c716f5bca2/1/F2hxjUeYTxmHr4NogQVnnXnE4NM.roa
File: F2hxjUeYTxmHr4NogQVnnXnE4NM.roa (raw, json)
Hash identifier: 2gPHW4v1nMPrx1Xj0q7EocqZlzH8ZnrP3ccIQMpHu70=
Subject key identifier: 17:68:71:8D:47:98:4F:19:87:AF:83:68:81:05:67:9D:79:C4:E0:D3
Certificate issuer: /CN=13eb7b7df835b113abb3f626f6203fee97b1992c
Certificate serial: 018570B09B146F06A1570BF814ED043385AA
Authority key identifier: 13:EB:7B:7D:F8:35:B1:13:AB:B3:F6:26:F6:20:3F:EE:97:B1:99:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-t7ffg1sROrs_Ym9iA_7pexmSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/661d4e-cd6a-477f-919c-81c716f5bca2/1/F2hxjUeYTxmHr4NogQVnnXnE4NM.roa
Signing time: Mon 02 Jan 2023 04:15:00 +0000
ROA not before: Mon 02 Jan 2023 04:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201990
IP address blocks: 185.205.84.0/22 maxlen: 22
193.46.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:9b:14:6f:06:a1:57:0b:f8:14:ed:04:33:85:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13eb7b7df835b113abb3f626f6203fee97b1992c
Validity
Not Before: Jan 2 04:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1768718d47984f1987af83688105679d79c4e0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:93:f1:9b:f8:28:8f:3f:4a:14:2f:45:06:e1:
1a:f7:5c:d9:bf:12:aa:ae:55:bc:90:ea:0d:a0:7a:
bc:77:fe:a4:8d:be:6e:65:84:24:92:fe:fc:5f:de:
1f:1c:16:93:9a:1f:86:e9:ea:46:ca:1e:b4:6f:ba:
00:01:d4:69:db:be:e9:a4:ec:54:cb:f4:96:9d:4a:
38:c6:09:5e:24:7b:35:7e:ba:f5:56:4d:d5:ff:c1:
25:bf:83:3e:50:57:44:9f:67:56:4d:9a:d7:92:89:
4d:71:13:6b:a7:bb:68:43:13:2b:5a:43:c8:d4:76:
c9:4e:69:25:fc:82:1b:a2:fb:8e:a4:e2:08:34:46:
2d:21:d3:8f:f5:2f:b6:55:2c:e1:b1:2c:9d:55:db:
05:e0:47:40:57:f5:ab:a4:c5:b8:50:d2:dd:ca:47:
1a:eb:63:ae:ce:dc:d6:a8:e8:d1:4d:a7:db:1d:87:
c5:4b:d5:db:30:73:4f:0a:86:0e:f0:bf:a0:3a:f4:
b1:9f:e8:22:58:14:3a:53:40:7c:b6:f0:25:30:e3:
31:95:62:6d:cb:e9:df:d7:db:35:00:c1:fd:90:f7:
0f:27:c3:85:90:ae:cf:a2:f9:49:38:0c:b0:27:d7:
d0:88:67:f3:d8:b1:46:aa:46:70:94:b8:08:08:ef:
32:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:68:71:8D:47:98:4F:19:87:AF:83:68:81:05:67:9D:79:C4:E0:D3
X509v3 Authority Key Identifier:
keyid:13:EB:7B:7D:F8:35:B1:13:AB:B3:F6:26:F6:20:3F:EE:97:B1:99:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-t7ffg1sROrs_Ym9iA_7pexmSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/661d4e-cd6a-477f-919c-81c716f5bca2/1/F2hxjUeYTxmHr4NogQVnnXnE4NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/661d4e-cd6a-477f-919c-81c716f5bca2/1/E-t7ffg1sROrs_Ym9iA_7pexmSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.84.0/22
193.46.205.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e6:e6:ac:eb:87:ce:7f:df:92:b6:38:8d:29:68:80:c2:e0:
e7:5c:45:c1:18:e7:81:e7:43:54:a0:b8:56:ce:21:02:f6:1f:
f8:8e:d0:74:c1:91:8b:89:b6:bc:9e:85:22:1e:45:43:5a:99:
ce:b3:b5:ff:ca:a5:f4:d6:fc:40:a0:64:7e:98:06:d4:3e:5d:
0a:59:35:d2:b7:22:68:7e:a5:55:bd:22:e4:43:aa:bf:78:03:
10:19:79:4d:bf:1d:82:e2:77:a7:52:25:73:60:ac:d2:6c:3d:
c6:7e:37:de:f7:62:48:14:f5:c7:3d:4e:0b:a4:a9:f6:cd:e3:
7f:1d:34:b1:56:69:d1:5b:82:b6:c0:96:37:eb:79:af:e1:ba:
dd:39:41:cf:fe:6f:84:99:82:ad:16:ae:d8:a4:84:24:ac:a8:
5f:22:34:d1:ad:89:70:99:aa:2d:96:c5:dc:f1:c5:a2:75:86:
84:5e:ff:54:90:1d:16:b4:41:b8:f5:01:f2:36:0f:fa:6c:7f:
51:d8:f7:cc:b4:1d:67:0e:56:87:c7:80:bf:93:8e:5a:ba:ce:
ca:19:42:63:9e:ba:70:3d:3d:23:b9:8b:af:73:1e:42:d5:1f:
05:b7:3b:fb:3e:d0:dc:40:48:36:54:67:d0:0e:35:f3:b0:6a:
46:44:1f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:18:39 2025 by rpki-client