Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/1-q3Sc_aFuf3HEfZnJlmO5IobYdI.roa
File: 1-q3Sc_aFuf3HEfZnJlmO5IobYdI.roa (raw, json)
Hash identifier: 1ZydJMw0C7UeG9c7OwbN/uc3B58dbwLgrfGBkI/dEhg=
Subject key identifier: FA:AD:D2:73:F6:85:B9:FD:C7:11:F6:67:26:59:8E:E4:8A:1B:61:D2
Certificate issuer: /CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
Certificate serial: 0194221FE4BCBD623F6FC085F929E5AEE768
Authority key identifier: 82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/1-q3Sc_aFuf3HEfZnJlmO5IobYdI.roa
Signing time: Wed 01 Jan 2025 13:48:23 +0000
ROA not before: Wed 01 Jan 2025 13:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50055
IP address blocks: 185.136.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e4:bc:bd:62:3f:6f:c0:85:f9:29:e5:ae:e7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
Validity
Not Before: Jan 1 13:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=faadd273f685b9fdc711f66726598ee48a1b61d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4d:65:7a:2b:ff:db:03:cd:c9:55:e2:ca:11:
a7:ff:8f:07:7e:5b:90:c7:ca:d5:c8:18:7d:90:33:
62:07:3b:15:4e:f1:43:1a:38:be:60:7b:6c:33:2b:
33:eb:29:27:9c:a3:e6:49:4e:6f:a6:f6:cb:c6:46:
00:3d:f5:35:6e:0d:c9:44:5e:42:f3:8b:00:74:36:
de:70:d5:f7:86:62:25:f6:63:1c:9d:b7:04:32:09:
c3:32:81:c2:8b:db:fb:b0:78:c5:26:52:fd:7f:33:
67:f7:71:dd:8c:a3:e3:f8:3f:0c:11:d8:05:63:97:
1b:77:09:59:e1:e0:32:73:98:df:2d:32:32:9b:d2:
e1:b3:f0:5e:36:b3:58:4e:45:40:ea:49:e0:6a:cd:
83:58:4a:c8:61:91:d9:0d:de:cb:b6:44:87:f9:5d:
0d:07:f5:e8:f5:db:aa:44:85:0a:34:e5:14:62:97:
c7:48:6f:40:26:f0:6a:c7:d4:bf:cf:25:a5:8d:9a:
69:c9:bd:46:1c:a7:25:95:90:69:c3:c5:b3:1d:d5:
20:bc:8d:47:1d:5e:5a:db:c7:1c:6a:39:02:8c:ce:
e8:11:b7:d3:06:dc:b9:f6:79:b0:10:32:47:b5:21:
eb:4d:3c:4a:64:1a:b2:07:49:69:94:ed:d2:ae:c4:
ab:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AD:D2:73:F6:85:B9:FD:C7:11:F6:67:26:59:8E:E4:8A:1B:61:D2
X509v3 Authority Key Identifier:
keyid:82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/1-q3Sc_aFuf3HEfZnJlmO5IobYdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.56.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:db:ff:d8:e4:e3:5e:c9:ef:6c:a6:79:18:ec:b9:66:98:e1:
39:5e:24:78:d0:e0:ac:4e:db:5f:7e:83:1e:25:c3:16:18:77:
f9:e5:ff:06:38:62:dc:26:28:ec:4a:94:e0:36:85:a0:5e:a4:
0d:9c:17:0c:c4:69:bd:84:7b:f8:db:66:09:23:f2:8d:1f:d1:
ea:87:12:64:eb:e4:0e:31:64:8a:63:bd:e0:3d:6f:07:07:eb:
74:22:5b:27:98:7c:44:fc:3f:a6:fe:c8:c0:f2:da:c4:43:f2:
e7:23:4c:02:eb:cc:49:c3:09:e9:9f:64:ca:58:53:c6:a2:19:
50:6c:e6:be:a0:66:f8:3c:fd:54:91:fa:f4:bc:cd:d0:b4:9e:
80:1f:e3:df:07:e3:91:f0:e5:b1:99:38:bb:30:5b:db:1b:d8:
1d:ad:4f:85:4c:3b:00:0f:4e:c3:60:85:4e:37:00:ec:f2:53:
9c:2c:59:17:47:7f:4a:8e:12:e8:1b:9d:f5:c0:30:7d:1a:77:
54:a0:5f:e3:d7:05:30:40:f4:c4:f6:77:b8:61:65:28:15:62:
75:3d:bb:ff:90:7a:e6:12:c7:96:b0:e1:c2:2e:16:33:6d:bc:
16:22:8c:c0:e1:af:c0:e3:bc:44:34:40:a3:db:42:22:08:76:
eb:fb:30:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:27:17 2025 by rpki-client