Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/fJsTGq6uakoiJ0dwxu_7stP0qrM.roa
File: fJsTGq6uakoiJ0dwxu_7stP0qrM.roa (raw, json)
Hash identifier: MoPxKioiLed+eXmn0AgedAbSRVyzh3BZ35NDQ3cs6II=
Subject key identifier: 7C:9B:13:1A:AE:AE:6A:4A:22:27:47:70:C6:EF:FB:B2:D3:F4:AA:B3
Certificate issuer: /CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Certificate serial: 019424B3F3EABAD77EA3B4A81135E8B87FF2
Authority key identifier: 20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/fJsTGq6uakoiJ0dwxu_7stP0qrM.roa
Signing time: Thu 02 Jan 2025 01:49:20 +0000
ROA not before: Thu 02 Jan 2025 01:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203402
IP address blocks: 185.134.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f3:ea:ba:d7:7e:a3:b4:a8:11:35:e8:b8:7f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Validity
Not Before: Jan 2 01:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c9b131aaeae6a4a22274770c6effbb2d3f4aab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:42:eb:8d:90:21:2c:81:65:a9:e6:7f:f7:
2e:a5:80:bf:fc:81:c6:c4:aa:12:09:5e:7e:b4:ec:
bc:aa:76:a5:e6:31:81:94:7e:31:b8:0b:85:89:94:
97:00:f8:fe:ae:0a:36:2c:8c:8c:49:89:ee:17:02:
f6:86:ca:fb:06:dc:eb:d2:0e:5b:6c:ff:38:3d:83:
a6:16:0e:3e:f8:34:43:58:12:4a:2e:d9:b0:31:1c:
8e:28:00:66:c6:bf:3f:fe:22:cd:a6:94:af:c0:e2:
d2:63:a6:7f:08:da:7b:00:5e:cf:2b:bd:45:93:d8:
ab:7a:40:9e:ef:01:e1:59:d3:e5:a6:d2:68:af:85:
8f:ec:87:e3:10:2a:d2:d0:78:6f:7e:f0:f6:b0:d8:
4a:61:a9:68:28:ca:c6:6f:a1:65:c2:d2:38:15:bf:
2c:99:68:b9:62:26:4d:77:83:76:06:30:c2:7d:18:
d4:b4:45:3a:27:5c:91:2a:f2:11:ae:ef:f6:82:27:
07:a6:10:64:e0:6e:93:a6:b2:99:83:82:6b:65:ca:
f0:46:ba:d4:0b:8b:f5:a0:a4:d8:6c:d9:b5:49:34:
12:86:d7:cb:5d:6d:55:5e:8f:ad:58:6f:e5:f7:31:
8f:16:91:36:68:78:ad:8a:94:90:df:fa:d8:37:b7:
86:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9B:13:1A:AE:AE:6A:4A:22:27:47:70:C6:EF:FB:B2:D3:F4:AA:B3
X509v3 Authority Key Identifier:
keyid:20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/fJsTGq6uakoiJ0dwxu_7stP0qrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.116.0/22
Signature Algorithm: sha256WithRSAEncryption
41:d6:5c:2e:6c:25:45:a5:cb:1c:b1:72:c2:7e:93:97:e8:16:
7f:bc:66:cf:2b:30:95:f7:5d:df:df:d4:0f:57:86:13:32:f9:
33:75:92:a0:7f:8c:b4:be:06:8a:22:52:a0:80:95:06:56:02:
60:23:b8:88:78:55:b2:60:4f:c4:aa:81:f5:57:d9:d8:f3:61:
6d:ee:48:11:16:10:c3:36:e6:8a:94:57:3c:8e:00:00:9d:c6:
9c:6e:dd:e1:73:9a:e3:f8:80:4c:ae:17:84:d3:9e:23:af:96:
90:9d:36:d9:69:da:0d:5b:4f:fa:e9:db:9a:07:80:d8:63:1c:
26:bd:30:81:65:46:21:5e:03:cb:33:8b:de:39:ba:47:e5:72:
d8:61:bd:6f:b1:d2:5f:a7:ac:37:14:a1:ed:aa:e8:bf:20:a5:
1e:36:64:81:0b:7b:f4:2d:ae:a1:63:f2:b8:84:ae:7d:6d:cb:
32:ad:ad:f0:ec:81:e6:86:f6:6e:0d:d8:f7:a6:0e:4b:34:62:
a9:3d:4b:a7:ce:eb:5b:ef:99:20:79:3d:71:6c:2e:d1:fb:d4:
53:5c:0f:05:75:27:91:98:ab:a7:97:06:e1:27:92:6f:55:0b:
af:f0:b2:c7:3a:7e:a9:6b:17:b7:b8:6a:d4:62:b5:4a:7d:9c:
50:75:5e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:07:11 2025 by rpki-client