Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f9c92d-2cfd-4962-8f26-3acaf1425b9a/1/9YsEsvpUnefLaStkIHmYIalAe-g.roa
File: 9YsEsvpUnefLaStkIHmYIalAe-g.roa (raw, json)
Hash identifier: I4Glin0cjaN9OWKI4FgCPY+w478ddoxudExXOv2dR3g=
Subject key identifier: F5:8B:04:B2:FA:54:9D:E7:CB:69:2B:64:20:79:98:21:A9:40:7B:E8
Certificate issuer: /CN=23d895115bd860fe613834e82be425cb04226878
Certificate serial: 01856CF85D88B91142CDCCA5289519816FE9
Authority key identifier: 23:D8:95:11:5B:D8:60:FE:61:38:34:E8:2B:E4:25:CB:04:22:68:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9iVEVvYYP5hODToK-QlywQiaHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f9c92d-2cfd-4962-8f26-3acaf1425b9a/1/9YsEsvpUnefLaStkIHmYIalAe-g.roa
Signing time: Sun 01 Jan 2023 10:54:54 +0000
ROA not before: Sun 01 Jan 2023 10:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24904
IP address blocks: 185.210.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:5d:88:b9:11:42:cd:cc:a5:28:95:19:81:6f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d895115bd860fe613834e82be425cb04226878
Validity
Not Before: Jan 1 10:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f58b04b2fa549de7cb692b6420799821a9407be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9a:2a:d6:e5:92:b7:f2:5b:9c:11:9f:f9:63:
4d:54:57:61:3f:e3:da:1c:2c:2c:0d:fe:46:1d:5a:
16:9d:a5:14:c1:8b:01:22:ce:5a:7f:f1:12:d5:3b:
c6:a8:ae:d5:42:60:ef:6b:82:a1:02:4f:fd:d1:48:
0a:c7:f3:bc:b4:8d:08:82:45:fe:2f:97:a3:f4:8b:
fd:c6:57:45:66:b5:74:bc:2c:b6:4b:1d:1f:ea:fe:
c0:eb:f8:e3:d2:74:ad:84:02:06:1a:37:d0:2b:7f:
f5:9e:d4:57:c7:53:af:e0:3c:de:7d:5a:03:f6:8a:
24:e9:99:47:a3:73:fa:8c:7a:9d:54:a1:77:6b:b7:
ee:d3:33:36:8f:02:5f:db:90:32:2c:99:a5:d8:d5:
d0:42:32:77:62:22:52:ef:4e:f9:30:ee:5d:bd:6e:
9c:c8:b8:fd:59:71:fe:91:84:39:37:c5:4c:7d:2d:
1d:7f:a0:78:90:4a:47:f3:9f:5a:de:34:22:a9:46:
c1:38:30:ce:eb:0a:d6:e4:ee:e9:04:c8:37:f6:7b:
36:01:57:b1:2d:c2:3b:c4:8b:dd:49:d7:58:15:51:
99:95:4c:0e:ec:53:47:69:9c:5f:d2:4c:a6:6f:2e:
45:f0:4d:98:b5:59:8e:5e:44:e5:ea:93:ce:30:f1:
bf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8B:04:B2:FA:54:9D:E7:CB:69:2B:64:20:79:98:21:A9:40:7B:E8
X509v3 Authority Key Identifier:
keyid:23:D8:95:11:5B:D8:60:FE:61:38:34:E8:2B:E4:25:CB:04:22:68:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9iVEVvYYP5hODToK-QlywQiaHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f9c92d-2cfd-4962-8f26-3acaf1425b9a/1/9YsEsvpUnefLaStkIHmYIalAe-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f9c92d-2cfd-4962-8f26-3acaf1425b9a/1/I9iVEVvYYP5hODToK-QlywQiaHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.108.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:48:a5:13:bf:75:db:a7:d2:de:9e:c4:d5:39:ca:f1:96:1c:
0e:cd:78:a2:73:13:23:df:42:cd:e0:f4:d2:8d:f8:af:ef:a2:
e3:0b:b2:26:29:4d:0b:4b:b2:02:c4:5b:b5:1c:35:fc:2b:ee:
b4:e4:49:4a:80:1e:06:32:57:4f:86:21:60:60:af:46:16:09:
95:a5:37:f7:fa:fa:a9:82:1d:84:82:aa:f1:19:1c:ba:09:45:
91:a8:d4:3a:1f:59:eb:e5:4e:16:f8:12:86:2c:a8:9b:f2:a0:
d1:33:08:81:3c:80:dd:af:da:45:57:19:74:09:69:bb:17:9e:
0d:18:b6:85:77:c1:cd:5e:e7:8d:fc:93:57:17:67:e7:82:5d:
99:d5:b5:01:3f:b4:51:b5:97:50:5e:36:1b:c2:4f:c6:51:0e:
bb:95:0e:ed:a4:26:b6:6e:71:27:1f:6b:64:20:d7:2c:f1:ba:
f6:22:0f:3f:5e:d3:fd:20:b3:c4:64:fb:14:20:54:eb:ff:18:
c1:12:ea:6c:5f:7e:4b:b1:16:c5:85:cc:11:92:cf:96:10:9a:
c1:7a:0c:94:35:4e:c6:c7:d5:70:04:d9:77:c0:13:71:7f:4c:
75:4f:3c:c9:df:e2:b9:cc:d7:ee:65:f7:cf:de:6f:f3:4b:b5:
ab:ad:ed:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:30:10 2025 by rpki-client