Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/731845-6256-42f2-b6fe-ddb620d49464/1/klZlFsnUKfA-h9WTG_1UlBjkgyQ.roa
File: klZlFsnUKfA-h9WTG_1UlBjkgyQ.roa (raw, json)
Hash identifier: Uu7YMOPa1+jlas3hEj3fGpewMY4Owm6AW2f/RE8pHVk=
Subject key identifier: 92:56:65:16:C9:D4:29:F0:3E:87:D5:93:1B:FD:54:94:18:E4:83:24
Certificate issuer: /CN=22a341129b210765f92b57ccac2ea631528e5f3c
Certificate serial: 0B172DA8
Authority key identifier: 22:A3:41:12:9B:21:07:65:F9:2B:57:CC:AC:2E:A6:31:52:8E:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqNBEpshB2X5K1fMrC6mMVKOXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/731845-6256-42f2-b6fe-ddb620d49464/1/klZlFsnUKfA-h9WTG_1UlBjkgyQ.roa
Signing time: Sat 01 Jan 2022 06:59:40 +0000
ROA not before: Sat 01 Jan 2022 06:59:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204401
IP address blocks: 185.250.52.0/22 maxlen: 24
2a0c:7c0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186068392 (0xb172da8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a341129b210765f92b57ccac2ea631528e5f3c
Validity
Not Before: Jan 1 06:59:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92566516c9d429f03e87d5931bfd549418e48324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:84:38:db:4b:35:8f:c5:0c:96:28:9b:e4:
8f:0f:51:00:a2:54:87:56:f8:59:d4:fe:5d:f3:91:
cf:d3:ca:b1:5b:6d:ca:8e:b1:1f:4c:a0:27:fb:c5:
02:55:ba:dd:25:92:2c:b9:ca:b1:22:5d:b8:2d:c8:
d1:41:b0:03:dc:5d:92:61:e2:6b:e0:e8:b3:0c:b8:
95:dd:0e:ea:3e:00:1d:17:b4:36:44:b9:6b:17:5e:
45:78:f6:11:3f:88:45:00:ae:da:2b:94:d8:4e:98:
74:58:0e:c4:89:3c:77:1d:85:5c:56:da:40:00:11:
fa:43:7d:f9:34:d2:d6:72:6e:65:75:5f:80:9f:05:
f1:c7:93:d6:68:0b:70:ef:e3:f7:00:43:c8:88:d3:
15:9c:a9:a5:e5:4a:0a:4c:e8:96:a4:ae:0e:31:ad:
11:ad:0c:c9:73:5e:f0:2d:77:35:30:80:2e:ed:7d:
81:dc:68:ef:f5:39:f9:6b:3f:67:6d:51:ef:eb:59:
ff:01:30:12:c3:ff:cd:a1:db:98:b8:8a:9a:01:6b:
59:db:64:03:f0:ad:a5:0a:09:d3:19:00:6d:a3:e2:
94:d0:c7:d9:ed:d9:04:4f:69:68:8f:61:a4:dd:47:
30:bb:0c:fd:b0:a3:4f:27:ff:51:ea:46:09:4a:c4:
d8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:56:65:16:C9:D4:29:F0:3E:87:D5:93:1B:FD:54:94:18:E4:83:24
X509v3 Authority Key Identifier:
keyid:22:A3:41:12:9B:21:07:65:F9:2B:57:CC:AC:2E:A6:31:52:8E:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqNBEpshB2X5K1fMrC6mMVKOXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/731845-6256-42f2-b6fe-ddb620d49464/1/klZlFsnUKfA-h9WTG_1UlBjkgyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/731845-6256-42f2-b6fe-ddb620d49464/1/IqNBEpshB2X5K1fMrC6mMVKOXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.52.0/22
IPv6:
2a0c:7c0::/29
Signature Algorithm: sha256WithRSAEncryption
b4:9d:98:77:85:36:97:12:3a:1f:00:e1:2c:c2:43:af:87:98:
72:f4:34:5d:24:45:ad:af:32:cb:56:07:d4:14:dd:47:80:bc:
66:39:ff:0c:e8:6c:db:65:67:4e:60:cd:c9:fa:c6:11:cb:d0:
c8:cf:ce:7e:88:1c:49:1b:ee:5d:05:25:c7:9f:30:d5:8b:b1:
9a:37:4e:30:f9:02:df:08:0f:7a:68:cd:d4:df:eb:c5:82:96:
00:ef:50:82:c8:c8:af:ef:87:02:27:fc:0d:80:0f:49:0c:85:
2e:78:f1:99:05:f9:cf:9f:44:3d:71:11:d0:21:c2:e2:69:8d:
a9:a2:99:ec:d7:fb:55:cd:1d:4b:c5:6e:f8:57:b3:36:5c:24:
bc:0d:fd:96:68:c1:02:f6:d1:6b:17:54:08:36:d9:f7:d7:b9:
a7:fe:97:cb:45:8b:77:d5:71:08:b5:cd:fb:e9:9d:85:5c:00:
0a:d2:55:6e:c4:26:6e:bd:e8:55:c8:23:10:56:5b:d5:9b:e6:
6e:61:8f:c0:6f:4e:fb:99:a0:84:21:3e:b4:26:8e:92:14:2b:
58:4a:82:d2:1b:ff:ad:94:5f:dc:e1:bd:0a:6d:3f:7c:6e:01:
32:05:ff:47:82:c6:8f:e1:54:b6:ba:98:a5:b2:58:cd:d2:f7:
92:ce:15:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 20:35:50 2025 by rpki-client