Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/429506-cc55-4c7f-a756-416a61c3d234/1/SuWSrrJ59Ff260G4UuPorsGY0zU.roa
File: SuWSrrJ59Ff260G4UuPorsGY0zU.roa (raw, json)
Hash identifier: OmR1KTSKYCMGCSuRFeGEaOR8zYDsmOgFGXKd9yNTp0g=
Subject key identifier: 4A:E5:92:AE:B2:79:F4:57:F6:EB:41:B8:52:E3:E8:AE:C1:98:D3:35
Certificate issuer: /CN=4ac5193d178a3ac7359c6e9cafcb3ca03129fd3a
Certificate serial: 014C02FB
Authority key identifier: 4A:C5:19:3D:17:8A:3A:C7:35:9C:6E:9C:AF:CB:3C:A0:31:29:FD:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsUZPReKOsc1nG6cr8s8oDEp_To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/429506-cc55-4c7f-a756-416a61c3d234/1/SuWSrrJ59Ff260G4UuPorsGY0zU.roa
Signing time: Sat 01 Jan 2022 05:57:11 +0000
ROA not before: Sat 01 Jan 2022 05:57:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 185.128.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21758715 (0x14c02fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac5193d178a3ac7359c6e9cafcb3ca03129fd3a
Validity
Not Before: Jan 1 05:57:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ae592aeb279f457f6eb41b852e3e8aec198d335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:39:f3:1e:bf:2e:69:08:c5:a4:32:7e:20:6c:
fc:6e:0d:64:0b:b6:08:12:71:d6:ec:35:34:19:a9:
5b:42:5c:c8:f1:8a:ff:ed:fb:38:52:ec:fe:25:7e:
33:97:3d:d2:12:98:4d:16:d2:0d:25:8b:a1:0a:47:
9d:26:53:d0:c6:a9:42:cd:4e:8d:ea:c0:ad:34:cd:
fc:ab:3c:74:f1:7e:1c:24:a9:f7:57:2c:d7:d9:51:
ac:5d:c5:df:56:7c:03:8d:99:75:f6:69:c4:36:5a:
fc:e9:94:5d:11:e8:50:e1:67:e6:71:a6:de:da:c8:
06:23:c2:e8:88:2c:f4:c5:52:83:17:30:ef:39:a3:
5a:01:f8:df:64:3d:7a:b5:a3:77:11:d3:29:b2:78:
a5:c1:cf:52:8b:7d:61:a4:53:6c:be:ff:15:52:8b:
bc:3e:6a:25:2a:45:3b:99:67:d2:c4:a6:62:0d:e9:
1d:1a:4d:2e:db:ef:3c:28:09:4f:6a:b6:12:69:0c:
b7:7a:07:b7:da:a9:50:4a:b4:2d:27:2b:ea:19:9c:
60:15:f5:f6:cd:f7:5d:86:86:9a:83:95:34:40:70:
e2:30:89:b7:95:91:ff:33:d6:d7:65:94:e4:21:6c:
35:a8:0d:85:5f:b5:88:cb:fc:09:7e:c7:f6:37:fe:
fa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E5:92:AE:B2:79:F4:57:F6:EB:41:B8:52:E3:E8:AE:C1:98:D3:35
X509v3 Authority Key Identifier:
keyid:4A:C5:19:3D:17:8A:3A:C7:35:9C:6E:9C:AF:CB:3C:A0:31:29:FD:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsUZPReKOsc1nG6cr8s8oDEp_To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/429506-cc55-4c7f-a756-416a61c3d234/1/SuWSrrJ59Ff260G4UuPorsGY0zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/429506-cc55-4c7f-a756-416a61c3d234/1/SsUZPReKOsc1nG6cr8s8oDEp_To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.9.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:7e:b4:1e:47:45:97:ae:3c:92:d2:d5:3a:80:0f:e2:56:82:
a7:97:3c:b3:e4:72:35:14:6b:2e:b9:c3:9f:52:9f:72:ca:eb:
51:2c:67:5f:b3:50:0f:c1:ae:76:b5:37:51:22:2e:0d:a5:4f:
74:86:29:13:42:66:15:37:d2:91:0e:d2:e1:0f:0b:e9:d9:98:
a6:2a:3d:a7:fb:92:23:b0:25:d0:8b:5a:b7:3e:43:fc:d5:f4:
51:f6:fa:2e:b6:64:cf:96:b1:1f:44:e3:5e:93:dd:48:08:20:
09:65:54:9a:26:48:8b:cc:b8:0a:83:eb:2d:73:6f:cf:0c:1d:
8f:e4:65:c2:3c:1c:d8:f2:2d:be:93:c7:21:5f:33:09:7e:75:
0c:ed:ee:b6:d0:2c:9c:ad:62:3b:d2:75:c9:1b:c3:f2:38:71:
3f:b4:41:69:a1:ff:e0:2a:49:c7:99:b4:25:e6:c9:6f:e2:37:
8a:18:1c:ff:3a:31:f7:b0:a1:0a:51:7d:19:3d:52:86:11:77:
70:63:2a:48:9c:76:3b:12:a1:fd:45:b4:14:51:d5:c3:0d:6e:
e7:b1:36:c2:ed:89:a2:60:df:eb:b8:fc:af:42:a1:57:b1:64:
1e:e3:3b:98:cd:80:fd:43:15:72:cf:be:88:72:0e:24:0a:78:
79:3b:d7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:38:47 2025 by rpki-client