Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/28bef5-75d6-421e-a323-47b7c2bc3d02/1/cHgBXWqjX-ZjIcrg1Mqk-GHAEp8.roa
File: cHgBXWqjX-ZjIcrg1Mqk-GHAEp8.roa (raw, json)
Hash identifier: b15D8v6cvxwmOWOLz4FcmTmH0dH5inRbcz29mKQSkac=
Subject key identifier: 70:78:01:5D:6A:A3:5F:E6:63:21:CA:E0:D4:CA:A4:F8:61:C0:12:9F
Certificate issuer: /CN=bef5ce4a1f3b774f4abfad3dd75783ca9e6b98c2
Certificate serial: 02C8077C
Authority key identifier: BE:F5:CE:4A:1F:3B:77:4F:4A:BF:AD:3D:D7:57:83:CA:9E:6B:98:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvXOSh87d09Kv60911eDyp5rmMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/28bef5-75d6-421e-a323-47b7c2bc3d02/1/cHgBXWqjX-ZjIcrg1Mqk-GHAEp8.roa
Signing time: Sat 01 Jan 2022 15:56:59 +0000
ROA not before: Sat 01 Jan 2022 15:56:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8823
IP address blocks: 185.240.72.0/22 maxlen: 22
2a0c:7580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46663548 (0x2c8077c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef5ce4a1f3b774f4abfad3dd75783ca9e6b98c2
Validity
Not Before: Jan 1 15:56:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7078015d6aa35fe66321cae0d4caa4f861c0129f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:41:ea:89:fc:aa:14:fb:f2:4a:01:bf:ac:8a:
75:2b:15:63:18:47:d4:91:bf:7f:b6:3f:0c:cf:ad:
8a:c9:3b:fc:9c:f7:74:4f:43:97:56:e0:95:b5:01:
17:18:f7:61:4f:21:1a:dc:68:39:09:5c:69:72:9b:
28:12:68:51:1b:4f:44:12:27:dd:97:36:14:9b:b5:
62:cf:89:1d:ec:e7:db:c7:65:44:ba:d5:fb:dd:e8:
2a:71:99:38:72:e1:63:82:07:df:1f:11:0d:9f:6f:
f7:a8:ad:eb:f4:bf:0e:8a:7e:91:b4:e4:7d:b2:1c:
2e:67:fd:8e:87:12:78:ad:e6:3c:fd:b1:1d:96:45:
b6:f7:5c:86:f1:1c:21:bb:02:79:84:bf:aa:2e:14:
e6:de:85:9c:1a:dd:fe:da:0b:11:03:cc:ae:a6:db:
ef:53:ec:bd:cf:c8:38:c6:07:da:5d:3d:46:3b:ae:
ea:87:fc:39:b8:ab:be:02:32:1c:30:bd:7f:b9:48:
8b:2e:a0:2e:8a:ff:5f:cc:4d:0d:cc:fc:bc:23:a2:
d3:95:40:e8:06:0a:9c:4d:44:b5:4c:ec:44:2b:88:
f7:71:eb:be:13:e7:01:8c:50:96:23:61:04:d8:8c:
32:78:3b:7a:54:30:ff:2f:b4:c5:fa:6b:7c:14:8a:
1a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:78:01:5D:6A:A3:5F:E6:63:21:CA:E0:D4:CA:A4:F8:61:C0:12:9F
X509v3 Authority Key Identifier:
keyid:BE:F5:CE:4A:1F:3B:77:4F:4A:BF:AD:3D:D7:57:83:CA:9E:6B:98:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvXOSh87d09Kv60911eDyp5rmMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/28bef5-75d6-421e-a323-47b7c2bc3d02/1/cHgBXWqjX-ZjIcrg1Mqk-GHAEp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/28bef5-75d6-421e-a323-47b7c2bc3d02/1/vvXOSh87d09Kv60911eDyp5rmMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.72.0/22
IPv6:
2a0c:7580::/29
Signature Algorithm: sha256WithRSAEncryption
2c:13:96:1e:39:ed:90:84:4d:90:63:a7:71:97:bf:85:08:74:
ea:60:27:01:bf:1c:a0:e2:56:6f:04:67:cc:1a:99:2a:b5:9f:
eb:d5:bd:93:55:8d:8c:57:47:5f:b0:57:3b:2c:05:21:3e:3f:
81:8f:a3:46:db:8e:81:02:fa:e4:1b:fd:8c:a0:41:f6:1f:a2:
84:45:90:64:24:a2:5c:4b:d6:a7:fa:52:4d:6a:80:62:a3:4e:
7c:a3:eb:4d:e0:ee:dd:e2:c9:02:74:5f:ba:9c:1b:35:a7:23:
b1:02:04:20:2f:b5:92:35:ed:62:74:c7:04:2d:1f:b5:38:19:
a1:77:1b:cc:d3:44:c2:57:fd:37:a7:d2:5c:85:85:cb:44:db:
34:7c:40:7d:3b:aa:89:5d:39:15:81:74:b2:3d:ee:22:1d:b7:
f6:65:13:55:9c:55:11:ee:45:73:08:4f:51:00:f9:76:ac:9e:
41:4f:4f:19:8e:53:fc:1b:07:5a:96:67:4c:8b:3a:90:e4:e5:
91:eb:a6:b3:b7:d6:6d:ff:8a:6b:f8:56:b9:38:18:c8:fc:c0:
c1:b7:27:e0:da:38:36:15:a0:82:a6:ea:ae:b7:9f:0c:e5:59:
9c:1e:08:4f:4f:3d:b3:fb:e7:b6:5d:2e:52:73:79:70:4a:4c:
3d:3f:75:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:19 2025 by rpki-client