Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/irJOAdCymcXEL_I5y5HMwxGgPrw.roa
File: irJOAdCymcXEL_I5y5HMwxGgPrw.roa (raw, json)
Hash identifier: 1u78e0l1zhijOk1qOPwMDQ9v7+FYwc9/h+G9W83H08s=
Subject key identifier: 8A:B2:4E:01:D0:B2:99:C5:C4:2F:F2:39:CB:91:CC:C3:11:A0:3E:BC
Certificate issuer: /CN=fb58566d156e997a34b16fc9c07c207b7e73fb53
Certificate serial: 038FF6FA
Authority key identifier: FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1hWbRVumXo0sW_JwHwge35z-1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/irJOAdCymcXEL_I5y5HMwxGgPrw.roa
Signing time: Sat 01 Jan 2022 11:04:44 +0000
ROA not before: Sat 01 Jan 2022 11:04:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400040
IP address blocks: 185.138.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59766522 (0x38ff6fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb58566d156e997a34b16fc9c07c207b7e73fb53
Validity
Not Before: Jan 1 11:04:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ab24e01d0b299c5c42ff239cb91ccc311a03ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:2c:9f:d6:80:58:46:23:4f:dd:a7:6b:77:
a4:d6:3f:b4:c7:79:10:49:21:a2:82:ac:ca:d4:e4:
96:4a:d0:49:7e:64:07:6e:8b:aa:d0:ff:e7:97:cc:
1d:e8:0f:5e:9a:fa:ee:2c:27:d9:84:bd:85:aa:c5:
ef:2b:f2:53:ed:a2:71:a8:3c:4a:b6:e4:06:2f:4b:
be:b9:5b:86:37:6b:62:2a:61:4a:32:0d:59:5c:58:
21:f5:8a:26:a4:06:77:32:44:a5:d2:a1:55:1e:ad:
7c:c4:ba:43:6c:e9:0c:45:98:be:bf:ad:da:d6:1d:
61:e8:47:42:f0:d9:18:44:5f:bb:aa:26:d6:88:93:
50:33:8a:17:9c:43:52:77:07:a1:6e:2b:98:bd:f5:
29:71:78:28:d7:9e:b8:59:ee:07:2e:25:be:c8:a6:
f2:8e:07:5c:c0:a8:90:64:dd:43:e8:b6:d1:0c:d6:
9e:42:60:3c:4c:d9:c8:a1:85:b0:57:60:b8:c1:0b:
42:08:c2:54:3b:4a:5d:0b:ae:62:bf:48:a8:fb:cd:
26:d4:21:f6:7d:c0:a4:fd:9c:9c:57:59:7e:a6:89:
b3:01:c0:00:5e:f1:61:01:71:7c:66:70:33:64:74:
34:a5:3b:93:79:2b:21:03:6e:b7:ef:d9:f6:e8:ea:
e0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B2:4E:01:D0:B2:99:C5:C4:2F:F2:39:CB:91:CC:C3:11:A0:3E:BC
X509v3 Authority Key Identifier:
keyid:FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1hWbRVumXo0sW_JwHwge35z-1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/irJOAdCymcXEL_I5y5HMwxGgPrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/1-1hWbRVumXo0sW_JwHwge35z-1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.232.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d1:e7:03:65:48:65:8d:36:ac:56:f4:19:f9:2d:e9:95:c8:
9c:90:37:55:e7:b5:7d:af:34:f3:77:41:0c:3a:d1:61:ac:c2:
75:c2:cd:57:fd:8c:6f:5d:61:65:01:0a:6e:73:82:6f:29:e1:
c1:c0:a7:ad:5d:b4:21:a3:cc:d3:01:3d:83:67:fe:a0:85:63:
c2:b5:3d:59:18:c9:33:7d:d9:a5:e2:73:e1:1c:fd:1a:85:41:
73:27:d0:f4:d6:bc:dc:6c:8c:e6:0a:84:f5:5e:a2:fb:a2:18:
60:d5:82:fe:61:a8:7d:24:50:00:d8:c2:3c:c2:6e:51:49:2c:
15:6b:12:5a:47:46:1c:7e:ad:8c:fe:28:d6:d6:d7:b5:0e:59:
b2:53:12:a3:23:33:ff:59:f6:61:c9:f2:db:ce:81:83:c0:e5:
77:57:29:72:7b:c8:3e:ae:df:c1:db:1d:e1:6e:5c:1a:c1:3c:
fc:d8:61:de:0c:1c:2a:62:52:f9:c0:48:d3:26:ab:cb:60:54:
fa:61:e4:1b:ae:f6:ec:8d:0c:12:fc:6f:d5:93:f7:20:ac:37:
9c:19:72:0e:29:05:53:77:85:50:4f:50:1d:3b:dd:1a:e7:cd:
9f:d1:2f:c7:54:83:e4:56:f7:94:1d:e2:b3:cd:47:41:3b:fb:
92:a0:2e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:17:37 2025 by rpki-client