Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fGZBFjakHHR0N627crzrV78I9x4.roa
File: fGZBFjakHHR0N627crzrV78I9x4.roa (raw, json)
Hash identifier: 8QejLAeJH/T5NxrAequgVIr79geM20xO8vtH4CWNC3s=
Subject key identifier: 7C:66:41:16:36:A4:1C:74:74:37:AD:BB:72:BC:EB:57:BF:08:F7:1E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428249DA2F36CEC548C26ACD59C3ED763
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fGZBFjakHHR0N627crzrV78I9x4.roa
Signing time: Thu 02 Jan 2025 17:51:15 +0000
ROA not before: Thu 02 Jan 2025 17:51:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196945
IP address blocks: 185.221.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:9d:a2:f3:6c:ec:54:8c:26:ac:d5:9c:3e:d7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c66411636a41c747437adbb72bceb57bf08f71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:8c:a9:10:fb:55:cd:75:73:85:75:1e:87:0b:
d0:67:af:08:45:96:34:5f:a2:6c:8f:01:a1:a3:fd:
51:1e:a5:5d:a9:a7:9e:b8:f2:ef:79:bc:39:57:4f:
22:60:f8:11:a1:bc:eb:93:be:11:bf:a3:ae:0c:9a:
4a:10:a3:82:b3:b8:49:24:99:30:ba:b0:91:89:d8:
90:07:42:6f:78:21:14:ce:2f:a5:a7:1c:03:0f:ee:
56:24:57:70:46:04:23:37:33:0d:8a:c4:20:9e:5c:
63:70:e5:68:17:e8:29:2d:96:27:82:65:a6:8d:ab:
5b:c1:20:79:91:6f:ff:a0:f0:1b:f0:e6:df:b0:57:
68:56:35:08:65:59:f3:4f:ea:e0:86:55:a6:f4:42:
31:c9:2e:95:c4:00:a2:23:48:ef:d0:51:02:d7:b7:
3b:ba:97:b6:ea:29:b8:c1:66:8b:3c:f1:43:11:4e:
74:a8:c9:d9:bf:7d:6f:87:26:4a:3c:16:ce:28:07:
84:b2:1e:ab:a0:95:bb:d4:25:f4:33:1e:61:2e:9c:
0e:3f:d8:6d:b4:14:bd:a4:13:eb:f2:da:52:44:d7:
a3:a4:58:56:ef:32:6d:f9:91:a5:bb:f6:cc:c1:e9:
e1:7d:78:d9:27:b3:c6:11:54:bc:21:4c:7e:c3:6a:
55:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:66:41:16:36:A4:1C:74:74:37:AD:BB:72:BC:EB:57:BF:08:F7:1E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fGZBFjakHHR0N627crzrV78I9x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.65.0/24
Signature Algorithm: sha256WithRSAEncryption
40:5b:94:81:aa:89:83:4e:ed:00:9a:49:cd:d9:c1:f3:4c:24:
38:d0:d2:71:0c:13:36:5a:72:c6:bb:b4:be:a9:27:c9:32:1c:
c2:34:e3:1b:af:32:5d:df:57:0a:f1:19:ec:df:f3:cd:26:9e:
41:d3:2b:80:95:61:04:9e:b1:95:e4:c4:6d:ea:f7:d8:45:c1:
c5:d1:60:ce:af:fc:c5:d2:c8:85:ad:55:7b:b5:9d:6b:6c:48:
8b:87:b7:e7:bf:8f:09:2b:fc:9e:e1:39:a8:b7:1a:5c:b9:10:
89:22:1c:2f:75:36:b1:d3:5b:52:cc:96:3f:2a:3a:48:7a:c3:
f9:29:52:a6:a4:6d:33:dd:70:db:9f:48:8a:52:cb:1c:2a:99:
49:25:d7:c1:d4:c0:d0:01:f0:a2:be:85:79:6d:12:e0:2d:7c:
d9:61:cf:1d:9d:6b:fe:8e:85:7c:b1:bd:52:5a:6b:3e:f8:ab:
eb:56:f2:a4:ac:5d:86:a6:35:02:6a:ca:a7:da:7e:4f:00:d8:
bb:7f:ca:42:85:82:bf:e4:70:d9:f4:0c:b8:9d:d1:4a:83:e9:
a6:58:ae:53:09:3a:89:5e:ca:9d:ef:6f:d1:c9:f5:98:23:e4:
bd:eb:d6:e8:ca:06:d3:cf:54:2b:11:c5:9f:b7:99:67:f9:4b:
c5:9e:24:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:46 2025 by rpki-client