Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/idFudzry5uEQ1kZ-l2ZVwKDwRx0.roa
File: idFudzry5uEQ1kZ-l2ZVwKDwRx0.roa (raw, json)
Hash identifier: mf8DtrJzTbvMINNPnnbh4SE32xbPe4I2JgipRdl2V/8=
Subject key identifier: 89:D1:6E:77:3A:F2:E6:E1:10:D6:46:7E:97:66:55:C0:A0:F0:47:1D
Certificate issuer: /CN=464528d9080c665db0551d8ad8b0f71f7bb76996
Certificate serial: 06D04C7F
Authority key identifier: 46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/idFudzry5uEQ1kZ-l2ZVwKDwRx0.roa
Signing time: Sat 01 Jan 2022 16:10:27 +0000
ROA not before: Sat 01 Jan 2022 16:10:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59985
IP address blocks: 185.63.68.0/23 maxlen: 23
185.63.70.0/23 maxlen: 23
2a04:f380::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114314367 (0x6d04c7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464528d9080c665db0551d8ad8b0f71f7bb76996
Validity
Not Before: Jan 1 16:10:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89d16e773af2e6e110d6467e976655c0a0f0471d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6c:df:52:b5:56:69:bd:c7:59:c6:e7:1b:8a:
37:8d:70:30:2a:60:05:28:72:85:e4:4d:6f:d0:f8:
b0:6d:48:41:19:18:98:13:5e:dc:10:a6:6a:b2:c0:
45:2b:6a:e4:45:9f:da:af:81:83:1f:ed:47:db:60:
ab:b6:f4:a8:98:48:9a:33:0e:59:b7:c1:7e:fe:53:
6d:8f:8a:14:f7:07:00:00:9b:ab:fb:fd:e8:fb:b3:
25:83:e1:7a:42:5a:5e:50:74:84:e2:a6:c5:5d:d7:
a3:88:d1:7b:01:60:97:6a:47:ae:2f:3c:f8:18:dc:
2b:52:91:ef:8f:e5:79:5e:e8:18:13:e5:79:5d:8b:
e0:ca:54:05:2c:2f:13:1d:6c:b6:f1:96:1c:13:19:
b6:be:c6:88:0a:f6:35:ba:83:9c:70:17:9e:7a:94:
48:f6:b9:c2:01:35:15:69:30:79:2c:b1:44:22:0d:
2f:a1:af:4e:b8:0a:f3:f9:d9:dc:ec:55:22:80:16:
67:e0:65:02:4e:6a:dd:ed:e2:34:72:8a:4e:95:d6:
a6:a4:d6:1f:22:ca:fa:5d:4c:a4:ab:a1:bb:25:24:
90:d9:9d:62:d9:e0:69:1b:25:66:5f:73:b4:ea:74:
88:c1:8f:fd:c4:f6:da:6c:c2:cd:2d:f5:7b:a8:1e:
9d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D1:6E:77:3A:F2:E6:E1:10:D6:46:7E:97:66:55:C0:A0:F0:47:1D
X509v3 Authority Key Identifier:
keyid:46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/idFudzry5uEQ1kZ-l2ZVwKDwRx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.68.0/22
IPv6:
2a04:f380::/32
Signature Algorithm: sha256WithRSAEncryption
8b:13:41:bc:27:6c:d7:6e:0e:06:67:8c:8d:98:05:60:67:95:
ac:05:cd:de:0e:54:1e:09:7d:b8:6c:00:86:16:82:1f:3e:58:
89:e2:e9:f6:0a:8d:32:b6:1e:c7:62:7c:bb:7c:92:3b:5c:2b:
66:0a:9b:1d:15:cc:e4:14:2d:ea:c6:40:63:4c:aa:65:1b:c5:
f9:95:3b:15:02:98:b0:4e:b2:7e:62:4c:96:f1:6b:5a:e3:ae:
3a:e0:65:bb:77:da:c2:08:b2:c6:8b:05:29:04:78:8e:10:d0:
74:64:f1:a2:13:99:37:52:58:15:d3:e0:84:50:95:70:f7:7f:
7a:29:29:30:1d:21:64:d9:60:a8:b9:67:a3:af:31:83:72:72:
c5:ee:05:d4:f3:e7:e7:09:62:a6:08:97:04:c6:c0:37:55:36:
e0:a6:c3:cf:f7:50:75:f8:94:c9:1b:70:1d:c9:d9:14:fa:ca:
c6:77:48:20:70:89:b2:eb:ea:65:63:29:45:93:b8:12:33:c3:
7d:3e:23:37:3d:47:62:67:af:6e:60:c8:ec:69:4e:cb:d2:3e:
3c:26:d4:0d:55:bf:89:52:6d:be:47:24:5e:1d:e8:b2:4f:4a:
44:05:12:5b:ad:5a:d3:8b:69:88:a6:62:61:d8:e6:7a:30:bc:
96:b9:bb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:44 2025 by rpki-client