Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/pbH7na6x3PihlXSdiqgjyN7bNbQ.roa
File: pbH7na6x3PihlXSdiqgjyN7bNbQ.roa (raw, json)
Hash identifier: Zo+Y4nMJ0KXyOK5fy7TdLVaHMEXGkVt7DrvemxPdMkw=
Subject key identifier: A5:B1:FB:9D:AE:B1:DC:F8:A1:95:74:9D:8A:A8:23:C8:DE:DB:35:B4
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018CCA2A3157EB8AB2A58CBCA4A14E0B3906
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/pbH7na6x3PihlXSdiqgjyN7bNbQ.roa
Signing time: Tue 02 Jan 2024 12:33:31 +0000
ROA not before: Tue 02 Jan 2024 12:33:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 185.65.61.0/24 maxlen: 24
185.65.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:31:57:eb:8a:b2:a5:8c:bc:a4:a1:4e:0b:39:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 2 12:33:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5b1fb9daeb1dcf8a195749d8aa823c8dedb35b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bf:14:b5:48:70:f7:dc:39:a8:a8:4f:5c:8d:
bb:b1:46:0b:22:39:b2:c8:d7:4a:c5:13:e6:ae:11:
3a:7c:6f:e6:6e:ed:ff:25:9d:a7:96:95:ff:b7:f4:
74:b1:9e:8d:6c:39:37:1f:9e:ed:0e:51:02:6a:19:
1f:87:91:1c:d8:8c:bb:30:95:48:c9:9c:6a:a9:1a:
a6:0d:81:6c:05:ee:fb:58:28:64:f5:13:8f:92:d0:
22:7b:27:e6:25:08:18:63:eb:bf:2d:5b:04:58:00:
86:5d:2e:a8:65:6b:46:3f:24:ad:e4:1b:a2:98:4d:
9c:f1:16:9c:bd:d2:12:ee:db:7b:f9:33:d9:ab:cd:
85:61:ae:35:f8:37:f8:81:2d:d4:e1:64:fa:ca:21:
f0:44:bc:d3:f5:eb:46:68:85:08:27:74:62:0f:a0:
dc:a8:ec:ed:24:6a:9b:04:e1:66:f4:8a:0e:49:35:
9a:c4:7d:d4:6b:a9:3e:0b:78:2d:6d:c5:95:f6:95:
c5:98:40:2c:ca:4d:20:fd:a3:bf:75:88:54:80:c4:
75:75:dd:70:6a:0c:78:e3:b6:a0:33:01:91:ae:f7:
41:7b:1f:0a:18:35:e0:fd:d9:b2:8e:6e:4e:53:3a:
46:67:95:a4:8a:ee:3d:88:c3:f8:d6:87:f4:dd:97:
6f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B1:FB:9D:AE:B1:DC:F8:A1:95:74:9D:8A:A8:23:C8:DE:DB:35:B4
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/pbH7na6x3PihlXSdiqgjyN7bNbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.60.0/23
Signature Algorithm: sha256WithRSAEncryption
89:63:b8:be:2f:bf:00:d2:fa:1a:61:d3:b0:a8:e6:21:20:34:
c6:2e:24:ea:54:f2:8e:9a:2f:eb:0f:c5:e8:fb:c5:c8:4c:fb:
0d:de:a6:a8:4c:e8:a5:d2:ec:0d:26:90:79:11:20:6d:f3:13:
82:7e:b7:5a:f5:9d:11:37:4e:b3:50:8e:e6:18:e5:12:de:d0:
6d:85:35:45:8c:34:95:fa:e9:f6:41:75:c5:1e:43:b1:f7:a3:
a1:a4:3d:d4:71:13:b2:1e:dd:f7:38:a7:b6:70:ab:e9:da:ca:
59:ec:5c:8c:d3:ca:cf:a3:4c:7d:a8:d1:ef:f8:51:49:84:ec:
b8:20:3a:c8:de:93:05:16:37:9e:1b:b9:df:19:a6:59:69:f7:
b6:18:8f:62:a9:b9:d8:2b:36:38:20:c8:c4:97:da:e1:08:ba:
86:0e:9d:9e:f4:3f:97:3e:d5:fe:f4:c0:37:2d:b7:c1:84:8a:
26:79:8a:d3:6a:97:ad:d8:1e:85:ce:ce:bf:aa:73:e2:6f:ad:
f2:2e:c4:53:95:11:08:59:d3:9c:1e:88:4c:7d:16:64:30:50:
39:75:5f:61:c6:dd:cc:f7:43:89:6d:a9:0d:c3:5b:6a:3b:e4:
dc:a4:1b:9e:35:3f:aa:04:de:50:85:f9:9b:54:03:9e:0a:71:
34:86:9f:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKjFX64qypYy8pKFOCzkGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjQwMTAyMTIzMzMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWIxZmI5ZGFlYjFkY2Y4YTE5NTc0OWQ4YWE4MjNjOGRlZGIzNWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg78UtUhw99w5qKhPXI27sUYLIjmy
yNdKxRPmrhE6fG/mbu3/JZ2nlpX/t/R0sZ6NbDk3H57tDlECahkfh5Ec2Iy7MJVI
yZxqqRqmDYFsBe77WChk9ROPktAieyfmJQgYY+u/LVsEWACGXS6oZWtGPySt5Bui
mE2c8RacvdIS7tt7+TPZq82FYa41+Df4gS3U4WT6yiHwRLzT9etGaIUIJ3RiD6Dc
qOztJGqbBOFm9IoOSTWaxH3Ua6k+C3gtbcWV9pXFmEAsyk0g/aO/dYhUgMR1dd1w
agx447agMwGRrvdBex8KGDXg/dmyjm5OUzpGZ5Wkiu49iMP41of03ZdvXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKWx+52usdz4oZV0nYqoI8je2zW0MB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvcGJIN25hNngzUGlobFhTZGlxZ2p5TjdiTmJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuUE8MA0G
CSqGSIb3DQEBCwUAA4IBAQCJY7i+L78A0voaYdOwqOYhIDTGLiTqVPKOmi/rD8Xo
+8XITPsN3qaoTOil0uwNJpB5ESBt8xOCfrda9Z0RN06zUI7mGOUS3tBthTVFjDSV
+un2QXXFHkOx96OhpD3UcROyHt33OKe2cKvp2spZ7FyM08rPo0x9qNHv+FFJhOy4
IDrI3pMFFjeeG7nfGaZZafe2GI9iqbnYKzY4IMjEl9rhCLqGDp2e9D+XPtX+9MA3
LbfBhIomeYrTapet2B6Fzs6/qnPib63yLsRTlREIWdOcHohMfRZkMFA5dV9hxt3M
90OJbakNw1tqO+TcpBueNT+qBN5QhfmbVAOeCnE0hp9e
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:29 2025 by rpki-client