Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e0b657-618f-4636-b860-57e7a69f057f/1/f_In2yBlygzLrMQi38PStkItxZc.roa
File: f_In2yBlygzLrMQi38PStkItxZc.roa (raw, json)
Hash identifier: ALCLKQZf8EAlHpBi1ZWM29xOhwVnnEjrlq8pQt2iYSw=
Subject key identifier: 7F:F2:27:DB:20:65:CA:0C:CB:AC:C4:22:DF:C3:D2:B6:42:2D:C5:97
Certificate issuer: /CN=20ccd0a95005231f15d79294f958ef8d3db3ae99
Certificate serial: 01856C6F33080BDDBA005CD201661469B8E6
Authority key identifier: 20:CC:D0:A9:50:05:23:1F:15:D7:92:94:F9:58:EF:8D:3D:B3:AE:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMzQqVAFIx8V15KU-VjvjT2zrpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e0b657-618f-4636-b860-57e7a69f057f/1/f_In2yBlygzLrMQi38PStkItxZc.roa
Signing time: Sun 01 Jan 2023 08:25:04 +0000
ROA not before: Sun 01 Jan 2023 08:25:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25451
IP address blocks: 185.105.48.0/22 maxlen: 23
2a00:4600::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:33:08:0b:dd:ba:00:5c:d2:01:66:14:69:b8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ccd0a95005231f15d79294f958ef8d3db3ae99
Validity
Not Before: Jan 1 08:25:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ff227db2065ca0ccbacc422dfc3d2b6422dc597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:60:10:51:61:39:15:58:14:b9:f7:af:27:c0:
97:5d:30:61:86:30:75:5a:b8:48:a4:7b:45:ee:57:
3a:72:6e:5b:cc:ee:7f:6e:b6:b9:9f:a4:70:f8:e4:
25:4c:0b:c5:fe:2e:d4:22:93:7e:ab:0a:8e:ce:c1:
01:a4:9f:c3:8f:27:01:b0:6d:95:0f:7d:04:5b:ac:
83:1f:3f:70:1f:c0:f9:16:9d:eb:6b:9d:9e:cf:c9:
d7:e1:83:d4:70:be:d8:41:4d:0c:2d:d4:48:42:b6:
76:84:a2:94:e4:dc:7e:bf:96:4a:8d:89:e0:4a:d5:
3e:63:aa:ca:5e:fd:36:3b:45:45:1f:8c:67:ee:46:
71:e8:c5:70:8f:2e:3c:4d:1a:fe:7d:a8:08:bb:44:
f5:7e:af:f2:32:18:67:77:e9:4e:19:7c:58:0c:15:
2f:d8:3c:7d:30:c8:45:3b:25:be:8f:85:49:46:22:
14:95:12:e6:89:7e:3e:06:d9:e4:f1:46:40:6f:40:
9b:3c:05:a4:24:91:bc:1c:25:1a:1a:1e:6b:6e:82:
30:f0:15:ad:de:b4:d1:2d:21:b5:f5:e4:98:55:c9:
29:7d:3f:af:77:17:69:5f:23:80:f4:87:ad:9e:ba:
e5:dd:71:65:dc:2c:54:44:23:21:b5:94:46:11:cf:
df:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F2:27:DB:20:65:CA:0C:CB:AC:C4:22:DF:C3:D2:B6:42:2D:C5:97
X509v3 Authority Key Identifier:
keyid:20:CC:D0:A9:50:05:23:1F:15:D7:92:94:F9:58:EF:8D:3D:B3:AE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMzQqVAFIx8V15KU-VjvjT2zrpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e0b657-618f-4636-b860-57e7a69f057f/1/f_In2yBlygzLrMQi38PStkItxZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e0b657-618f-4636-b860-57e7a69f057f/1/IMzQqVAFIx8V15KU-VjvjT2zrpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.48.0/22
IPv6:
2a00:4600::/32
Signature Algorithm: sha256WithRSAEncryption
99:1b:9e:92:2b:ad:ce:8c:a6:0f:c9:9c:aa:bc:f4:77:f7:fc:
5a:c7:85:16:11:44:c0:b8:d7:67:e7:12:5c:c4:15:4f:f7:5b:
71:95:b3:16:6e:ad:53:01:a4:d1:d9:36:4e:cd:37:66:1b:ca:
d1:6a:c1:c7:e5:e5:a0:c5:39:75:8d:8c:46:31:87:a8:28:87:
d1:c0:38:21:9c:ed:57:a9:72:34:4d:c0:d4:f1:6c:c7:8e:2b:
a1:45:34:cd:fc:d5:ab:50:fb:58:b7:77:52:3a:81:71:75:58:
80:cd:fe:4f:96:e8:8f:9f:e2:24:9b:f2:1a:23:7f:1e:50:82:
75:38:ee:57:03:3e:01:3c:d1:0c:97:76:cb:fc:c3:36:83:39:
6c:54:9d:e5:9f:02:03:1b:55:42:67:78:71:0f:4c:94:14:5b:
6c:e7:ff:26:71:a5:45:ad:76:50:a5:45:6a:5d:67:5a:6e:11:
c0:0d:9d:8f:b4:f1:db:0a:34:85:8c:44:55:cd:36:f5:ae:48:
28:75:3d:c3:96:43:2b:9d:d9:4a:78:47:e1:93:ed:a2:a5:28:
de:df:d1:8b:cc:d1:8c:a1:b9:9e:26:f6:a2:12:13:e5:16:c8:
21:1e:85:d1:fd:9c:b1:bd:9d:e2:cb:70:9d:6d:30:2b:0c:55:
85:68:c6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:24:15 2025 by rpki-client