Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f84d54-564b-42e5-a929-209415b917d4/1/FH0Gnqj2_e3HwqcRRxse7HwdUbI.roa
File: FH0Gnqj2_e3HwqcRRxse7HwdUbI.roa (raw, json)
Hash identifier: LQSBRnFQ+zI72hl59RrqNIlWumNwjW4AlvE1AKeE5Sc=
Subject key identifier: 14:7D:06:9E:A8:F6:FD:ED:C7:C2:A7:11:47:1B:1E:EC:7C:1D:51:B2
Certificate issuer: /CN=4f291acf209af43dd883d4a0a1f6bc89bb86a3b5
Certificate serial: 018572F134C55DF1060D832656D0249C4AE3
Authority key identifier: 4F:29:1A:CF:20:9A:F4:3D:D8:83:D4:A0:A1:F6:BC:89:BB:86:A3:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TykazyCa9D3Yg9Sgofa8ibuGo7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f84d54-564b-42e5-a929-209415b917d4/1/FH0Gnqj2_e3HwqcRRxse7HwdUbI.roa
Signing time: Mon 02 Jan 2023 14:44:48 +0000
ROA not before: Mon 02 Jan 2023 14:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 185.65.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:f1:34:c5:5d:f1:06:0d:83:26:56:d0:24:9c:4a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f291acf209af43dd883d4a0a1f6bc89bb86a3b5
Validity
Not Before: Jan 2 14:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=147d069ea8f6fdedc7c2a711471b1eec7c1d51b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:46:f3:b2:db:50:fc:ce:5e:b2:ec:6e:37:
58:a3:a9:93:73:c6:38:42:80:e2:6d:20:f0:ac:37:
1d:d7:b7:1a:d7:3b:8f:28:98:34:b7:e5:6d:5d:7f:
2b:66:4c:61:29:c5:86:02:75:d4:cc:37:ef:68:30:
e7:25:d9:85:d8:76:c9:18:ba:61:e0:12:cc:c2:5e:
3e:6c:c6:7c:ad:92:06:d4:d3:0c:de:e7:22:bf:96:
0d:b1:28:26:1e:a4:4e:7d:57:aa:6b:78:2b:b3:f7:
39:e2:31:fa:85:33:22:2e:6b:02:a8:a6:6b:b1:c0:
3a:8f:06:f3:dd:7d:c8:4a:35:2f:b4:4d:1d:ef:2c:
81:5b:37:5b:96:f8:ca:0e:a6:4d:15:c0:65:12:b9:
41:e6:e5:38:35:ec:6d:a1:a9:f8:66:48:70:1a:76:
e4:19:7d:68:b4:fc:07:b5:8d:2a:fa:7c:4a:cc:b5:
a5:c1:40:64:03:cc:31:fe:b9:32:c3:e2:73:9c:c6:
03:47:cf:16:d8:01:bd:69:2a:72:bb:f8:1b:ca:7b:
22:f9:86:06:fc:28:ba:01:18:5c:5b:2b:02:a4:04:
66:58:16:98:35:87:55:ff:47:08:76:68:a4:27:bb:
a5:96:2b:2d:df:b0:10:4d:be:3a:6e:de:17:18:45:
0e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7D:06:9E:A8:F6:FD:ED:C7:C2:A7:11:47:1B:1E:EC:7C:1D:51:B2
X509v3 Authority Key Identifier:
keyid:4F:29:1A:CF:20:9A:F4:3D:D8:83:D4:A0:A1:F6:BC:89:BB:86:A3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TykazyCa9D3Yg9Sgofa8ibuGo7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f84d54-564b-42e5-a929-209415b917d4/1/FH0Gnqj2_e3HwqcRRxse7HwdUbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f84d54-564b-42e5-a929-209415b917d4/1/TykazyCa9D3Yg9Sgofa8ibuGo7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.70.0/24
Signature Algorithm: sha256WithRSAEncryption
af:46:92:4b:a8:30:54:79:b7:20:3f:5a:62:dc:2a:a4:de:72:
dd:3d:5a:13:d2:19:a8:ea:f6:b8:06:2a:86:f0:32:64:5d:98:
65:0d:e4:8a:ea:de:54:f9:ec:84:20:a9:21:68:3c:9a:d4:4b:
cb:83:9f:4d:8f:f8:cb:a3:44:5e:79:d0:b0:fd:f3:77:49:00:
10:0a:d7:27:a5:80:27:04:fe:11:be:ef:a5:84:c9:36:cb:72:
9b:67:f4:59:5a:53:8a:0c:8b:8b:7a:96:aa:8c:35:3c:d8:5f:
99:a1:f7:22:30:34:06:43:21:2e:8c:ee:75:7c:dc:8c:8a:1b:
79:bc:2d:c0:5f:f5:d7:74:96:ee:cd:30:19:e9:cb:88:2c:79:
db:8a:f1:0c:56:c7:ca:97:75:25:25:0d:3b:a4:b8:8e:f0:c2:
f3:c9:3a:f0:21:94:ed:7c:3c:0c:4d:ab:a6:46:96:60:f9:9a:
ea:9d:5e:1d:48:2a:e2:7a:7a:25:9c:75:e6:f2:e6:d5:84:f4:
1a:6a:d0:15:c5:32:bd:02:62:f4:5d:9a:3e:a0:fa:7b:97:92:
e7:23:24:2c:31:cc:3d:44:77:20:3f:ac:93:54:06:0d:a4:59:
ed:87:c4:83:c2:95:9b:b9:f5:1a:ff:b8:0d:11:62:9f:4c:a9:
2e:69:b2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:53 2025 by rpki-client