Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f84d54-564b-42e5-a929-209415b917d4/1/FxOU4TJKsO1W594YoUaHRZrm8Vo.roa
File: FxOU4TJKsO1W594YoUaHRZrm8Vo.roa (raw, json)
Hash identifier: zClRV0Dgx3z4RXATC+byM8X8BOm8fNdV9hMvnt2Izlg=
Subject key identifier: 17:13:94:E1:32:4A:B0:ED:56:E7:DE:18:A1:46:87:45:9A:E6:F1:5A
Certificate issuer: /CN=4f291acf209af43dd883d4a0a1f6bc89bb86a3b5
Certificate serial: 01BCD57D
Authority key identifier: 4F:29:1A:CF:20:9A:F4:3D:D8:83:D4:A0:A1:F6:BC:89:BB:86:A3:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TykazyCa9D3Yg9Sgofa8ibuGo7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f84d54-564b-42e5-a929-209415b917d4/1/FxOU4TJKsO1W594YoUaHRZrm8Vo.roa
Signing time: Thu 12 May 2022 09:04:13 +0000
ROA not before: Thu 12 May 2022 09:04:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 185.65.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29152637 (0x1bcd57d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f291acf209af43dd883d4a0a1f6bc89bb86a3b5
Validity
Not Before: May 12 09:04:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=171394e1324ab0ed56e7de18a14687459ae6f15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:88:99:1c:77:19:2b:3e:ec:01:ab:c3:3a:29:
91:c1:a7:2b:a5:72:88:1a:ec:fe:02:12:43:ed:c9:
8d:25:40:ea:bf:95:22:ae:6a:d8:a3:30:3f:49:02:
65:fb:78:64:d8:fa:8b:6c:f1:a0:0d:69:58:bd:88:
80:a7:a8:39:e6:99:87:1a:54:a7:50:4c:84:2b:e2:
9f:04:63:4f:22:c9:40:34:ee:b9:4e:73:62:b5:5d:
94:fc:35:f6:5f:dd:61:6b:c5:37:a7:6f:ae:1c:47:
4a:85:16:37:8b:d4:5a:0b:32:8c:a3:3f:60:94:9c:
d4:ae:38:4d:b0:10:76:b2:65:5d:95:86:3d:0c:7f:
a2:eb:75:52:c2:11:8f:de:ef:3e:f0:36:c1:c5:25:
fe:14:40:4b:9a:73:4d:68:f5:fb:6d:1b:be:0f:55:
3d:6a:f7:72:61:20:04:37:e8:3f:b3:61:0f:b4:13:
9a:91:53:1b:39:ee:f4:10:d9:94:94:f0:4b:0f:e6:
70:67:c3:50:e1:86:8a:db:a1:d7:3f:62:25:bf:99:
63:00:21:ef:0a:38:54:cb:ca:26:4f:38:92:ff:95:
89:25:74:50:80:98:6d:7d:e4:b7:a8:b7:f8:0d:0e:
48:71:be:21:e1:66:92:f4:5c:6a:0a:f4:ad:66:99:
3c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:13:94:E1:32:4A:B0:ED:56:E7:DE:18:A1:46:87:45:9A:E6:F1:5A
X509v3 Authority Key Identifier:
keyid:4F:29:1A:CF:20:9A:F4:3D:D8:83:D4:A0:A1:F6:BC:89:BB:86:A3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TykazyCa9D3Yg9Sgofa8ibuGo7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f84d54-564b-42e5-a929-209415b917d4/1/FxOU4TJKsO1W594YoUaHRZrm8Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f84d54-564b-42e5-a929-209415b917d4/1/TykazyCa9D3Yg9Sgofa8ibuGo7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.70.0/24
Signature Algorithm: sha256WithRSAEncryption
19:10:2b:34:f3:21:b5:bc:11:1f:dc:8c:9d:d0:b2:61:1b:96:
a7:1f:50:5c:1a:3c:df:fa:84:06:10:47:02:eb:60:52:59:c9:
d8:b0:b4:01:06:ad:c9:24:d8:c4:5e:92:99:ab:8c:6a:76:eb:
01:8b:8a:1f:ae:76:f4:92:d4:51:98:64:e5:38:d3:45:6d:88:
9a:e9:16:8c:5d:70:5b:3f:28:a3:e5:b1:31:88:84:67:94:a5:
71:49:8a:33:92:0f:44:2f:1b:50:e7:ed:a1:a2:26:28:cd:2a:
c8:93:45:5c:8d:ce:0f:b6:61:96:0d:ff:82:e8:5b:72:7b:75:
cf:93:f0:43:06:8e:0e:c7:c2:93:e7:35:ac:88:ff:cd:a7:88:
e0:ae:2c:e1:0b:98:2b:19:fa:f9:43:32:33:89:28:7b:b5:8e:
fe:55:a3:8a:37:95:ac:f4:c2:e4:02:20:03:bf:85:e2:6b:ad:
67:e8:d1:4c:1e:fe:69:34:3b:bc:e4:35:f2:07:80:61:e1:10:
bd:01:95:eb:c2:b2:4f:04:9a:8d:60:fd:03:66:8a:02:38:a4:
ea:b9:f7:af:8e:bd:6e:ab:53:47:5a:fe:9e:6b:f8:40:78:d9:
cd:ef:52:f0:78:48:1d:d8:d9:a4:8d:97:a0:85:97:74:8d:07:
73:c5:05:20
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAbzVfTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZjI5MWFjZjIwOWFmNDNkZDg4M2Q0YTBhMWY2YmM4OWJiODZhM2I1MB4XDTIyMDUx
MjA5MDQxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTcxMzk0ZTEzMjRh
YjBlZDU2ZTdkZTE4YTE0Njg3NDU5YWU2ZjE1YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMSImRx3GSs+7AGrwzopkcGnK6VyiBrs/gISQ+3JjSVA6r+V
Iq5q2KMwP0kCZft4ZNj6i2zxoA1pWL2IgKeoOeaZhxpUp1BMhCvinwRjTyLJQDTu
uU5zYrVdlPw19l/dYWvFN6dvrhxHSoUWN4vUWgsyjKM/YJSc1K44TbAQdrJlXZWG
PQx/out1UsIRj97vPvA2wcUl/hRAS5pzTWj1+20bvg9VPWr3cmEgBDfoP7NhD7QT
mpFTGznu9BDZlJTwSw/mcGfDUOGGituh1z9iJb+ZYwAh7wo4VMvKJk84kv+ViSV0
UICYbX3kt6i3+A0OSHG+IeFmkvRcagr0rWaZPGsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQXE5ThMkqw7Vbn3hihRodFmubxWjAfBgNVHSMEGDAWgBRPKRrPIJr0PdiD
1KCh9ryJu4ajtTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1R5a2F6eUNhOUQzWWc5U2dvZmE4aWJ1R283VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjEvZjg0ZDU0LTU2NGItNDJlNS1hOTI5LTIwOTQxNWI5MTdkNC8x
L0Z4T1U0VEpLc08xVzU5NFlvVWFIUlpybThWby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEv
Zjg0ZDU0LTU2NGItNDJlNS1hOTI5LTIwOTQxNWI5MTdkNC8xL1R5a2F6eUNhOUQz
WWc5U2dvZmE4aWJ1R283VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlBRjANBgkqhkiG9w0BAQsFAAOC
AQEAGRArNPMhtbwRH9yMndCyYRuWpx9QXBo83/qEBhBHAutgUlnJ2LC0AQatySTY
xF6SmauManbrAYuKH6529JLUUZhk5TjTRW2ImukWjF1wWz8oo+WxMYiEZ5SlcUmK
M5IPRC8bUOftoaImKM0qyJNFXI3OD7Zhlg3/guhbcnt1z5PwQwaODsfCk+c1rIj/
zaeI4K4s4QuYKxn6+UMyM4koe7WO/lWjijeVrPTC5AIgA7+F4mutZ+jRTB7+aTQ7
vOQ18geAYeEQvQGV68KyTwSajWD9A2aKAjik6rn3r469bqtTR1r+nmv4QHjZze9S
8HhIHdjZpI2XoIWXdI0Hc8UFIA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:30 2025 by rpki-client