Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/zHOImGHCIMY4ta3Osr-kuyHqbco.roa
File: zHOImGHCIMY4ta3Osr-kuyHqbco.roa (raw, json)
Hash identifier: vCjvi7HBqAwwYALjlFQ3nqzTzOPvMILXPXoYubLKfzc=
Subject key identifier: CC:73:88:98:61:C2:20:C6:38:B5:AD:CE:B2:BF:A4:BB:21:EA:6D:CA
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 0184612E70FF6B6DAFD7F48DC45BAFE76AD3
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/zHOImGHCIMY4ta3Osr-kuyHqbco.roa
Signing time: Thu 10 Nov 2022 10:55:44 +0000
ROA not before: Thu 10 Nov 2022 10:55:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 185.227.218.0/24 maxlen: 24
185.227.217.0/24 maxlen: 24
185.227.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:61:2e:70:ff:6b:6d:af:d7:f4:8d:c4:5b:af:e7:6a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Nov 10 10:55:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc73889861c220c638b5adceb2bfa4bb21ea6dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:45:f8:03:3e:18:8f:4e:2e:b0:b6:f2:65:
64:6c:7f:bd:4f:96:bf:6e:c1:3c:86:c1:f0:d0:50:
1a:a3:14:5a:45:55:42:3f:f9:26:63:19:a0:41:aa:
28:d8:d9:b0:6f:3f:a8:62:ca:c2:28:a7:1b:3f:ab:
0f:12:d9:c7:70:6f:7d:4f:4d:a5:3d:58:16:19:06:
b4:8e:5d:c2:6f:6c:d4:23:6e:cf:07:b7:cc:2e:a8:
78:9f:3d:fa:9b:5f:99:b0:4c:48:31:00:17:9d:a3:
ff:6c:8c:e8:c7:81:09:2f:28:40:5f:a9:22:f6:13:
33:fa:0b:27:16:e0:81:2f:c3:b5:66:ca:4c:32:19:
af:17:55:0c:8e:3e:ee:4f:47:8e:d1:68:36:ab:7f:
a2:4b:8f:18:1e:5a:cd:6c:64:2a:d7:6f:cf:36:06:
3a:83:56:b5:75:06:47:94:2a:12:16:84:86:8b:95:
43:88:82:82:36:14:b3:c9:02:f0:40:fb:18:9f:03:
c0:84:e3:89:1e:c2:d5:42:74:fa:19:33:7b:65:35:
ef:c6:61:45:a7:ab:a8:7e:86:ce:fe:af:0b:00:b0:
f8:7b:fc:6d:e9:98:89:6c:9a:eb:e1:21:0f:54:06:
ae:f2:00:69:f4:b7:98:b9:ff:74:08:0e:82:db:73:
05:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:73:88:98:61:C2:20:C6:38:B5:AD:CE:B2:BF:A4:BB:21:EA:6D:CA
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/zHOImGHCIMY4ta3Osr-kuyHqbco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.216.0-185.227.218.255
Signature Algorithm: sha256WithRSAEncryption
2e:68:c6:da:5d:4b:69:b6:84:2c:39:eb:11:33:26:68:6d:b1:
0b:43:8c:1c:b1:ed:1e:10:18:af:b7:8a:ac:c4:1b:9b:4e:f3:
6e:d0:cc:24:8b:3e:e3:06:f6:39:60:5b:35:31:ba:23:d7:f8:
5f:67:ce:c4:5f:ad:e7:32:99:37:66:68:ab:74:1d:8a:8c:a2:
48:7b:e7:46:5d:32:4a:61:d0:47:07:a3:90:8d:e2:80:11:62:
36:89:d3:14:c2:7e:f8:12:43:bb:1e:a0:b4:9e:ee:d8:0b:db:
83:36:bf:c5:79:5b:8f:13:98:d7:6d:5d:d4:2a:2e:a1:af:4e:
f1:64:1c:52:35:df:fc:5a:04:a9:ab:31:cb:2d:5d:33:84:8e:
df:ce:85:fb:e9:8c:ff:8c:7f:e6:4e:32:c1:9d:0b:41:da:a7:
c9:b9:21:8f:a9:d9:66:c6:b0:6f:6e:6c:62:84:d5:da:4f:3c:
cc:e0:d6:15:00:d7:87:3c:66:59:d8:e8:cd:2b:fb:01:a9:60:
62:d4:62:6f:8c:f9:7a:2a:0d:14:de:60:02:b4:b3:af:6d:bb:
62:50:4e:54:8d:01:c4:3a:16:b9:c9:53:f5:f0:ba:fe:06:be:
a0:0b:b9:3f:1a:07:5e:38:75:39:9d:81:f5:f7:9e:dc:3b:19:
a2:ca:eb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:02:28 2025 by rpki-client