Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/v3n0-S2cdwcr7ArSkKCGF6tXco4.roa
File: v3n0-S2cdwcr7ArSkKCGF6tXco4.roa (raw, json)
Hash identifier: PkdZAu+dH0hE60FNzWJDL6UqHA8lCk5zKhLWWuvaIYE=
Subject key identifier: BF:79:F4:F9:2D:9C:77:07:2B:EC:0A:D2:90:A0:86:17:AB:57:72:8E
Certificate issuer: /CN=65865968a1d8f4f377865c913af3b9af890d7cce
Certificate serial: 0FA846A1
Authority key identifier: 65:86:59:68:A1:D8:F4:F3:77:86:5C:91:3A:F3:B9:AF:89:0D:7C:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYZZaKHY9PN3hlyROvO5r4kNfM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/v3n0-S2cdwcr7ArSkKCGF6tXco4.roa
Signing time: Sat 01 Jan 2022 02:57:22 +0000
ROA not before: Sat 01 Jan 2022 02:57:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61241
IP address blocks: 185.161.172.0/23 maxlen: 23
2a07:c386::/32 maxlen: 32
2a07:c381::/32 maxlen: 32
2a07:c384::/32 maxlen: 32
2a07:c383::/32 maxlen: 32
2a07:c387::/32 maxlen: 32
2a07:c380::/32 maxlen: 32
2a07:c380:38::/48 maxlen: 48
2a07:c382::/32 maxlen: 32
2a07:c385::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262686369 (0xfa846a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65865968a1d8f4f377865c913af3b9af890d7cce
Validity
Not Before: Jan 1 02:57:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf79f4f92d9c77072bec0ad290a08617ab57728e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:71:52:ec:e8:2f:ee:87:93:e6:7d:50:a2:
2f:e2:61:dd:aa:f1:1e:fe:28:a7:4f:45:1d:49:e4:
7c:0f:95:63:46:5c:a5:3f:be:f4:59:21:07:a4:1c:
a0:31:37:a1:eb:f3:34:53:d9:77:41:75:4a:70:86:
fb:cf:ae:1b:eb:34:5f:f9:08:0d:28:bd:fa:86:3c:
40:b5:d3:f2:19:f0:59:fd:fc:6a:e3:64:1c:bf:f9:
04:e8:45:fa:e3:bc:24:f4:0b:3f:cd:e5:06:e5:84:
81:ab:f6:ac:3d:28:7b:1c:6b:4a:86:29:e2:0f:54:
d1:51:52:a6:9f:b2:66:fc:16:bb:be:ae:31:18:7b:
35:87:c5:a5:7c:65:02:42:4e:b1:7d:dd:a1:fa:59:
5f:e8:7e:84:57:43:9a:05:55:ac:02:28:02:78:96:
d0:ad:fc:af:9b:b9:72:4b:fa:24:e2:74:3e:04:f5:
2e:1f:60:43:ca:d7:2f:40:5a:44:da:34:e3:8a:ae:
d9:0d:dc:f1:22:d1:ea:94:82:a4:3e:95:6c:5c:78:
b6:59:d9:25:11:80:56:6e:fd:b0:6a:d3:2e:d1:9d:
77:45:63:85:43:df:f2:1b:67:8f:c8:97:58:e9:a5:
5a:78:3d:f8:53:d5:c6:68:42:4c:11:f2:22:44:bc:
fc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:79:F4:F9:2D:9C:77:07:2B:EC:0A:D2:90:A0:86:17:AB:57:72:8E
X509v3 Authority Key Identifier:
keyid:65:86:59:68:A1:D8:F4:F3:77:86:5C:91:3A:F3:B9:AF:89:0D:7C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYZZaKHY9PN3hlyROvO5r4kNfM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/v3n0-S2cdwcr7ArSkKCGF6tXco4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/ZYZZaKHY9PN3hlyROvO5r4kNfM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.172.0/23
IPv6:
2a07:c380::/29
Signature Algorithm: sha256WithRSAEncryption
94:80:af:c3:5a:50:f6:8a:82:b6:d4:c0:5c:d0:47:30:ec:7d:
73:f7:0d:07:00:57:e6:1f:35:26:8b:b2:87:19:ff:ad:46:af:
86:49:87:47:e9:65:30:a6:be:8d:c5:df:70:9f:04:11:f1:bd:
28:89:b2:67:de:39:f2:87:89:4f:e8:e0:8a:42:9e:51:de:d5:
92:05:53:6e:4c:b4:9b:f2:b5:21:b7:da:d8:36:a7:4e:e5:09:
e4:49:4b:7b:6e:20:3c:ea:fa:54:7b:f8:87:90:12:f2:92:7f:
6b:6c:dc:76:a1:5d:5b:e0:3d:1b:90:c7:7d:e2:db:fc:58:71:
c1:86:3d:d5:be:2d:1f:3e:db:c2:1f:0a:8f:42:79:1e:37:c2:
09:0f:47:6f:27:24:af:fb:ab:6d:ae:e0:90:aa:69:bb:5b:25:
09:ba:2a:f1:fc:8a:50:36:97:8f:39:c6:b1:d5:33:71:08:f8:
19:8b:12:c8:fc:df:71:b5:d1:63:4a:13:ca:d1:f3:c2:31:73:
fd:16:c7:38:7e:9b:bc:5b:98:4b:9c:ea:3a:b0:3e:08:73:f7:
29:4c:72:32:e2:55:87:aa:95:b8:46:a9:0a:36:e7:c9:01:2b:
59:0d:54:51:fe:d2:30:a2:3d:83:1d:65:a7:08:91:ff:c3:ec:
c2:a3:d8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:05:58 2025 by rpki-client