Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/743f51-8454-436f-988c-505b4b834b26/1/7QRjLjg10nSq788yJdDhbwtyMrE.roa
File: 7QRjLjg10nSq788yJdDhbwtyMrE.roa (raw, json)
Hash identifier: rpPjFV7VBZCenUfLoDr2rX1oa1B7DkkR2nHoujEiM1o=
Subject key identifier: ED:04:63:2E:38:35:D2:74:AA:EF:CF:32:25:D0:E1:6F:0B:72:32:B1
Certificate issuer: /CN=ca8d3afd322395565b0ed519a583f5eff8a4945f
Certificate serial: 01828D829760C90C09561546D19BF2FC80D3
Authority key identifier: CA:8D:3A:FD:32:23:95:56:5B:0E:D5:19:A5:83:F5:EF:F8:A4:94:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yo06_TIjlVZbDtUZpYP17_iklF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/743f51-8454-436f-988c-505b4b834b26/1/7QRjLjg10nSq788yJdDhbwtyMrE.roa
Signing time: Thu 11 Aug 2022 15:25:22 +0000
ROA not before: Thu 11 Aug 2022 15:25:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41960
IP address blocks: 185.112.64.0/22 maxlen: 24
2a0a:1fc0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8d:82:97:60:c9:0c:09:56:15:46:d1:9b:f2:fc:80:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca8d3afd322395565b0ed519a583f5eff8a4945f
Validity
Not Before: Aug 11 15:25:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed04632e3835d274aaefcf3225d0e16f0b7232b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:be:cf:8f:f3:56:15:46:89:93:ee:87:1d:
75:36:29:f8:55:9a:b2:9b:b7:85:a9:43:81:8e:cc:
3c:a6:80:78:80:0d:3f:77:3b:22:5f:50:4b:f4:cd:
27:b6:60:b3:8d:3d:77:d9:7b:d5:6a:e5:c6:92:5c:
34:b6:9d:14:3e:62:66:da:d4:3e:32:ad:99:7d:7b:
c6:45:44:8f:34:0b:7f:d6:73:c4:2b:5f:9e:da:c3:
f7:9e:a0:18:5c:79:b0:ac:14:6f:ed:18:bf:f6:a8:
f6:a1:57:64:b2:8f:35:23:95:a2:de:f2:6c:6f:84:
19:c0:35:01:c3:7f:b0:5f:80:11:29:1c:4d:59:0f:
d1:5a:f5:3a:ce:49:b2:f6:db:ab:60:a2:61:f1:7a:
87:2d:91:f4:a7:ef:08:7a:9d:7e:22:b8:7e:73:28:
51:59:de:56:4c:58:9b:0f:1e:3c:49:93:d4:7b:d2:
56:38:38:c9:37:c0:c9:99:9f:17:81:65:19:d5:4d:
4e:49:ba:12:d4:64:77:55:b5:94:34:af:0b:80:ab:
dc:de:bd:f9:2c:32:c4:21:4a:08:ba:b5:28:d6:16:
b1:e7:1c:5f:ce:b4:fa:d3:b9:32:a4:f4:72:27:10:
17:9e:6a:88:84:90:cf:68:bb:28:63:01:bc:05:51:
26:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:04:63:2E:38:35:D2:74:AA:EF:CF:32:25:D0:E1:6F:0B:72:32:B1
X509v3 Authority Key Identifier:
keyid:CA:8D:3A:FD:32:23:95:56:5B:0E:D5:19:A5:83:F5:EF:F8:A4:94:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yo06_TIjlVZbDtUZpYP17_iklF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/743f51-8454-436f-988c-505b4b834b26/1/7QRjLjg10nSq788yJdDhbwtyMrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/743f51-8454-436f-988c-505b4b834b26/1/yo06_TIjlVZbDtUZpYP17_iklF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.64.0/22
IPv6:
2a0a:1fc0::/29
Signature Algorithm: sha256WithRSAEncryption
90:f5:31:7c:c3:bb:a9:25:9c:97:6f:c3:8b:25:35:4a:63:97:
cb:4e:67:de:b9:e7:cd:58:f1:17:14:0b:1f:b9:d5:ba:ff:3f:
e5:76:c1:39:f7:06:ac:b8:71:39:06:b9:1a:55:40:36:a8:c2:
f5:e8:97:6c:14:ab:8a:e0:c5:b4:48:ec:ee:79:0a:8d:4f:ae:
00:36:11:4f:2a:8e:14:54:d1:11:24:cb:51:c4:7d:ac:01:e0:
99:2c:c4:51:95:91:36:5f:99:48:08:3b:84:66:12:ee:cf:91:
0e:b7:37:b3:c9:69:27:91:67:b9:dc:ae:25:dd:f6:1b:48:6e:
08:cb:d7:f9:1b:28:bf:ef:09:2e:e2:73:cc:e5:2f:68:45:d0:
1b:17:3f:e2:6f:10:33:c0:5c:4d:f8:7c:a0:78:ee:b9:d4:55:
97:c0:b8:fd:64:81:74:49:25:87:78:96:7e:12:70:5e:13:b1:
4c:b2:d3:d6:fb:cd:f6:65:b5:47:19:6d:3b:8f:bd:60:9e:e0:
2a:59:3a:32:a6:04:4a:03:b3:47:b0:fa:60:36:07:de:f9:db:
bb:8c:89:75:17:b8:da:4a:31:2f:d1:c8:c2:88:03:d1:93:9c:
d1:1c:b2:34:ed:0d:d5:7f:b1:cd:24:80:79:9a:9e:7b:10:cb:
47:fa:2d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:40:55 2025 by rpki-client