Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/2476c0-7913-47b7-ac6b-fb4e840df23f/1/r28yO8ADHEIgsA-tJPzBMJcQ3Rg.roa
File: r28yO8ADHEIgsA-tJPzBMJcQ3Rg.roa (raw, json)
Hash identifier: 9QQyF5HAnHPXyAUfmOkA1Pm8kvcYcgoYHE4X+tGGBKs=
Subject key identifier: AF:6F:32:3B:C0:03:1C:42:20:B0:0F:AD:24:FC:C1:30:97:10:DD:18
Certificate issuer: /CN=1d2a88acc91238c532751290ccf831270f97f708
Certificate serial: 0A35690B
Authority key identifier: 1D:2A:88:AC:C9:12:38:C5:32:75:12:90:CC:F8:31:27:0F:97:F7:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSqIrMkSOMUydRKQzPgxJw-X9wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/2476c0-7913-47b7-ac6b-fb4e840df23f/1/r28yO8ADHEIgsA-tJPzBMJcQ3Rg.roa
Signing time: Sat 01 Jan 2022 05:01:02 +0000
ROA not before: Sat 01 Jan 2022 05:01:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39455
IP address blocks: 185.85.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171272459 (0xa35690b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2a88acc91238c532751290ccf831270f97f708
Validity
Not Before: Jan 1 05:01:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af6f323bc0031c4220b00fad24fcc1309710dd18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:aa:37:8b:30:ab:53:f9:2a:9e:f7:a7:20:f8:
19:47:8d:be:67:4e:f0:47:c3:3e:f1:ee:6f:fe:97:
ba:44:10:b6:0a:e0:46:20:18:1e:ed:4e:3d:c9:a9:
b8:0d:9d:91:51:c0:e3:71:04:c8:d5:a7:50:22:b5:
6a:58:25:d4:31:e8:9a:23:f5:cb:91:29:77:46:19:
2a:d6:5a:5f:c8:99:b0:78:b7:37:4d:0a:36:f2:bd:
20:62:ca:00:d0:f2:8c:0b:9b:c5:e2:84:5f:1f:0a:
9b:b5:83:7e:db:23:b7:1f:f3:07:36:a5:37:30:77:
95:c0:78:d5:d6:69:58:4e:85:88:1a:48:e5:09:c6:
50:1d:ba:fd:dc:ca:8a:31:a8:6e:07:c7:c4:6b:93:
e8:93:23:87:e6:e9:da:5b:52:b7:05:97:24:61:6d:
27:0c:a0:8e:c8:a5:11:81:1e:57:35:a7:0d:4e:33:
6c:54:f6:2c:b1:18:a1:49:0c:b5:c0:b8:c8:c4:ca:
2d:ed:26:7e:2f:a1:bf:91:92:58:97:0a:53:45:cd:
ee:cf:da:7b:22:f9:54:98:d6:5f:0e:3a:f6:eb:2e:
20:14:a0:c6:fa:59:29:45:9d:09:35:57:a8:c3:b6:
79:b7:51:8b:ee:f5:48:8d:7b:af:17:04:00:57:17:
a3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6F:32:3B:C0:03:1C:42:20:B0:0F:AD:24:FC:C1:30:97:10:DD:18
X509v3 Authority Key Identifier:
keyid:1D:2A:88:AC:C9:12:38:C5:32:75:12:90:CC:F8:31:27:0F:97:F7:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSqIrMkSOMUydRKQzPgxJw-X9wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2476c0-7913-47b7-ac6b-fb4e840df23f/1/r28yO8ADHEIgsA-tJPzBMJcQ3Rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2476c0-7913-47b7-ac6b-fb4e840df23f/1/HSqIrMkSOMUydRKQzPgxJw-X9wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.36.0/22
Signature Algorithm: sha256WithRSAEncryption
73:d1:ea:69:52:a7:e3:17:60:f0:66:4c:c5:70:3c:e7:dd:75:
37:8a:bb:c9:0c:60:09:ed:61:41:82:7d:71:dd:19:bd:d6:1f:
90:08:f6:45:ad:7d:0a:1b:0c:08:7d:06:44:52:8d:ae:7e:6a:
96:1b:5f:d4:36:3d:3a:38:0a:37:f0:f0:d3:07:e9:a6:fd:63:
ee:78:d0:a7:fe:43:1c:eb:2e:21:d0:c5:ed:85:e5:53:84:27:
aa:c5:0e:e0:44:dd:3d:7a:b0:d1:42:61:8b:e3:45:d8:bd:e1:
64:ab:f1:76:86:70:ef:33:ba:52:44:8f:2b:0e:52:63:94:6a:
87:a8:11:b6:1b:3c:e8:5e:bb:e4:00:51:00:1a:96:8e:df:85:
5e:4c:8d:71:53:25:41:17:1a:df:cb:1e:4e:05:4d:63:77:f1:
eb:63:4c:c9:a1:9f:e6:12:13:4b:09:23:10:04:57:1d:d2:c1:
5f:04:de:60:32:16:64:32:47:c4:e4:4d:41:0a:1d:08:b5:a8:
2a:10:70:18:4a:02:30:ff:0d:93:a7:a1:75:d3:90:d9:d2:9c:
55:1f:d9:c1:5e:45:d3:1e:d2:0d:22:a9:2d:e6:ca:a6:a6:5c:
3d:f7:86:b3:b7:2c:ea:02:37:27:04:3a:6d:90:8e:bf:19:c5:
b1:79:86:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:41:38 2025 by rpki-client