Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/fVdvOlKz5Ibiznp7eZ2FyHhNZn0.roa
File: fVdvOlKz5Ibiznp7eZ2FyHhNZn0.roa (raw, json)
Hash identifier: gOK6OFdL49yZ8dK6qcsR6xucGww2menGeYYpK+Rs01k=
Subject key identifier: 7D:57:6F:3A:52:B3:E4:86:E2:CE:7A:7B:79:9D:85:C8:78:4D:66:7D
Certificate issuer: /CN=86842274b3788b80b2fed916db3880fe08c37528
Certificate serial: 09767E2E
Authority key identifier: 86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/fVdvOlKz5Ibiznp7eZ2FyHhNZn0.roa
Signing time: Sat 30 Apr 2022 15:57:03 +0000
ROA not before: Sat 30 Apr 2022 15:57:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58088
IP address blocks: 85.116.140.0/22 maxlen: 22
185.184.136.0/22 maxlen: 22
2a0b:3580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158760494 (0x9767e2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86842274b3788b80b2fed916db3880fe08c37528
Validity
Not Before: Apr 30 15:57:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d576f3a52b3e486e2ce7a7b799d85c8784d667d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:67:78:16:1b:7f:d7:fc:cb:7d:99:7c:b7:
00:a2:79:2e:30:ec:7a:99:af:b7:ed:c7:ef:35:e7:
3e:d8:75:7b:d9:bb:f2:cc:d3:dc:f1:3f:b5:df:97:
ed:29:03:1c:0d:9b:e0:41:33:23:9f:e6:f6:07:45:
63:a8:6f:1f:0a:4d:9d:7a:cf:c6:65:05:10:97:eb:
81:a3:1d:b9:a6:36:cb:22:88:65:a3:f3:f1:f2:01:
61:75:e3:7d:69:d4:8b:5a:95:41:7e:7c:94:49:04:
08:2e:49:b9:95:a7:24:29:39:a9:b7:96:b6:0d:34:
b4:49:bf:93:72:b5:7f:f2:81:43:f7:d2:1f:30:99:
4c:7d:8e:8b:00:33:da:9e:a5:bf:d7:f0:9d:d4:ef:
ea:8b:bf:fc:ae:ca:ea:fb:2e:1e:f8:eb:37:b9:2d:
08:13:4a:73:98:7f:a1:42:ff:4f:a2:92:80:e0:eb:
ff:ab:c6:54:7a:2e:ab:64:b8:50:c0:1a:3d:5b:7e:
d5:42:f7:00:d8:d2:9c:90:b2:2c:3c:ba:71:f7:3c:
4d:cb:a0:a3:88:ed:fd:4b:97:13:a8:42:ba:3c:3f:
5b:22:08:02:6d:0a:4d:6e:35:46:91:8c:b0:63:8e:
e9:20:fc:69:a8:81:05:e6:df:c4:b6:ba:92:c5:0e:
f0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:57:6F:3A:52:B3:E4:86:E2:CE:7A:7B:79:9D:85:C8:78:4D:66:7D
X509v3 Authority Key Identifier:
keyid:86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/fVdvOlKz5Ibiznp7eZ2FyHhNZn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.116.140.0/22
185.184.136.0/22
IPv6:
2a0b:3580::/29
Signature Algorithm: sha256WithRSAEncryption
0f:7d:1f:3b:3a:51:61:39:af:34:5c:b1:54:35:d6:62:e7:0c:
2c:ee:aa:76:53:3c:90:ae:c7:9d:d3:b2:75:50:d9:9b:9b:2b:
a5:b5:c6:2a:a4:9a:fb:35:b9:88:75:e2:04:77:89:04:e4:3a:
88:83:64:a0:de:2c:90:03:8d:df:98:d4:47:47:9c:23:07:06:
ea:23:22:5c:bb:6e:1e:56:71:7f:a7:32:d5:16:5d:ec:8d:03:
be:fe:76:a3:fe:58:48:a4:46:c2:b5:45:a9:2b:e6:d6:ba:20:
c6:33:ea:f9:65:12:fd:2e:b2:10:a1:20:52:2e:4f:cf:37:a8:
9e:91:f4:7f:88:8a:7d:4a:c7:49:f2:55:37:91:32:0b:ac:64:
93:c1:85:6f:72:f8:b7:c8:fb:3f:27:75:d1:0f:77:13:90:18:
a1:e5:be:16:4b:24:fb:38:70:ff:87:61:be:79:ac:77:27:a3:
ae:5c:b6:49:07:16:2d:0b:93:31:e4:ac:24:9e:93:41:16:29:
9c:e9:b1:ec:33:1e:2b:bd:49:62:91:c4:c5:17:a8:9a:c3:8a:
b2:e0:47:ff:d7:68:7e:83:c1:fc:9c:83:07:18:8a:ce:07:07:
31:ab:a3:b8:25:b3:fe:d6:1c:f1:33:9e:8b:6b:dc:d2:1f:0e:
da:1c:66:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:51:36 2025 by rpki-client