Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/860D4cjUbsBeWjW6uxje8n5LuHI.roa
File: 860D4cjUbsBeWjW6uxje8n5LuHI.roa (raw, json)
Hash identifier: +FDU/P7xxy5bhiaAJdDe9AuxJBDa0w9uSoGv0C32KM4=
Subject key identifier: F3:AD:03:E1:C8:D4:6E:C0:5E:5A:35:BA:BB:18:DE:F2:7E:4B:B8:72
Certificate issuer: /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Certificate serial: 01856BB7FF427B857D5524F60AABB6799E46
Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/860D4cjUbsBeWjW6uxje8n5LuHI.roa
Signing time: Sun 01 Jan 2023 05:04:58 +0000
ROA not before: Sun 01 Jan 2023 05:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42560
IP address blocks: 185.65.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:b7:ff:42:7b:85:7d:55:24:f6:0a:ab:b6:79:9e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Validity
Not Before: Jan 1 05:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3ad03e1c8d46ec05e5a35babb18def27e4bb872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:17:3f:a7:ae:7b:47:91:5b:d9:33:81:36:
95:28:47:3f:af:7b:6e:9a:fa:fa:e8:69:d6:0b:15:
ab:64:c6:b9:36:6c:4b:66:2a:a4:5a:af:43:01:42:
36:44:f7:5d:82:bb:5a:61:40:d5:17:ba:43:8b:75:
4a:fd:8b:b4:6f:1f:16:73:8b:5a:2c:88:b7:38:80:
d4:69:0e:94:91:0c:50:77:2c:0e:48:de:4a:f8:a3:
13:0a:06:4c:c1:ef:6b:0f:98:3f:dd:b5:83:0a:f6:
6a:6e:86:77:df:95:e0:36:20:4d:df:58:2f:50:95:
8e:e2:2a:31:60:b9:09:9d:c5:1a:21:2e:d5:35:07:
f2:50:6b:36:f2:7c:01:be:ef:ca:b0:76:08:1d:fb:
12:ac:2e:60:95:8c:05:b8:4b:27:28:65:2f:ce:58:
11:05:c8:9b:11:2a:fd:bd:32:f6:95:b1:9e:96:42:
fc:76:6e:89:77:df:89:f4:21:e0:5f:f6:0b:dc:0d:
0b:e9:94:52:88:79:08:bc:2a:ae:fd:84:d6:1d:90:
aa:64:4c:ad:2d:83:13:7e:a2:af:61:f8:70:8a:06:
a8:bc:65:ca:de:98:72:2f:bc:3d:1b:76:54:32:fc:
00:43:23:30:31:8a:26:ef:d1:72:7f:3c:8e:68:cd:
cc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AD:03:E1:C8:D4:6E:C0:5E:5A:35:BA:BB:18:DE:F2:7E:4B:B8:72
X509v3 Authority Key Identifier:
keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/860D4cjUbsBeWjW6uxje8n5LuHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.228.0/22
Signature Algorithm: sha256WithRSAEncryption
31:d3:5b:0e:81:af:c0:8f:3a:65:c7:f5:75:1c:4e:20:d0:6d:
40:b2:e1:77:3b:0e:b6:dd:04:d5:63:fb:cc:7c:1b:7a:3e:ab:
b6:83:fe:7f:c3:80:94:09:a3:16:8f:48:03:48:ee:93:a5:3a:
51:67:c2:2f:dd:64:07:67:7e:23:15:5f:47:6b:d5:bc:c1:cf:
3d:53:16:bc:bf:3f:00:54:d3:a8:2b:9c:9f:e4:57:43:31:14:
41:03:a6:01:13:f8:46:3d:27:93:7b:e4:fd:93:bd:15:c3:55:
3c:42:4e:37:3b:b9:b2:35:42:5f:c2:f4:b5:bc:9d:21:4f:02:
11:50:44:f7:5b:5a:28:c6:0b:2b:b5:5d:e2:24:9e:ed:40:2a:
d6:22:8f:d8:0f:5f:d7:ad:ef:71:1c:48:a4:50:d7:12:5d:fa:
f3:8f:db:88:d7:e6:e7:a1:d5:dd:33:81:11:a7:e8:76:3a:35:
77:1c:39:61:00:fe:84:7e:4d:c4:30:4c:6d:f4:3b:c1:71:e8:
dc:60:5e:bb:c7:d4:54:8f:8d:6d:1b:4f:ca:eb:1b:db:de:04:
70:46:42:14:06:0f:67:3b:82:fe:10:5b:37:2f:7e:db:36:f5:
31:d4:4c:91:5f:b1:90:d9:04:21:13:4b:bb:99:2d:9f:7d:f0:
31:c3:0c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:54:14 2025 by rpki-client