Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/nB2h9a5jCOyFMwVAN45XlGqG0Wo.roa
File: nB2h9a5jCOyFMwVAN45XlGqG0Wo.roa (raw, json)
Hash identifier: 63DIfjXG6YXgQ92QPIuCQawmuKaMUhDucPV2R8RglGk=
Subject key identifier: 9C:1D:A1:F5:AE:63:08:EC:85:33:05:40:37:8E:57:94:6A:86:D1:6A
Certificate issuer: /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Certificate serial: 0F8BF2C1
Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/nB2h9a5jCOyFMwVAN45XlGqG0Wo.roa
Signing time: Sat 01 Jan 2022 07:58:24 +0000
ROA not before: Sat 01 Jan 2022 07:58:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42560
IP address blocks: 185.65.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260829889 (0xf8bf2c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Validity
Not Before: Jan 1 07:58:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c1da1f5ae6308ec85330540378e57946a86d16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:83:ed:69:67:52:28:3d:95:eb:46:36:c1:90:
fe:82:be:89:b1:96:3c:0f:56:ab:d3:d9:c8:a3:41:
93:3c:f5:ca:78:a1:5a:97:77:11:2d:87:16:8c:12:
21:71:53:04:10:58:55:f1:fb:65:ee:43:f2:cd:5f:
c7:c7:74:43:1a:ec:ea:2c:e7:bc:05:4d:41:0f:f2:
8b:84:82:d6:77:98:b4:e0:82:d7:0f:a3:92:c0:9f:
e1:e0:5f:14:3f:70:25:19:db:fb:2c:83:78:bc:70:
f5:6c:20:d6:72:12:18:e5:c7:0f:23:b9:42:87:90:
fa:83:de:2a:16:cd:a7:46:fc:66:e2:b0:77:c2:b7:
d4:91:0b:1f:4a:26:24:3c:f2:a9:34:e3:89:08:7b:
6c:a3:13:fb:ff:7a:e6:a1:8c:74:51:24:69:e6:65:
b8:8a:7d:ef:5a:88:49:10:21:c2:db:4e:f3:5c:04:
2d:62:1e:6f:3e:dd:43:d7:e3:45:e4:57:cd:ec:4c:
3e:61:b8:fa:16:f7:96:58:ab:32:0b:43:1d:18:45:
1a:e7:3d:ba:8b:75:7c:fa:a5:9d:7b:db:95:c1:67:
b4:92:cc:e6:4b:68:04:3a:28:4c:cb:2b:d2:73:54:
c6:49:26:6b:33:85:23:ec:22:98:ff:2c:c5:8b:09:
c1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1D:A1:F5:AE:63:08:EC:85:33:05:40:37:8E:57:94:6A:86:D1:6A
X509v3 Authority Key Identifier:
keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/nB2h9a5jCOyFMwVAN45XlGqG0Wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.228.0/22
Signature Algorithm: sha256WithRSAEncryption
19:50:67:b3:d9:f3:75:48:00:3e:f7:99:72:a4:f9:45:1f:bf:
eb:b2:d1:68:e6:f8:2f:51:4c:00:10:56:f8:40:17:fb:45:32:
03:fc:9e:f8:00:e4:0a:83:45:62:8e:91:a7:c0:fe:95:79:f2:
d8:2e:75:05:a3:a6:e5:f2:48:e6:94:9f:90:8d:85:9f:7a:89:
09:d5:3c:b8:c1:8c:c2:60:cf:4a:97:ec:6a:75:86:05:00:97:
49:09:12:bd:c2:90:95:66:71:de:0b:06:41:de:2c:b9:ec:fb:
4a:ab:e6:66:e1:11:e3:d1:7b:01:fa:5b:89:d7:2e:f1:e0:0a:
5d:ba:7d:c9:0e:7a:5c:00:10:ee:fe:85:a3:1f:cc:6c:98:e3:
38:ad:04:3f:47:a9:cd:0c:9c:81:3f:54:94:0b:af:72:89:69:
56:8a:de:fc:3a:f8:70:77:34:91:12:54:47:a2:94:f7:98:c6:
3c:9d:1e:9e:a0:19:71:6b:d6:29:68:4a:43:d2:3b:9a:0a:36:
1b:9c:25:95:47:41:33:53:41:f6:21:1f:30:76:b9:e8:a2:d4:
b9:af:db:97:c9:b4:75:5b:ba:09:3a:bc:1f:0f:3a:06:f1:e6:
e1:08:b1:af:f0:08:41:ad:91:3b:df:77:ed:b9:d4:9e:a5:df:
46:9b:dc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:51:33 2025 by rpki-client