Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/BUpknRMp9pZgx3LyBoDuzv0JER8.roa
File: BUpknRMp9pZgx3LyBoDuzv0JER8.roa (raw, json)
Hash identifier: b7+bJhjyaPBS8obR/HjUedQ/VvLvBjwfMUhIMH+90Vk=
Subject key identifier: 05:4A:64:9D:13:29:F6:96:60:C7:72:F2:06:80:EE:CE:FD:09:11:1F
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 01826D3850F368DC68A67C2AB406020A1D11
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/BUpknRMp9pZgx3LyBoDuzv0JER8.roa
Signing time: Fri 05 Aug 2022 08:56:23 +0000
ROA not before: Fri 05 Aug 2022 08:56:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.130.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:38:50:f3:68:dc:68:a6:7c:2a:b4:06:02:0a:1d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Aug 5 08:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=054a649d1329f69660c772f20680eecefd09111f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:55:80:32:80:fe:35:53:03:bb:83:b3:cc:
4f:70:35:6a:06:15:3d:32:2a:f5:16:2c:d4:a2:91:
1f:3f:e4:2d:5f:51:23:c0:62:c5:68:da:04:20:09:
38:5e:30:3e:07:9d:e3:2a:8f:07:de:b6:c3:19:c5:
bf:0c:27:47:12:41:94:69:81:43:50:7e:3b:12:24:
fe:18:de:a1:81:45:29:ea:4b:2d:a1:47:10:ae:88:
7c:fe:61:d1:f1:50:8d:a9:12:49:9a:ba:16:96:2e:
1b:37:bf:07:d5:aa:fd:f6:91:1d:ea:03:76:58:24:
81:9c:0e:67:a2:d1:a7:e4:03:12:5b:79:25:16:c2:
c9:80:62:68:2a:91:bb:11:f8:ff:f6:88:8d:83:a5:
e5:44:5e:e4:2c:f1:af:bf:f0:4b:f1:06:59:72:fe:
6f:90:54:3e:c1:0c:07:bf:24:da:40:6d:a2:f9:e3:
b9:f2:8b:36:de:1d:a6:33:65:fb:f9:cc:01:f6:b1:
20:e9:62:f3:4f:ff:06:50:60:c9:e0:ee:5b:46:d9:
d7:94:df:e3:1f:22:5e:6c:b6:79:05:64:a2:3f:a0:
51:36:f0:d8:8f:47:2a:0d:b0:c1:34:89:4d:65:01:
73:ee:d3:42:ca:1a:9c:a4:d8:76:fc:f8:10:19:c7:
67:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4A:64:9D:13:29:F6:96:60:C7:72:F2:06:80:EE:CE:FD:09:11:1F
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/BUpknRMp9pZgx3LyBoDuzv0JER8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.60.0/22
Signature Algorithm: sha256WithRSAEncryption
79:db:e5:9c:b5:6b:01:b0:d3:5b:85:99:3c:9e:02:22:dc:68:
25:15:46:b5:1c:3f:bf:85:d4:e5:48:76:f9:cd:b4:72:b9:f0:
36:5e:87:c8:d6:77:c3:f6:c6:11:0d:fb:82:d2:79:d3:0b:9c:
9b:e5:2d:fc:9e:ce:0a:39:6c:68:92:99:84:23:45:87:21:77:
4d:a6:de:99:3f:09:e3:b1:1f:14:6f:56:f4:ba:0d:96:ba:7d:
72:0f:ef:47:c6:38:fd:da:1b:86:bc:6e:0c:28:b5:e4:4b:36:
e6:d5:54:1a:af:f0:e0:e1:78:b1:6e:d3:07:fa:a5:b3:ed:f8:
3d:51:51:26:75:db:cc:97:a9:fd:8e:24:66:27:42:d9:6d:76:
06:59:8a:ca:c6:57:b6:a3:98:c8:b3:88:2d:98:c4:7c:bf:56:
3f:c1:dc:52:6a:91:f5:e4:ac:b2:10:74:06:f8:9c:8c:d4:63:
9d:19:2d:54:97:e0:c3:fb:25:21:44:71:86:0b:64:c5:5d:a6:
a1:a3:f6:84:f5:61:30:2f:40:2c:83:50:b0:d9:65:a1:7e:29:
e6:e5:33:49:44:ab:71:cf:44:8e:21:a8:1b:8f:e2:d3:07:6f:
52:29:01:e8:09:42:8f:a0:99:f8:6e:bf:3f:c4:ba:f1:71:10:
90:3d:8c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:05:27 2025 by rpki-client