Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/auA1IqvYis9o_LZBXjhV1p0g2d0.roa
File: auA1IqvYis9o_LZBXjhV1p0g2d0.roa (raw, json)
Hash identifier: QGRcN0ywZBO2SqfWWrPKrgBtZTrb8EwwBcYfR5IbsB8=
Subject key identifier: 6A:E0:35:22:AB:D8:8A:CF:68:FC:B6:41:5E:38:55:D6:9D:20:D9:DD
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 01853DFAA74EC242312A8E6E393F25AC4537
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/auA1IqvYis9o_LZBXjhV1p0g2d0.roa
Signing time: Fri 23 Dec 2022 07:55:15 +0000
ROA not before: Fri 23 Dec 2022 07:55:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 185.130.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3d:fa:a7:4e:c2:42:31:2a:8e:6e:39:3f:25:ac:45:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Dec 23 07:55:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ae03522abd88acf68fcb6415e3855d69d20d9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e4:de:c5:71:e8:f8:80:e6:7a:db:10:b0:79:
9b:6b:36:d8:c0:38:fe:05:65:d1:d7:fe:7f:71:f4:
83:39:95:dc:18:e5:7c:da:0f:ab:eb:4b:9e:c1:54:
e5:d1:0c:c9:ce:1b:98:55:96:47:5c:a9:c3:72:35:
89:6e:70:dc:43:c2:95:2f:c9:ca:db:c9:f5:fc:bd:
54:53:7d:3f:17:03:54:6d:ed:ed:66:ed:c5:5b:58:
b6:98:e5:08:87:0b:05:83:d8:8d:13:62:4f:04:a5:
73:f9:12:7e:dc:dd:31:7d:09:df:9d:50:96:e9:19:
9e:01:a8:87:48:b0:7a:fa:62:80:a5:b3:9f:12:fd:
22:65:5b:de:bb:de:32:98:6f:71:b3:2e:af:4d:7d:
f3:fc:91:e9:0b:a5:d4:26:d2:cc:10:7c:ed:47:34:
14:5e:1a:0e:c9:f8:53:98:0f:1d:d8:a7:66:13:e9:
3f:81:46:a5:4a:dc:25:f7:8b:a2:6d:3c:bc:c6:37:
1a:24:19:cd:b3:7b:e3:c8:2d:35:b0:ab:d7:a4:e2:
76:cc:cd:81:2d:a2:a2:ba:a2:95:a6:76:d0:97:69:
57:7b:9d:2d:83:f0:33:2a:99:9a:0e:a4:d5:4f:02:
3f:ae:af:a3:71:48:99:65:b4:31:17:0c:d4:2b:d2:
49:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E0:35:22:AB:D8:8A:CF:68:FC:B6:41:5E:38:55:D6:9D:20:D9:DD
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/auA1IqvYis9o_LZBXjhV1p0g2d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.63.0/24
Signature Algorithm: sha256WithRSAEncryption
76:4b:4b:fa:b9:4e:76:8b:f2:c4:d5:b0:61:12:06:f2:58:97:
e6:87:27:29:77:7c:42:7a:5a:23:02:25:e6:55:b7:9c:db:bf:
6d:b4:5e:35:fc:25:f6:1f:e7:e6:75:dc:49:8a:17:fe:86:72:
38:76:af:80:4e:a9:3a:9b:57:7f:81:cf:a3:a1:31:7d:ba:02:
06:69:7a:ff:bc:bc:7f:ec:21:6b:10:59:e0:61:1e:f9:21:e8:
7b:2c:88:fe:32:09:11:9f:48:16:7c:41:d4:08:b9:8f:30:88:
5d:24:73:6b:93:c0:ee:43:94:58:7e:b8:ff:21:c2:9c:e9:cd:
ea:0a:10:b9:82:95:81:70:e4:ee:c7:71:4c:fb:68:89:bb:d4:
95:20:68:af:8b:32:11:0f:b0:a2:3e:16:42:db:78:55:18:54:
de:4f:95:ae:bf:99:f2:48:1a:d0:f1:b3:fd:c0:18:bd:c9:34:
9e:d8:47:00:0f:78:95:10:71:09:f2:8d:29:26:67:f9:76:69:
2b:c4:1c:ed:20:69:89:da:da:96:b2:70:f0:ed:59:b2:ac:38:
4b:0f:51:b5:03:98:99:b2:f8:10:61:a5:f8:d1:c4:69:cf:ed:
a6:74:c2:0f:6b:c6:42:1b:93:d9:40:6c:06:aa:21:bb:2e:28:
8c:8e:d3:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYU9+qdOwkIxKo5uOT8lrEU3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwODUzOTdmMjZhMDQ0Y2FlZjZhNmI2NjkyODczMzFhYTRk
Njg2NDUwHhcNMjIxMjIzMDc1NTE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWUwMzUyMmFiZDg4YWNmNjhmY2I2NDE1ZTM4NTVkNjlkMjBkOWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneTexXHo+IDmetsQsHmbazbYwDj+
BWXR1/5/cfSDOZXcGOV82g+r60uewVTl0QzJzhuYVZZHXKnDcjWJbnDcQ8KVL8nK
28n1/L1UU30/FwNUbe3tZu3FW1i2mOUIhwsFg9iNE2JPBKVz+RJ+3N0xfQnfnVCW
6RmeAaiHSLB6+mKApbOfEv0iZVveu94ymG9xsy6vTX3z/JHpC6XUJtLMEHztRzQU
XhoOyfhTmA8d2KdmE+k/gUalStwl94uibTy8xjcaJBnNs3vjyC01sKvXpOJ2zM2B
LaKiuqKVpnbQl2lXe50tg/AzKpmaDqTVTwI/rq+jcUiZZbQxFwzUK9JJswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGrgNSKr2IrPaPy2QV44VdadINndMB8GA1UdIwQY
MBaAFGCFOX8moETK72prZpKHMxqk1oZFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUlVNWZ5YWdSTXJ2YW10bWtvY3pHcVRXaGtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xMTI1YTItNDQzMi00ODNmLWEwMGIt
NjE2ZDk3YTc3YmQ2LzEvYXVBMUlxdllpczlvX0xaQlhqaFYxcDBnMmQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8xMTI1YTItNDQzMi00ODNmLWEwMGItNjE2ZDk3YTc3YmQ2
LzEvWUlVNWZ5YWdSTXJ2YW10bWtvY3pHcVRXaGtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYI/MA0G
CSqGSIb3DQEBCwUAA4IBAQB2S0v6uU52i/LE1bBhEgbyWJfmhycpd3xCelojAiXm
Vbec279ttF41/CX2H+fmddxJihf+hnI4dq+ATqk6m1d/gc+joTF9ugIGaXr/vLx/
7CFrEFngYR75Ieh7LIj+MgkRn0gWfEHUCLmPMIhdJHNrk8DuQ5RYfrj/IcKc6c3q
ChC5gpWBcOTux3FM+2iJu9SVIGivizIRD7CiPhZC23hVGFTeT5Wuv5nySBrQ8bP9
wBi9yTSe2EcAD3iVEHEJ8o0pJmf5dmkrxBztIGmJ2tqWsnDw7VmyrDhLD1G1A5iZ
svgQYaX40cRpz+2mdMIPa8ZCG5PZQGwGqiG7LiiMjtPe
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:17:37 2025 by rpki-client