Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/f65drtdCXLtBKw2zzThB0gw9l3E.roa
File: f65drtdCXLtBKw2zzThB0gw9l3E.roa (raw, json)
Hash identifier: Vh7scCVfl71UkBfq+Qy50GV6aGBWd3V+vkK9ns0brR4=
Subject key identifier: 7F:AE:5D:AE:D7:42:5C:BB:41:2B:0D:B3:CD:38:41:D2:0C:3D:97:71
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 033566D9
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/f65drtdCXLtBKw2zzThB0gw9l3E.roa
Signing time: Sat 01 Jan 2022 05:03:13 +0000
ROA not before: Sat 01 Jan 2022 05:03:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61272
IP address blocks: 185.213.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53831385 (0x33566d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Jan 1 05:03:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fae5daed7425cbb412b0db3cd3841d20c3d9771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:26:5b:3a:80:1c:e0:a3:04:76:ca:9e:bd:93:
7c:63:8c:d8:e7:ec:b1:59:1f:9c:11:97:ed:75:52:
67:38:e2:00:1e:6e:5a:6f:cd:97:cf:d2:bf:ff:d6:
9e:dc:1c:c8:d9:a1:d3:52:09:f4:bd:65:ea:d3:9d:
81:8b:5b:14:31:0b:d8:0b:e1:23:db:5f:52:21:4d:
5a:b9:bd:0b:af:7d:72:4c:a5:c6:d2:09:7b:d3:01:
9b:02:db:66:72:ae:7b:c0:78:9a:ea:dd:a7:cf:3f:
fb:0f:50:4c:d9:c8:4a:f8:73:e6:5c:f8:75:8a:9d:
7b:05:bd:4c:b0:17:08:93:f3:bd:88:09:84:10:94:
55:34:5a:46:9d:43:54:34:78:f1:a5:af:08:e1:98:
5e:c9:21:d5:e5:51:16:90:82:14:a7:2a:6e:68:d2:
18:02:6d:60:7c:be:6d:c6:ce:59:28:f1:c1:37:1c:
ee:eb:19:4c:e6:dd:17:80:af:46:3b:76:94:12:72:
68:a9:51:c1:ce:93:32:3b:44:30:5b:ac:00:3f:40:
de:94:17:3f:2f:eb:2d:07:22:52:fa:d1:5e:91:80:
6b:a1:84:68:e6:36:1d:ec:98:30:e5:9a:65:e7:c9:
06:29:fe:20:42:05:41:21:53:89:4f:a1:12:93:a0:
c6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AE:5D:AE:D7:42:5C:BB:41:2B:0D:B3:CD:38:41:D2:0C:3D:97:71
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/f65drtdCXLtBKw2zzThB0gw9l3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.241.0/24
Signature Algorithm: sha256WithRSAEncryption
32:28:37:f2:1a:21:e2:22:93:12:a2:a4:f3:1f:4d:b8:3c:13:
1b:24:f2:f6:48:50:ff:5f:ef:98:1d:b2:24:3f:b9:26:46:24:
d0:16:66:2a:7b:5a:c5:f6:e4:e4:ea:1d:b7:0f:a6:c1:73:05:
a6:08:45:b6:6f:07:9f:9f:3d:be:e2:dc:2c:c7:b1:ed:bd:c7:
6e:cc:32:ef:f1:be:aa:36:2b:d5:48:d1:4b:01:35:b1:ed:ab:
6c:b3:92:9f:d9:e1:bd:27:3f:0a:01:fb:b3:c5:59:18:8f:41:
69:ae:32:3a:69:64:b4:90:8b:d2:ac:a4:4b:ce:14:1f:bd:9d:
a4:78:9a:07:61:cb:40:18:9b:3b:5e:28:52:0e:ce:76:c8:f4:
82:a1:58:b9:1d:fb:06:7e:4d:dd:5a:8a:da:c9:d3:98:01:f7:
a9:99:57:9a:e0:28:f9:c5:1c:eb:82:a0:85:1d:a5:7d:37:b3:
78:f3:a3:04:34:2a:12:dc:6c:b6:c4:42:45:38:06:73:3b:4b:
ed:3a:cb:22:12:02:b6:5a:6d:d5:83:54:06:9b:9d:02:ca:69:
be:9d:c0:95:08:42:9e:b2:e6:e9:89:01:be:67:9f:41:34:a1:
26:5d:55:9a:64:ec:19:cb:e3:bd:ea:0a:3b:88:da:e7:d5:9a:
f6:54:b5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:05:27 2025 by rpki-client