Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/iOYgvHfmX1NKr04eucHPCC0HGv8.roa
File: iOYgvHfmX1NKr04eucHPCC0HGv8.roa (raw, json)
Hash identifier: J9GE+x32qBbxKU4npXctA7XS2Ky9nFDLsFXJcwGUL1g=
Subject key identifier: 88:E6:20:BC:77:E6:5F:53:4A:AF:4E:1E:B9:C1:CF:08:2D:07:1A:FF
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 01835CA0E0DB9CFB7B2BFF7033E4DA776AE1
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/iOYgvHfmX1NKr04eucHPCC0HGv8.roa
Signing time: Tue 20 Sep 2022 20:39:50 +0000
ROA not before: Tue 20 Sep 2022 20:39:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210703
IP address blocks: 185.130.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5c:a0:e0:db:9c:fb:7b:2b:ff:70:33:e4:da:77:6a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Sep 20 20:39:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88e620bc77e65f534aaf4e1eb9c1cf082d071aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8c:1f:05:9d:4f:7c:cf:15:31:24:26:cb:ef:
e5:0c:02:e8:b2:ef:5b:2d:52:8f:4f:9d:36:87:1c:
53:b3:3e:4b:79:11:96:dc:01:78:20:77:46:0d:1d:
45:ec:74:f3:d1:51:07:9d:f4:e0:e9:2e:ff:17:8b:
14:91:2b:e9:a2:15:01:49:cc:09:4d:bc:79:14:3f:
29:27:43:50:31:7e:0a:7a:24:8c:54:0d:bf:3e:03:
2d:44:1a:79:ba:ad:92:e5:ab:91:e0:53:1b:a5:b6:
10:fb:10:44:37:b3:a1:c8:23:b7:99:ee:c6:60:f6:
96:83:fc:0a:7c:2e:77:51:3b:14:5c:56:6e:5b:0f:
5b:9c:a6:88:10:44:32:9f:11:8d:75:d0:60:3b:f6:
d2:3c:ad:96:86:89:d3:af:da:1d:dd:10:f0:14:4b:
a7:0a:cd:19:4e:a1:4b:96:65:c7:1e:4e:5b:21:38:
a3:3f:07:d7:69:a0:61:b0:ce:5a:0c:66:82:53:3b:
f2:d9:47:49:4c:08:0e:03:90:9f:d4:2b:ac:9e:5f:
8b:d6:26:be:9b:b2:4e:32:30:c0:9b:76:7e:a8:8c:
75:d4:78:f4:44:29:d7:2a:bc:be:97:93:21:1d:9c:
b5:ec:1e:d3:f6:07:51:f2:49:38:40:92:6a:70:c9:
b5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E6:20:BC:77:E6:5F:53:4A:AF:4E:1E:B9:C1:CF:08:2D:07:1A:FF
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/iOYgvHfmX1NKr04eucHPCC0HGv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.63.0/24
Signature Algorithm: sha256WithRSAEncryption
34:23:48:c2:ab:6f:b0:ef:27:21:e6:f8:89:51:fc:83:03:e3:
1d:2f:d0:a9:93:a5:ad:5b:77:b5:3b:c8:3b:5f:44:16:9f:58:
90:03:01:54:78:97:34:b8:bd:03:2d:ee:06:58:90:0a:df:8b:
00:c4:51:4f:6b:b4:d9:32:62:fe:89:6d:41:2d:6d:37:e3:47:
c0:43:10:85:44:8c:54:b4:35:3a:35:a0:45:51:22:ee:4d:07:
15:0a:d0:cd:29:27:72:11:2b:98:e6:31:db:aa:46:35:94:40:
bd:46:64:79:7a:e7:95:d9:52:54:bf:51:b5:da:13:6b:74:72:
e0:83:83:37:96:b4:8a:95:c6:78:3b:19:87:15:4a:37:6c:62:
2e:5f:40:bf:7a:ed:11:c5:2f:4e:2a:b2:e7:ae:99:98:de:9d:
41:8b:c4:7c:77:fd:b5:a2:0c:4d:6a:da:9d:3f:59:59:cc:64:
ff:de:ef:5f:c0:7d:08:99:ae:5b:10:e8:0e:b5:e7:0a:55:52:
d8:b9:7a:99:6b:11:e9:1c:9f:8d:c1:19:bd:67:94:ec:23:f9:
5c:41:85:bc:95:bf:b1:53:10:b3:bd:0a:db:12:e0:dc:c1:26:
7b:a1:4d:73:f4:a4:86:e9:96:49:b9:8e:78:75:6e:23:00:28:
14:25:9f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:03:05 2025 by rpki-client