Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/984602-4a90-4551-bf49-2edbdfaff47e/1/tlj8W2ogGEo5_nnv_irKQxToN6o.roa
File: tlj8W2ogGEo5_nnv_irKQxToN6o.roa (raw, json)
Hash identifier: YBabQ2kPNlS6qjsQp7p+HKOFydEBD9KhOGENnNnuj70=
Subject key identifier: B6:58:FC:5B:6A:20:18:4A:39:FE:79:EF:FE:2A:CA:43:14:E8:37:AA
Certificate issuer: /CN=647c0936487ec5d803e4d5a9a5100c4651f45437
Certificate serial: 01AE0237
Authority key identifier: 64:7C:09:36:48:7E:C5:D8:03:E4:D5:A9:A5:10:0C:46:51:F4:54:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHwJNkh-xdgD5NWppRAMRlH0VDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/984602-4a90-4551-bf49-2edbdfaff47e/1/tlj8W2ogGEo5_nnv_irKQxToN6o.roa
Signing time: Sat 01 Jan 2022 01:56:26 +0000
ROA not before: Sat 01 Jan 2022 01:56:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 185.64.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28181047 (0x1ae0237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=647c0936487ec5d803e4d5a9a5100c4651f45437
Validity
Not Before: Jan 1 01:56:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b658fc5b6a20184a39fe79effe2aca4314e837aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:22:ee:5b:23:59:2f:3a:70:70:5b:c3:d8:9a:
5c:3c:4f:98:6c:17:8f:6b:66:33:61:6c:b6:10:6c:
19:19:be:ef:53:79:db:d4:c0:f1:99:7e:21:8b:a9:
6f:44:2c:4b:f3:3b:51:65:a2:3c:f6:cd:65:e2:a4:
d4:7c:5a:fc:75:a7:6a:fb:94:80:d4:d1:88:f1:be:
5e:3b:af:6c:c4:fc:33:d8:19:99:5e:48:e0:a6:34:
84:18:30:87:54:7c:29:d2:9c:83:e6:0a:fe:7e:3f:
95:8c:e0:81:21:93:fd:60:76:03:47:e4:82:5f:af:
82:58:bc:14:bc:1a:35:58:ee:45:15:95:eb:c1:ef:
27:6c:83:dc:50:0d:ff:c9:7e:89:db:88:f6:22:1d:
18:c8:85:c9:3c:28:6e:18:26:65:65:ce:40:98:37:
83:90:70:52:84:18:a2:74:ad:77:b2:48:aa:45:4d:
2c:de:11:4e:e0:79:dd:31:fb:11:fd:bb:d9:ac:ef:
c3:ef:b2:bc:2b:c3:ac:f6:de:7f:c8:f8:e7:9f:2b:
77:1f:e0:64:e3:67:bd:8c:71:2b:5e:50:f1:5f:06:
e9:78:d7:26:52:17:c7:b5:07:91:ce:50:8b:a3:36:
a2:57:67:8c:ca:7a:95:d3:5a:5f:eb:7a:32:88:35:
4d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:58:FC:5B:6A:20:18:4A:39:FE:79:EF:FE:2A:CA:43:14:E8:37:AA
X509v3 Authority Key Identifier:
keyid:64:7C:09:36:48:7E:C5:D8:03:E4:D5:A9:A5:10:0C:46:51:F4:54:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHwJNkh-xdgD5NWppRAMRlH0VDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/984602-4a90-4551-bf49-2edbdfaff47e/1/tlj8W2ogGEo5_nnv_irKQxToN6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/984602-4a90-4551-bf49-2edbdfaff47e/1/ZHwJNkh-xdgD5NWppRAMRlH0VDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.78.0/24
Signature Algorithm: sha256WithRSAEncryption
00:fc:ea:4a:da:30:ed:1a:2c:db:22:9b:bc:1d:33:eb:dd:c0:
3a:4a:38:3c:ca:ef:c7:06:0e:95:74:aa:3c:02:c6:0f:1f:58:
ea:6c:1a:73:15:7c:50:0b:0f:c0:f3:ba:1f:85:33:fb:dc:3a:
90:89:7e:74:11:53:2e:3a:e5:b0:5f:4a:b4:70:3e:8d:bc:a5:
ce:0c:f7:6a:ac:ce:4c:fb:a2:b7:25:8a:f8:29:67:56:40:29:
39:b8:24:b9:1e:2d:1e:69:51:ea:c2:7c:e8:49:0b:04:29:0b:
b0:2c:23:8f:f5:e5:f3:bd:18:29:bb:a9:90:21:3d:4b:ea:09:
a3:65:23:ca:83:03:3f:a2:57:1e:59:cf:1c:2a:12:ba:a6:aa:
24:a8:5a:fd:8a:7c:4a:d0:1f:70:07:59:86:9d:2d:63:4e:f8:
1c:91:82:66:93:92:b8:37:3c:09:26:4e:c8:2e:ea:1c:6b:93:
76:42:cd:07:09:86:34:fb:7d:40:52:5e:4f:c7:e4:a5:7d:a3:
fa:09:89:06:08:80:6b:73:e5:e8:36:9c:5c:6d:75:f5:38:2c:
01:83:3d:12:b2:40:93:53:e8:0e:b3:10:7b:76:b1:21:63:72:
39:6a:21:93:8f:7a:d4:31:1d:3b:9b:67:5c:fa:9b:02:81:fc:
03:c5:4f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 06:16:10 2025 by rpki-client