Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8a76ab-c411-4eda-bff7-b146a1c71cac/1/zFJa7NIfiwqxt5Gg3df1_Q5qMrY.roa
File: zFJa7NIfiwqxt5Gg3df1_Q5qMrY.roa (raw, json)
Hash identifier: Sx+u+eWxx9u7+DaI1/1QfA/HTNpXDVMgHxZYV31rZio=
Subject key identifier: CC:52:5A:EC:D2:1F:8B:0A:B1:B7:91:A0:DD:D7:F5:FD:0E:6A:32:B6
Certificate issuer: /CN=5608eb3d7ca7681b21500445afca68b7cb164df3
Certificate serial: 0A2928CF
Authority key identifier: 56:08:EB:3D:7C:A7:68:1B:21:50:04:45:AF:CA:68:B7:CB:16:4D:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VgjrPXynaBshUARFr8pot8sWTfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8a76ab-c411-4eda-bff7-b146a1c71cac/1/zFJa7NIfiwqxt5Gg3df1_Q5qMrY.roa
Signing time: Sat 01 Jan 2022 00:56:57 +0000
ROA not before: Sat 01 Jan 2022 00:56:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43065
IP address blocks: 185.140.116.0/22 maxlen: 22
2a07:1c80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170469583 (0xa2928cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5608eb3d7ca7681b21500445afca68b7cb164df3
Validity
Not Before: Jan 1 00:56:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc525aecd21f8b0ab1b791a0ddd7f5fd0e6a32b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4f:e1:2e:c5:ac:2b:57:a7:77:84:6f:e2:65:
b0:e8:43:f3:3e:2e:5f:8c:ff:e2:18:46:2f:4f:a1:
48:bc:77:5a:e5:e8:cb:73:ed:82:25:f0:5e:7d:65:
93:08:64:dc:7f:f0:9e:4f:b0:a5:02:32:a5:6a:d9:
40:ca:fe:8e:9f:5e:6e:51:bd:66:45:da:07:8f:73:
cd:fb:70:5b:bc:73:cb:04:51:20:58:38:de:86:93:
da:fc:70:98:b6:aa:e4:13:30:15:0a:eb:e2:2c:32:
00:f2:15:b9:3e:2c:a3:36:ae:f8:ae:bb:e5:49:11:
f2:f3:31:aa:68:03:0f:c0:9a:cd:aa:dd:b1:2d:89:
db:c7:bc:4e:37:50:26:11:1e:4d:d4:57:26:73:14:
7b:69:5b:96:1b:f1:a0:1e:e2:d4:5d:a4:2f:b7:87:
be:87:bf:5c:a0:f1:05:a1:0f:15:6e:11:f0:d2:48:
92:be:1f:8d:93:64:78:5f:f8:0d:a8:e6:82:3b:88:
a8:b5:3c:75:f4:c2:9c:a1:d1:02:2a:05:39:50:9b:
a0:5c:4f:3b:88:85:ef:1c:14:fc:f8:d5:6f:de:02:
2e:df:b0:44:ed:7f:b0:a9:a4:cc:b6:2a:bf:59:40:
2d:85:0a:6f:96:19:09:ec:88:79:46:f0:bd:5d:de:
3f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:52:5A:EC:D2:1F:8B:0A:B1:B7:91:A0:DD:D7:F5:FD:0E:6A:32:B6
X509v3 Authority Key Identifier:
keyid:56:08:EB:3D:7C:A7:68:1B:21:50:04:45:AF:CA:68:B7:CB:16:4D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VgjrPXynaBshUARFr8pot8sWTfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8a76ab-c411-4eda-bff7-b146a1c71cac/1/zFJa7NIfiwqxt5Gg3df1_Q5qMrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8a76ab-c411-4eda-bff7-b146a1c71cac/1/VgjrPXynaBshUARFr8pot8sWTfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.116.0/22
IPv6:
2a07:1c80::/29
Signature Algorithm: sha256WithRSAEncryption
11:c1:1a:35:ec:87:5e:8e:d1:4f:a9:5e:5f:d3:58:33:05:a3:
9d:73:80:95:5d:67:76:9b:c2:59:dd:35:6e:fa:a7:3a:10:51:
13:47:f7:be:46:95:74:e0:db:2e:aa:97:19:c7:82:56:51:b9:
45:68:58:60:cb:83:aa:ee:80:6f:bc:52:4c:3d:0f:db:ac:35:
74:3f:9e:f1:75:09:34:83:b2:91:18:3b:23:17:e2:69:0a:c9:
cd:43:b9:64:77:4e:7b:db:af:35:55:87:e4:7e:69:52:d8:c5:
07:38:bc:a0:5a:86:91:7e:4d:86:b3:f0:d2:cc:0d:b9:d1:d3:
cf:ee:4f:83:35:97:8e:b5:ab:de:df:6c:74:a9:63:88:c4:c8:
92:db:60:20:32:15:fb:ca:31:a4:19:91:43:80:7e:24:aa:b7:
dc:aa:e6:aa:5c:03:60:81:bb:1b:3e:2a:28:db:f0:17:5b:8b:
91:41:32:e7:1f:ce:40:d4:e9:a6:1f:26:59:6d:7f:12:35:93:
78:4c:47:2f:5f:4c:42:29:44:43:1e:5b:b6:03:0f:0a:6c:66:
e2:f3:9c:45:82:74:db:bf:0a:ab:b3:44:11:69:0d:85:73:6b:
d0:a8:9c:a3:0e:41:64:9a:64:90:0f:8b:5f:a8:dd:64:03:29:
5c:56:b5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:52 2025 by rpki-client