Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/136e5a-ba1a-4ae3-a4c8-59e2fd4e380f/1/1mrzO7LFPTs89z877QNZbd8iJJs.roa
File: 1mrzO7LFPTs89z877QNZbd8iJJs.roa (raw, json)
Hash identifier: ZaJiaOuqCzl4irugmItRT9ovqwjd4yt7nvHfhrBw81Q=
Subject key identifier: D6:6A:F3:3B:B2:C5:3D:3B:3C:F7:3F:3B:ED:03:59:6D:DF:22:24:9B
Certificate issuer: /CN=674d89c8e9be52d956fc5b88a98a72be0699fdfd
Certificate serial: 01856F023B82A8BDFC1D572FA0DAB33A53FE
Authority key identifier: 67:4D:89:C8:E9:BE:52:D9:56:FC:5B:88:A9:8A:72:BE:06:99:FD:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z02JyOm-UtlW_FuIqYpyvgaZ_f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/136e5a-ba1a-4ae3-a4c8-59e2fd4e380f/1/1mrzO7LFPTs89z877QNZbd8iJJs.roa
Signing time: Sun 01 Jan 2023 20:24:55 +0000
ROA not before: Sun 01 Jan 2023 20:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57427
IP address blocks: 185.11.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:3b:82:a8:bd:fc:1d:57:2f:a0:da:b3:3a:53:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674d89c8e9be52d956fc5b88a98a72be0699fdfd
Validity
Not Before: Jan 1 20:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d66af33bb2c53d3b3cf73f3bed03596ddf22249b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:47:19:f3:d0:33:63:22:36:4e:12:db:63:69:
af:71:17:9f:c4:3a:9f:9a:f0:ea:f8:48:5f:a6:ea:
2f:30:00:df:7f:0e:87:64:24:4d:60:08:ce:a0:0e:
24:14:3b:72:00:01:53:32:6a:fc:05:05:13:3f:c4:
9f:5d:8e:4a:f0:9f:83:34:c5:50:55:22:2c:de:8b:
05:bc:f1:c1:58:31:b4:36:a0:e7:d0:ad:3f:15:ee:
2d:ac:c0:4c:07:f3:1f:54:99:e3:ec:d8:68:17:55:
aa:69:0d:1f:32:2e:ac:03:e1:8d:c9:ce:6f:65:0d:
38:11:01:77:fa:7f:f7:a3:10:41:d2:f7:cc:5d:97:
0c:be:64:e1:48:88:9e:7d:fc:53:46:b4:6d:70:06:
ff:d2:2a:13:be:d5:28:07:fe:31:b2:c0:b5:88:15:
3f:e3:33:ee:a7:7c:5a:bc:25:a1:b4:32:89:50:23:
44:ce:d1:1d:ee:4b:5d:c4:b4:23:1b:28:a0:25:41:
8c:90:68:d4:0b:ff:64:5d:08:ec:ae:0e:41:31:dd:
8f:49:05:58:9b:9e:64:63:c6:b6:10:26:62:e2:0e:
19:58:4f:16:07:ad:14:1b:49:f9:89:0b:4a:38:3d:
30:1a:58:7b:67:38:43:35:46:12:0c:47:10:85:65:
fc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6A:F3:3B:B2:C5:3D:3B:3C:F7:3F:3B:ED:03:59:6D:DF:22:24:9B
X509v3 Authority Key Identifier:
keyid:67:4D:89:C8:E9:BE:52:D9:56:FC:5B:88:A9:8A:72:BE:06:99:FD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z02JyOm-UtlW_FuIqYpyvgaZ_f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/136e5a-ba1a-4ae3-a4c8-59e2fd4e380f/1/1mrzO7LFPTs89z877QNZbd8iJJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/136e5a-ba1a-4ae3-a4c8-59e2fd4e380f/1/Z02JyOm-UtlW_FuIqYpyvgaZ_f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.61.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:f3:6d:1e:30:e0:fe:ef:90:e2:af:2e:9f:1b:cb:4b:9e:84:
19:9c:e9:67:16:65:13:4e:0e:23:3b:26:e2:27:4b:fa:94:db:
4c:46:b1:f8:5d:62:92:4d:b2:e8:90:fa:0e:74:82:16:d2:d7:
15:92:04:13:ff:96:e7:2a:62:12:15:53:32:7a:99:a8:48:0c:
e4:55:d9:be:67:3b:ea:45:d6:42:ef:39:f5:4e:fe:68:e2:b5:
fc:dd:53:dc:fb:10:33:fd:57:41:50:3f:66:d8:67:44:7c:a8:
a8:76:8e:d3:ce:de:7b:10:2d:b9:72:ef:85:8f:81:1b:61:3c:
5b:51:80:67:a0:f6:b1:bb:3d:d8:e4:c5:2e:d9:03:40:61:f2:
aa:76:7f:66:ad:91:fd:27:a1:fb:8b:00:32:fc:64:e9:f8:b6:
0a:0f:83:74:01:f7:a9:a2:63:bb:03:49:b8:b1:e5:88:20:54:
e6:e7:13:63:3b:9f:d3:2a:b4:ea:ff:fb:4f:5d:64:3e:67:18:
ef:3a:17:5a:a2:bd:3c:b4:12:a5:60:cd:fa:0c:87:d5:c0:a0:
20:c0:93:1a:78:18:ff:51:e0:95:0b:b3:50:1f:52:4a:34:98:
c3:3b:44:0a:6d:21:20:7e:be:2e:ae:0f:ff:51:f4:8c:13:59:
0d:35:a5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:53 2025 by rpki-client